Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS20473.roa
File:                     AS20473.roa (raw, json)
Hash identifier:          u1RdMA+ftImLRXggy+qlDU/Q3IJEkRMv6YozA4jkA/I=
Subject key identifier:   32:14:99:58:25:6C:97:A1:04:47:5E:57:2B:A6:4E:A4:D3:BF:CE:87
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       1737F894ED78ECA05D496741C22CB4E90A605922
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS20473.roa
Signing time:             Mon 08 Jun 2026 22:13:00 +0000
ROA not before:           Mon 08 Jun 2026 22:08:00 +0000
ROA not after:            Mon 07 Jun 2027 22:13:00 +0000
asID:                     20473
IP address blocks:        2602:fed2:710e::/48 maxlen: 48
                          2602:fed2:710f::/48 maxlen: 48
                          2602:fed2:712c::/48 maxlen: 48
                          2602:fed2:719a::/48 maxlen: 48
                          2602:fed2:719c::/48 maxlen: 48
                          2602:fed2:719d::/48 maxlen: 48
                          2602:fed2:719e::/48 maxlen: 48
                          2602:fed2:730d::/48 maxlen: 48
                          2602:fed2:731c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:37:f8:94:ed:78:ec:a0:5d:49:67:41:c2:2c:b4:e9:0a:60:59:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Jun  8 22:08:00 2026 GMT
            Not After : Jun  7 22:13:00 2027 GMT
        Subject: CN=32149958256C97A104475E572BA64EA4D3BFCE87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:b1:f7:16:e8:b4:e3:43:0b:d6:63:bf:08:bc:
                    56:77:46:46:d2:94:b2:30:bf:d0:ed:b7:5b:cc:5d:
                    0b:a4:b8:09:de:1d:8b:e4:9e:5d:73:20:9b:ef:89:
                    19:fe:7f:98:0d:ec:35:f6:1e:3b:0e:26:35:46:33:
                    0d:3a:11:55:a2:99:b7:04:c8:75:25:6b:06:ac:16:
                    b6:a1:f6:72:68:4e:9a:87:7d:ab:e0:a7:c8:8a:d6:
                    dc:c3:02:93:c7:89:33:e1:5d:ab:ec:3d:e6:bd:b4:
                    ba:d5:b9:65:bc:e5:b9:29:a1:89:05:b1:a2:c0:a8:
                    e8:83:24:5b:ca:a6:d7:dc:e8:ee:6f:e8:ad:3e:ea:
                    d9:b8:61:3e:e9:13:86:de:33:8a:5c:a1:d1:2c:92:
                    dc:c2:bd:d7:16:c8:c4:0c:f9:f8:02:38:1c:90:1d:
                    b4:b8:90:f1:5d:5c:f6:b6:80:56:b1:3f:97:a0:7f:
                    60:51:b3:2b:93:e3:45:9b:7b:1a:50:a7:4e:ec:a9:
                    d0:9a:ea:fb:f4:cb:a8:49:6a:93:c9:aa:b5:5a:10:
                    ff:d6:61:80:e5:b2:a7:72:eb:56:be:29:c7:c9:8a:
                    63:40:ac:e3:82:a0:0f:80:94:36:2d:0c:87:6a:97:
                    80:63:34:90:1c:65:da:08:53:5a:dd:e4:19:04:3c:
                    9e:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:14:99:58:25:6C:97:A1:04:47:5E:57:2B:A6:4E:A4:D3:BF:CE:87
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS20473.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed2:710e::/47
                  2602:fed2:712c::/48
                  2602:fed2:719a::/48
                  2602:fed2:719c::-2602:fed2:719e:ffff:ffff:ffff:ffff:ffff
                  2602:fed2:730d::/48
                  2602:fed2:731c::/48

    Signature Algorithm: sha256WithRSAEncryption
         7a:a6:76:66:54:6e:46:15:b9:38:12:3c:eb:80:b2:a7:32:3e:
         b2:4d:d4:fe:79:af:da:80:b9:68:85:37:2f:1c:bc:d1:f7:74:
         8d:88:0e:8a:b1:af:13:d8:4c:c3:b5:02:cc:fa:5e:1e:c1:ff:
         cd:c4:ec:5b:d8:98:55:29:89:9d:3f:a5:72:ea:e2:89:1a:d1:
         91:ed:76:39:32:c9:c4:06:d8:06:bc:54:e2:c8:1a:1f:25:ea:
         f4:49:29:f6:e4:53:08:ad:93:4e:0c:bf:d5:45:e5:23:f1:65:
         60:50:53:00:db:ce:c1:47:7f:46:7d:6c:26:26:5f:88:7b:29:
         ee:c5:4a:ad:3b:08:83:2b:4f:d9:ba:e5:af:4e:31:b9:c0:11:
         ae:fd:7c:f4:18:8e:22:46:61:72:90:a5:49:fc:f8:34:10:9d:
         04:9a:d3:5d:fc:00:7f:e3:89:2f:31:9a:ac:b7:95:90:71:ac:
         8c:b3:dc:08:24:10:3b:29:77:98:cc:08:1b:aa:43:25:20:05:
         dc:89:50:00:d9:37:37:2a:ee:f3:2b:77:ec:fc:77:d0:07:3f:
         97:24:0b:e6:ed:a0:8b:02:72:66:c4:da:31:31:fa:09:45:ba:
         45:52:19:c9:4f:9a:f8:f0:a1:63:17:c7:b2:8d:8d:ad:36:b7:
         70:48:99:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:10:40 2026 by rpki-client