Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS20473.roa
File:                     AS20473.roa (raw, json)
Hash identifier:          04nVIT0QLRdExGU72VhuEra4Cr7hasaArT1FdtLj5vY=
Subject key identifier:   BB:4C:E1:01:DE:BC:F1:2A:6A:F4:C2:05:03:F3:BB:DF:B4:DC:41:FC
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       482450DA95C1E40DC30DEE112734BB496A2DEF5F
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS20473.roa
Signing time:             Sat 07 Jun 2025 16:43:36 +0000
ROA not before:           Sat 07 Jun 2025 16:38:36 +0000
ROA not after:            Sat 06 Jun 2026 16:43:36 +0000
asID:                     20473
IP address blocks:        2602:fed2:710e::/48 maxlen: 48
                          2602:fed2:710f::/48 maxlen: 48
                          2602:fed2:7110::/48 maxlen: 48
                          2602:fed2:719a::/48 maxlen: 48
                          2602:fed2:719c::/48 maxlen: 48
                          2602:fed2:719e::/48 maxlen: 48
                          2602:fed2:730d::/48 maxlen: 48
                          2602:fed2:7316::/48 maxlen: 48
                          2602:fed2:731c::/48 maxlen: 48
                          2602:fed2:7e81::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 14:46:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:24:50:da:95:c1:e4:0d:c3:0d:ee:11:27:34:bb:49:6a:2d:ef:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Jun  7 16:38:36 2025 GMT
            Not After : Jun  6 16:43:36 2026 GMT
        Subject: CN=BB4CE101DEBCF12A6AF4C20503F3BBDFB4DC41FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:b0:2d:5a:5c:71:58:15:67:a5:28:3f:85:6e:
                    15:3f:01:cd:7a:3d:c4:d0:d5:db:9d:53:8e:4d:c9:
                    82:4d:28:19:da:5f:32:f6:48:3f:cd:d2:33:5e:56:
                    49:36:6e:9f:78:cc:09:87:1f:51:db:3a:91:33:11:
                    97:14:c8:14:69:9a:25:34:9d:48:b1:e9:09:e0:64:
                    e0:eb:6a:40:25:69:b1:03:50:76:96:ea:c9:61:2e:
                    3b:45:bc:da:a6:2b:07:e5:8c:fc:eb:df:d8:0c:07:
                    c0:77:09:66:92:99:0b:c5:d5:fa:53:82:10:55:c2:
                    08:b7:39:f2:7a:8d:d6:dc:e6:74:03:91:a9:c3:e9:
                    91:ff:5d:d6:2d:2e:fc:05:ae:5f:ef:b1:a7:c3:ef:
                    79:03:8a:3b:49:95:1c:06:dc:d2:11:87:b6:f3:1b:
                    84:7c:a9:d6:b4:ab:f4:96:c6:99:fb:44:ef:81:0c:
                    ec:0b:ff:33:a9:a6:dc:19:1a:43:3a:6d:04:f1:de:
                    c8:89:97:84:46:da:c0:13:1f:f1:d1:2d:e7:7c:e7:
                    b4:a1:2b:86:7a:57:26:ca:79:ed:21:86:a5:fd:00:
                    cc:90:08:db:40:f7:19:f9:8f:89:f1:27:8a:f9:a0:
                    60:c2:dd:40:fe:14:bc:f0:90:df:b9:bd:d5:0a:b9:
                    b1:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:4C:E1:01:DE:BC:F1:2A:6A:F4:C2:05:03:F3:BB:DF:B4:DC:41:FC
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS20473.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed2:710e::-2602:fed2:7110:ffff:ffff:ffff:ffff:ffff
                  2602:fed2:719a::/48
                  2602:fed2:719c::/48
                  2602:fed2:719e::/48
                  2602:fed2:730d::/48
                  2602:fed2:7316::/48
                  2602:fed2:731c::/48
                  2602:fed2:7e81::/48

    Signature Algorithm: sha256WithRSAEncryption
         11:57:70:35:b3:3c:9a:34:79:49:a5:d8:e2:87:a3:64:5d:93:
         fb:bb:a6:75:f3:79:4b:76:cc:d5:db:10:79:4e:bb:f4:f5:99:
         48:31:43:79:eb:c6:0f:9d:34:72:56:37:9e:65:58:d4:9b:f1:
         ef:62:16:6d:b1:05:d0:7f:62:9e:50:fc:eb:89:8e:57:2c:4f:
         f5:21:30:ca:ac:5b:48:b9:c0:8d:fd:7f:b0:94:00:59:0a:e2:
         31:70:50:f4:44:76:39:ed:b3:23:35:3e:f0:b7:1c:3e:3b:a6:
         91:f4:de:36:cd:f2:c5:a2:27:e4:70:60:f8:eb:a2:b0:a1:c1:
         09:c6:ac:35:73:c1:28:1a:f1:bb:ed:e2:3d:94:2e:71:df:96:
         5d:6a:31:24:9b:b7:b0:ed:08:ab:d0:f1:2f:22:71:7f:11:eb:
         fb:03:b5:1b:cb:34:66:83:8d:0b:a3:99:82:70:85:5c:13:c8:
         ab:0a:97:80:cc:40:63:2b:0e:6a:52:83:f2:e7:5d:3b:1d:2e:
         57:39:2e:2e:5a:fa:ae:10:11:76:a4:86:ae:52:79:3a:fe:94:
         25:78:46:8e:dd:a0:d8:f5:98:be:97:41:c1:b7:3e:11:91:1e:
         b5:53:38:fa:4c:40:ac:16:a6:f5:4d:61:d4:8d:5e:36:2d:5e:
         2a:32:e2:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 13:52:31 2025 by rpki-client