Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS64515.roa
File:                     AS64515.roa (raw, json)
Hash identifier:          26vrj5MKzv6jQq6ZTlCXKmkhUIQ33IN2XavrxQOpGAs=
Subject key identifier:   E1:BD:2F:49:4F:C4:FC:36:CC:93:68:B1:2C:46:01:D1:CE:D7:7B:C0
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       3F658BBE24741DC49992CCA341F22D8A95DDE699
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS64515.roa
Signing time:             Fri 03 Jan 2025 17:18:49 +0000
ROA not before:           Fri 03 Jan 2025 17:13:49 +0000
ROA not after:            Fri 02 Jan 2026 17:18:49 +0000
asID:                     64515
IP address blocks:        2602:fed2:7129::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 23:13:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:65:8b:be:24:74:1d:c4:99:92:cc:a3:41:f2:2d:8a:95:dd:e6:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Jan  3 17:13:49 2025 GMT
            Not After : Jan  2 17:18:49 2026 GMT
        Subject: CN=E1BD2F494FC4FC36CC9368B12C4601D1CED77BC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a3:90:63:78:00:6d:9b:30:8d:10:b0:76:4f:
                    6e:3e:2a:e2:c1:a0:48:06:cc:5a:69:6e:71:3b:c9:
                    6b:5d:3c:5d:41:ba:5d:f6:0a:b5:5e:d6:94:a7:6b:
                    cf:fb:db:45:bc:82:3a:e4:1c:76:b0:81:ac:61:a8:
                    0b:93:76:1f:26:99:07:ce:a0:b9:32:ec:87:3b:c1:
                    93:cf:59:a3:16:97:b1:89:81:bc:14:7e:d9:e2:66:
                    8e:20:d5:fa:07:2b:09:61:ce:4d:52:62:1a:46:a0:
                    a4:aa:35:0b:6b:63:ca:19:cd:ce:47:6d:02:9a:df:
                    46:c9:1f:d3:5d:32:ff:78:3d:3d:30:26:6c:85:17:
                    07:7a:d6:40:d0:47:33:93:d0:01:f1:c5:36:f4:bd:
                    c3:30:21:b0:9c:cd:80:cd:e2:b9:4c:7a:75:49:f2:
                    bd:39:f3:80:f4:43:e4:05:5a:0f:57:d1:6b:51:7e:
                    3a:f7:dd:d8:22:df:55:f4:c6:91:18:12:68:2a:cd:
                    bb:6f:3c:60:bf:74:7b:80:c1:89:3d:87:7e:d1:cf:
                    30:21:12:eb:6b:19:74:56:8d:fc:9a:32:8c:bd:db:
                    b4:64:ec:b8:ff:f5:45:65:14:ef:49:42:32:94:28:
                    63:84:f6:7f:84:6d:c8:4a:3a:63:1c:8b:c4:50:e3:
                    07:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:BD:2F:49:4F:C4:FC:36:CC:93:68:B1:2C:46:01:D1:CE:D7:7B:C0
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS64515.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed2:7129::/48

    Signature Algorithm: sha256WithRSAEncryption
         87:83:4c:e2:65:08:24:14:14:9e:97:20:50:07:8a:37:67:81:
         a8:2c:69:00:4f:ff:54:ac:c3:43:59:34:27:14:b0:82:ba:75:
         6f:75:87:8f:a7:a9:dc:5b:81:62:59:89:cd:5a:8f:03:27:9d:
         67:2b:a7:b3:90:fe:42:2a:08:8f:39:62:22:1e:f3:77:f8:b7:
         be:bd:75:fc:4c:07:27:20:5b:c6:98:99:0e:61:76:08:93:13:
         71:41:19:aa:16:ef:e3:e2:e7:8e:77:67:63:65:17:e6:28:36:
         40:ac:f5:43:b8:9c:21:f3:c2:ab:d8:1a:41:38:9a:c7:0a:04:
         0c:24:46:b3:38:97:cb:01:e3:7a:2c:16:a2:24:a9:74:61:f1:
         b4:e9:3c:9c:69:7f:c3:08:88:1c:fe:5b:1a:e3:06:3e:34:99:
         45:49:c7:a1:01:6d:c5:de:75:d8:7e:85:35:12:0d:80:2d:35:
         2e:7c:b4:78:f2:1a:0d:91:17:ff:d9:30:15:c2:3d:47:10:bb:
         c4:a2:e8:a4:dc:9a:cf:ee:4c:56:4e:57:1b:43:cc:ea:70:d5:
         ff:fc:23:5f:5a:cc:3c:4c:39:fb:d2:9b:a2:93:41:a9:36:07:
         e2:cd:9c:32:94:b1:78:7f:af:b7:38:56:af:28:27:3f:58:dd:
         cc:bd:98:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:02:01 2025 by rpki-client