Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS46573.roa
File:                     AS46573.roa (raw, json)
Hash identifier:          fGRA5J+21jxi6NhHTKGXSW5ztxImWwHVs2b8CnJpgNA=
Subject key identifier:   89:A6:A1:F4:89:74:52:7B:02:EC:DB:59:D0:37:FC:FB:50:8F:D3:1C
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       0AAFB7D0EC0499582C39E0C4D1531976D4A7A323
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS46573.roa
Signing time:             Thu 06 Nov 2025 16:04:58 +0000
ROA not before:           Thu 06 Nov 2025 15:59:58 +0000
ROA not after:            Thu 05 Nov 2026 16:04:58 +0000
asID:                     46573
IP address blocks:        2602:fed2:708f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 08 Nov 2025 11:47:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:af:b7:d0:ec:04:99:58:2c:39:e0:c4:d1:53:19:76:d4:a7:a3:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Nov  6 15:59:58 2025 GMT
            Not After : Nov  5 16:04:58 2026 GMT
        Subject: CN=89A6A1F48974527B02ECDB59D037FCFB508FD31C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:69:f1:e0:08:3c:4b:8f:61:84:6e:35:c7:16:
                    5b:3c:04:73:ee:21:53:5b:ef:1f:f0:ef:59:85:d5:
                    f4:3d:82:f0:8f:c0:aa:e7:70:33:60:74:8e:31:10:
                    25:cd:f9:1e:de:80:b6:b0:27:55:05:b0:45:69:23:
                    59:66:65:04:c7:9c:97:05:00:39:b0:e4:97:b0:2c:
                    36:8d:d1:a9:af:3e:02:1e:18:af:ca:83:93:b7:8a:
                    5b:21:05:6d:29:89:25:e9:c2:3c:e3:9e:7d:6a:1e:
                    ce:9c:0d:7c:e7:2b:41:6f:fd:0d:82:88:bd:9d:a0:
                    ea:97:a7:91:df:01:12:08:ed:7b:1b:f2:51:bf:1a:
                    45:93:42:e9:97:95:1b:53:9b:3b:4e:92:5c:34:b1:
                    8a:61:5f:82:34:a2:a7:ef:c9:cb:0a:72:21:4d:ad:
                    10:d0:81:56:79:a2:0d:fd:07:3a:92:1d:87:48:d3:
                    d9:58:75:52:58:31:66:1d:ad:97:40:44:97:ef:5f:
                    03:99:dc:06:36:8e:78:b1:dd:90:8b:08:a4:35:0e:
                    55:c1:70:c8:fe:ba:be:f7:6f:4a:08:c9:d8:be:e3:
                    d5:d0:bd:df:fa:98:f1:9e:41:73:8d:8f:2d:83:e4:
                    56:58:fb:ef:53:87:89:7c:4a:ca:04:85:8f:d2:48:
                    b1:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:A6:A1:F4:89:74:52:7B:02:EC:DB:59:D0:37:FC:FB:50:8F:D3:1C
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS46573.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed2:708f::/48

    Signature Algorithm: sha256WithRSAEncryption
         76:4b:b0:06:a2:13:ac:a0:66:5b:92:d6:d3:56:40:7f:04:f8:
         6e:0d:05:b5:70:b7:34:8e:9b:da:0f:36:29:f5:a8:2c:ab:88:
         b7:14:57:7f:5b:45:2d:fb:ad:c4:9c:f6:cc:6c:f0:9f:6a:46:
         c6:7d:7d:51:48:9e:c8:2d:83:a9:6e:68:fc:fd:07:d2:9e:1b:
         62:35:fc:26:c3:65:ea:9a:c4:57:bc:ce:da:b3:b5:1f:af:fd:
         ef:a2:67:22:1c:00:16:8d:a5:3b:f7:38:7c:20:c7:8e:34:c9:
         5c:fa:54:cd:c1:92:4f:47:eb:fa:96:94:6b:58:48:5e:df:91:
         49:b5:f4:c4:e1:67:be:ad:99:7c:a6:3d:16:ce:fb:65:3a:4a:
         32:c2:6d:7d:c1:13:17:f0:cc:21:28:9f:33:5b:35:fa:b8:cf:
         78:39:18:79:89:59:50:ad:a8:cc:c0:11:ce:14:9b:45:56:3b:
         f7:6d:be:a5:be:89:c9:d0:4b:74:ea:2e:0d:e9:8a:6b:8e:0c:
         9b:be:85:1e:49:be:fa:7e:24:13:f7:78:46:ea:51:28:fc:93:
         59:d1:0f:15:16:d9:0e:c2:7c:77:da:a0:6d:97:74:64:18:85:
         c7:7a:8f:4e:83:5c:ec:02:32:c8:84:98:00:86:85:dc:a4:ac:
         f3:1e:0c:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 7 09:49:38 2025 by rpki-client