Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS54625.roa
File:                     AS54625.roa (raw, json)
Hash identifier:          Duf36dmkgABjTDF/huTiGROJngPMSOKAMO3k8IjUkUw=
Subject key identifier:   FA:E1:6D:D7:5D:0B:F7:5E:DA:70:8D:89:9F:FF:60:32:6C:10:65:9D
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       40BDC62DE1968720CEE30E1DC0D9F49038103D5D
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS54625.roa
Signing time:             Wed 04 Jun 2025 04:14:48 +0000
ROA not before:           Wed 04 Jun 2025 04:09:48 +0000
ROA not after:            Wed 03 Jun 2026 04:14:48 +0000
asID:                     54625
IP address blocks:        2602:fed2:7e86::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 03:10:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:bd:c6:2d:e1:96:87:20:ce:e3:0e:1d:c0:d9:f4:90:38:10:3d:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Jun  4 04:09:48 2025 GMT
            Not After : Jun  3 04:14:48 2026 GMT
        Subject: CN=FAE16DD75D0BF75EDA708D899FFF60326C10659D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:dc:8b:c5:00:bc:87:11:c1:86:da:35:9a:e7:
                    85:b8:a0:6f:d3:53:84:56:62:d1:e0:7c:33:8d:ae:
                    ab:c1:34:1e:6a:68:18:c4:16:81:f8:78:34:95:d4:
                    f4:3d:d5:19:78:05:75:d5:7f:22:bc:15:50:4b:4d:
                    c9:6b:54:ae:c9:6b:a3:d3:27:9f:71:1a:fc:8e:85:
                    6c:7a:d2:a8:37:e4:e1:f9:70:8b:9f:29:3c:a0:1a:
                    d3:f9:ca:9b:c2:68:6a:70:b3:88:15:e5:72:51:ab:
                    0d:64:67:a6:83:78:e7:9c:ae:db:c3:80:4d:61:71:
                    f0:3f:79:a4:30:a1:6b:1a:b2:9c:e1:1c:e7:b4:19:
                    69:dd:39:5f:9f:c8:42:e2:4c:6c:dc:60:87:f5:4e:
                    de:3b:4d:67:7b:86:d9:a4:80:86:f5:10:c9:46:37:
                    b8:c4:7b:3a:23:8c:bd:da:a4:da:7d:8e:6a:2f:dd:
                    be:c4:a4:59:58:80:fd:4e:84:43:57:4f:40:94:b6:
                    af:95:b7:a5:d8:d3:48:8b:48:9e:e8:b5:aa:f7:dc:
                    45:67:84:90:a6:87:a4:99:b4:e7:8f:26:71:67:c3:
                    6f:64:67:5f:20:73:0b:9a:0c:48:e8:9e:61:c1:42:
                    50:50:a1:d6:27:e1:72:ae:42:ac:f1:b2:a2:de:49:
                    20:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:E1:6D:D7:5D:0B:F7:5E:DA:70:8D:89:9F:FF:60:32:6C:10:65:9D
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS54625.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed2:7e86::/48

    Signature Algorithm: sha256WithRSAEncryption
         a2:8d:42:79:be:13:67:0b:74:fc:b1:25:9e:6b:8e:24:7b:e3:
         79:36:90:ae:b7:8b:ad:bc:67:a2:09:c0:39:b7:7c:4c:a2:55:
         48:06:76:30:ff:88:56:af:2d:ea:4c:e7:0e:7f:a5:c5:d3:f6:
         06:79:a4:11:f0:33:93:5c:38:e3:22:6a:09:f5:54:c5:69:d6:
         f2:79:8e:32:ae:26:34:ff:ea:b3:d8:78:36:24:64:3f:1d:65:
         8e:af:72:dd:5a:b5:a8:e6:d0:47:e8:99:33:72:d0:f8:37:41:
         00:8f:d5:9e:ad:1f:09:a8:2a:fb:ee:ee:db:e2:f7:ac:93:64:
         0b:6d:60:d6:cb:e0:2a:f5:57:aa:d6:93:33:9a:cf:57:40:b7:
         e4:11:5f:2c:a8:eb:dc:1e:9f:34:89:9e:f3:b1:3f:59:bc:c7:
         2d:3c:dd:c8:2a:16:95:f6:1e:21:b5:5a:f0:0b:0c:38:63:7d:
         3b:e3:8a:db:0d:bc:65:a5:82:fa:95:c2:7a:15:dc:95:e6:b4:
         fa:87:7c:6f:05:07:ba:f3:02:46:af:bf:4f:2e:69:94:e4:8d:
         ef:a4:67:66:10:d6:40:ef:08:d0:be:62:a8:0f:68:81:36:d7:
         19:de:49:5f:b3:38:16:06:a6:26:f2:28:c0:c5:bc:b1:c8:18:
         ad:c0:70:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 04:01:25 2025 by rpki-client