Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS22295.roa
File:                     AS22295.roa (raw, json)
Hash identifier:          aPFbmnQzd6nEkn7Rc7zLhjIggT9GgpviBcv3KAHAUIc=
Subject key identifier:   3A:87:B2:BB:8A:53:1A:F5:36:71:5B:E0:8F:3C:9E:49:F8:E1:32:59
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       5CB87D24D4AC93A491C43BA21D16CBDFD365717D
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS22295.roa
Signing time:             Thu 31 Jul 2025 16:46:04 +0000
ROA not before:           Thu 31 Jul 2025 16:41:04 +0000
ROA not after:            Thu 30 Jul 2026 16:46:04 +0000
asID:                     22295
IP address blocks:        2602:fed2:731b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 19:08:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:b8:7d:24:d4:ac:93:a4:91:c4:3b:a2:1d:16:cb:df:d3:65:71:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Jul 31 16:41:04 2025 GMT
            Not After : Jul 30 16:46:04 2026 GMT
        Subject: CN=3A87B2BB8A531AF536715BE08F3C9E49F8E13259
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:7a:69:37:e4:0d:64:a3:96:1e:14:02:c8:9d:
                    c4:44:4a:ec:cd:e4:a5:5e:2a:d8:bd:b4:40:f2:46:
                    52:a6:93:c2:fd:00:d5:90:39:98:be:be:f0:a3:0b:
                    98:b9:52:ea:3d:75:b6:78:98:57:b0:2e:b3:dd:f7:
                    4d:b0:ce:7f:89:2c:37:27:b0:56:78:e2:79:99:18:
                    3f:84:bb:79:a4:eb:cc:25:5a:75:34:30:a5:98:c1:
                    03:4f:c5:cd:03:91:67:0f:46:46:16:0f:4a:80:34:
                    91:b7:3e:e1:35:cd:b9:8b:70:45:90:e2:8d:88:29:
                    02:98:36:b7:d5:b4:76:3c:bf:1e:2e:79:9d:b0:e4:
                    90:e7:47:4b:f3:2c:06:b7:22:a1:e1:89:17:c2:20:
                    dd:d5:6a:aa:72:1f:2f:e2:7b:fd:9e:46:ad:7f:60:
                    7e:64:77:94:dc:e5:1d:64:2a:ba:fa:fb:f2:0e:c6:
                    95:51:f6:36:fc:17:70:3c:f0:2f:77:8c:3b:75:db:
                    43:94:70:1c:31:2c:3c:bf:be:2f:62:f3:6c:81:62:
                    8a:e1:d7:9a:01:8b:5f:15:25:10:b5:b2:ad:0c:30:
                    0f:f7:f2:57:89:b2:d5:4c:99:2a:87:ce:7f:81:7f:
                    19:83:3d:2c:dd:85:ef:4c:9f:24:c3:bc:60:bc:29:
                    89:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:87:B2:BB:8A:53:1A:F5:36:71:5B:E0:8F:3C:9E:49:F8:E1:32:59
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS22295.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed2:731b::/48

    Signature Algorithm: sha256WithRSAEncryption
         bf:82:8c:16:e1:bb:3d:7c:14:9c:ef:84:d1:65:09:fe:b0:ed:
         24:ae:29:70:c5:62:df:d8:e8:97:40:6c:fa:5b:db:99:7f:26:
