Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS150863.roa
File:                     AS150863.roa (raw, json)
Hash identifier:          TaFCh9tzvW5usiI/utUg2OyIrQmSKcAY5bgqwMGeeEo=
Subject key identifier:   13:18:04:0C:F4:FC:CE:D7:F3:FD:EA:C0:0A:DC:8F:2D:07:E9:BE:B9
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       72E40AF7D5D1712F18631361C74546B17A90170F
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS150863.roa
Signing time:             Sat 26 Jul 2025 06:31:16 +0000
ROA not before:           Sat 26 Jul 2025 06:26:16 +0000
ROA not after:            Sat 25 Jul 2026 06:31:16 +0000
asID:                     150863
IP address blocks:        2602:fed2:7044::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 19:08:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:e4:0a:f7:d5:d1:71:2f:18:63:13:61:c7:45:46:b1:7a:90:17:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Jul 26 06:26:16 2025 GMT
            Not After : Jul 25 06:31:16 2026 GMT
        Subject: CN=1318040CF4FCCED7F3FDEAC00ADC8F2D07E9BEB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:a2:10:d4:38:6d:8b:22:18:72:73:84:ae:c7:
                    91:a1:59:7b:6f:a8:3f:3d:91:a6:d7:f7:a5:59:4f:
                    fa:7a:4f:24:59:b1:f0:4b:9f:c1:12:78:55:2a:65:
                    15:cf:ed:f3:d6:fd:b7:a2:55:7f:9e:22:6d:65:71:
                    e9:ed:5b:90:c3:ed:22:36:8d:c0:b9:2c:6b:7b:ed:
                    01:4f:54:32:8d:93:1e:bd:6a:c4:a7:92:68:e3:a3:
                    1f:54:ac:ce:2d:68:96:f0:1c:d1:a3:d5:35:51:b1:
                    b1:e7:62:63:91:d1:b9:23:2e:78:f4:87:0a:2c:b5:
                    df:12:da:55:a7:b2:7e:e8:be:42:d0:30:96:68:e4:
                    62:c7:f7:e9:10:8f:65:8b:f4:01:87:e6:d9:0c:91:
                    ec:58:52:1d:5e:75:39:69:c0:b0:eb:80:54:43:91:
                    52:30:11:5e:59:59:62:66:da:6c:a1:b4:e1:00:56:
                    c0:e3:7e:f8:09:a6:89:ec:6d:ed:b0:fb:f4:23:e6:
                    0b:7d:e3:81:41:1c:51:e2:62:93:09:aa:5e:36:2f:
                    ed:34:5c:34:a4:d2:d3:75:c5:63:4e:cf:cc:eb:17:
                    da:6b:d1:d0:51:1f:c3:9a:5f:2c:7d:b4:06:90:b6:
                    61:b9:d7:d4:7e:3f:e7:b7:f1:a0:77:04:4b:a7:9e:
                    63:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:18:04:0C:F4:FC:CE:D7:F3:FD:EA:C0:0A:DC:8F:2D:07:E9:BE:B9
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS150863.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed2:7044::/48

    Signature Algorithm: sha256WithRSAEncryption
         3a:e4:33:8f:e8:0c:26:f0:6a:7d:10:0e:b8:66:17:2f:16:47:
         ab:af:8e:04:17:23:41:d6:64:f4:26:d8:9e:90:56:b7:89:91:
         a3:c3:e2:3d:ec:d1:1c:bc:d9:83:c6:5f:ee:a5:34:3b:39:68:
         80:bf:09:07:7b:d8:d4:9e:8c:9f:00:f9:a8:cc:02:b9:c7:78:
         d1:d8:0e:dc:5f:94:a0:75:76:0a:8f:f2:79:27:71:7e:37:02:
         89:6f:60:c2:6d:98:ce:da:12:2f:ae:6e:8d:10:d9:76:d2:51:
         f2:41:46:c5:6a:20:90:77:87:9c:77:c5:42:54:95:f5:20:44:
         a6:50:fc:a3:f8:cc:7f:9c:28:cb:9d:0e:21:63:8f:ae:05:4c:
         04:03:55:23:7e:c0:76:88:92:72:9d:90:14:46:6b:a0:af:b4:
         cc:dd:d4:0c:dc:b3:16:5c:49:89:12:19:0e:5e:fc:d5:8d:58:
         4c:17:5e:d1:2f:ba:63:6f:21:54:b9:2e:d2:37:97:1a:01:c6:
         c0:e1:63:b6:10:0b:3d:31:b7:02:dc:72:1a:3b:46:4f:eb:56:
         11:14:94:9f:27:1f:01:c1:05:4c:86:d3:f5:ea:d2:33:41:bc:
         8c:0a:66:d1:c7:34:fc:67:8e:f5:f2:38:c0:51:c6:0b:e4:40:
         9e:42:ad:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 21:43:28 2025 by rpki-client