         60:36:5a:06:e1:39:2c:6e:1e:71:18:c1:a3:02:da:80:76:5d:
         15:d9:af:2c:e0:cb:9a:37:8a:c1:9c:98:3b:cd:bb:0c:c8:e5:
         5e:93:aa:41:93:5e:e4:21:82:04:2e:36:a4:d5:39:c2:7b:5f:
         92:2a:fd:28:4f:d3:b3:74:08:55:f0:c3:68:fa:c5:5a:35:0d:
         16:6f:8f:9b:2b:6c:82:91:67:00:30:60:9d:6d:7e:1b:fa:6f:
         ed:c3:76:0e:38:b5:fb:a2:16:bc:68:fe:20:07:e6:a8:e9:5a:
         8b:2c:79:c4:06:db:b8:1e:04:04:86:19:ce:47:81:a7:b4:af:
         a8:82:de:7b:68:e8:9f:ec:ff:8c:20:d4:b3:6e:66:4b:27:da:
         21:da:88:ea:62:d0:ba:9b:fd:06:59:6a:88:39:ef:1c:51:71:
         6c:c6:13:f5:b0:33:96:78:8a:32:92:3b:31:c7:dc:e5:97:c9:
         5c:7f:68:a6:ac:a6:45:ef:e7:d5:5f:df:9d:0d:19:0b:d1:97:
         5a:7c:99:80:c4:20:1b:71:96:80:b6:8b:19:ef:d4:3f:5e:27:
         a7:fc:a3:59
-----BEGIN CERTIFICATE-----
MIIFWDCCBECgAwIBAgIUXLh9JNSsk6SRxDuiHRbL39NlcX0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZmQ3N2Y1NWVmZTNhOTNjNTNjYTNkYzhhNmY4Mzc0ZmU3
MGZlYzU1NjdkZDFlOGM4NTUwHhcNMjUwNzMxMTY0MTA0WhcNMjYwNzMwMTY0NjA0
WjAzMTEwLwYDVQQDEygzQTg3QjJCQjhBNTMxQUY1MzY3MTVCRTA4RjNDOUU0OUY4
RTEzMjU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA33ppN+QNZKOW
HhQCyJ3ERErszeSlXirYvbRA8kZSppPC/QDVkDmYvr7wowuYuVLqPXW2eJhXsC6z
3fdNsM5/iSw3J7BWeOJ5mRg/hLt5pOvMJVp1NDClmMEDT8XNA5FnD0ZGFg9KgDSR
tz7hNc25i3BFkOKNiCkCmDa31bR2PL8eLnmdsOSQ50dL8ywGtyKh4YkXwiDd1Wqq
ch8v4nv9nkatf2B+ZHeU3OUdZCq6+vvyDsaVUfY2/BdwPPAvd4w7ddtDlHAcMSw8
v74vYvNsgWKK4deaAYtfFSUQtbKtDDAP9/JXibLVTJkqh85/gX8Zgz0s3YXvTJ8k
w7xgvCmJqwIDAQABo4ICWDCCAlQwHQYDVR0OBBYEFDqHsruKUxr1NnFb4I88nkn4
4TJZMB8GA1UdIwQYMBaAFMiTX9ylAoroIJ/sgq2K6M+3xud2MA4GA1UdDwEB/wQE
AwIHgDBxBgNVHR8EajBoMGagZKBihmByc3luYzovL3Jwa2kuYWRtaW4uZnJlZXJh
bmdlY2xvdWQuY29tL3JlcG8vRlJDLUNBLzAvQzg5MzVGRENBNTAyOEFFODIwOUZF
QzgyQUQ4QUU4Q0ZCN0M2RTc3Ni5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYw
YzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzZlNWQ5NjExLWZkMzMt
NDg4Yy05YWVjLWY0ZGYyYTI1MzUxZS9mZDc3ZjU1ZWZlM2E5M2M1M2NhM2RjOGE2
ZjgzNzRmZTcwZmVjNTU2N2RkMWU4Yzg1NS5jZXIwWwYIKwYBBQUHAQsETzBNMEsG
CCsGAQUFBzALhj9yc3luYzovL3Jwa2kuYWRtaW4uZnJlZXJhbmdlY2xvdWQuY29t
L3JlcG8vRlJDLUNBLzAvQVMyMjI5NS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACYC/tJzGzANBgkqhkiG
9w0BAQsFAAOCAQEAv4KMFuG7PXwUnO+E0WUJ/rDtJK4pcMVi39jol0Bs+lvbmX8m
YDZaBuE5LG4ecRjBowLagHZdFdmvLODLmjeKwZyYO827DMjlXpOqQZNe5CGCBC42
pNU5wntfkir9KE/Ts3QIVfDDaPrFWjUNFm+PmytsgpFnADBgnW1+G/pv7cN2Dji1
+6IWvGj+IAfmqOlaiyx5xAbbuB4EBIYZzkeBp7SvqILee2jon+z/jCDUs25mSyfa
IdqI6mLQupv9BllqiDnvHFFxbMYT9bAzlniKMpI7Mcfc5ZfJXH9opqymRe/n1V/f
nQ0ZC9GXWnyZgMQgG3GWgLaLGe/UP14np/yjWQ==
-----END CERTIFICATE-----
Generated at Mon Aug 4 21:46:12 2025 by rpki-client