Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS25846.roa
File:                     AS25846.roa (raw, json)
Hash identifier:          kzUkuOhNENjkNdUjfYbFyQAdalxyoHELKwo/H0UPHf8=
Subject key identifier:   25:E3:BA:1C:22:65:74:B7:C8:D4:A5:21:C9:D7:6B:C5:3E:40:99:47
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       5FC928FB4E70DD829BA153040C8AA850470090DC
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS25846.roa
Signing time:             Tue 22 Jul 2025 09:23:24 +0000
ROA not before:           Tue 22 Jul 2025 09:18:24 +0000
ROA not after:            Tue 21 Jul 2026 09:23:24 +0000
asID:                     25846
IP address blocks:        2602:fed2:770a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 02:44:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:c9:28:fb:4e:70:dd:82:9b:a1:53:04:0c:8a:a8:50:47:00:90:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Jul 22 09:18:24 2025 GMT
            Not After : Jul 21 09:23:24 2026 GMT
        Subject: CN=25E3BA1C226574B7C8D4A521C9D76BC53E409947
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e8:c5:31:fb:20:28:93:45:ae:cb:4f:4f:18:
                    8e:0d:31:14:f4:f7:e3:0f:02:b7:2d:8b:69:e8:43:
                    4a:e3:36:81:18:0d:c2:e5:fa:fb:8b:61:89:9e:63:
                    72:ab:8f:7a:04:4b:c5:89:b1:37:2b:e1:cf:e3:07:
                    fe:d6:71:2e:81:eb:ca:5d:8e:d3:20:ac:05:20:53:
                    ba:9f:06:c9:74:2e:e3:ad:fa:32:02:2c:79:9d:2f:
                    94:81:53:cf:72:52:2c:61:5c:0f:36:e4:f5:d5:e5:
                    a7:bd:72:44:a2:19:69:03:7a:fa:67:27:e7:61:7d:
                    fb:5b:70:89:94:4d:a0:36:c7:0c:d9:e0:48:06:86:
                    c6:4e:63:46:fd:5a:93:0f:49:2b:95:ac:02:3f:a5:
                    ae:aa:e0:24:14:3c:88:f8:53:10:42:04:e1:de:be:
                    e6:88:f8:2f:1a:dd:00:7c:3a:dd:fb:c2:52:4d:68:
                    68:52:0f:5d:da:1b:b3:c2:b9:dc:64:4f:33:e4:45:
                    21:30:17:da:5e:69:59:6d:b6:4f:19:79:7f:a3:89:
                    69:71:9e:2f:4a:59:8e:b1:31:13:47:bc:1c:2c:1b:
                    e9:7b:a4:5d:29:5f:25:87:ea:55:75:74:20:33:ea:
                    27:71:ce:8a:83:9a:d2:48:61:6e:fd:b7:a0:5a:25:
                    60:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:E3:BA:1C:22:65:74:B7:C8:D4:A5:21:C9:D7:6B:C5:3E:40:99:47
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS25846.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed2:770a::/48

    Signature Algorithm: sha256WithRSAEncryption
         5d:7c:e5:b6:4f:b5:aa:f6:dc:d1:a4:b0:76:ed:c4:f8:d2:ab:
         b8:24:eb:e9:34:24:05:e1:26:91:87:ba:b4:f8:50:20:6b:07:
         19:21:9d:e1:18:a8:15:f9:2f:9e:09:8f:42:62:01:97:d6:7a:
         a0:89:b8:b9:35:ee:74:42:89:8b:b6:76:be:02:fb:42:8b:1b:
         28:ef:81:75:be:64:96:6c:14:96:c8:d8:53:7d:f2:d5:a3:35:
         8d:f2:77:34:7e:f7:50:72:3f:96:77:75:c6:62:1a:f1:48:aa:
         35:b0:47:31:18:cb:db:c1:55:e8:49:08:f8:4e:9c:3d:91:dd:
         0a:9c:eb:d6:82:78:64:f3:1a:94:60:6a:a7:05:f1:38:c9:99:
         38:9e:be:f0:7a:d6:6d:51:73:a0:ee:6b:91:6d:67:a8:20:bb:
         b7:e3:22:75:a7:83:b3:41:5a:04:c1:d7:d3:5b:74:f0:ee:10:
         f0:b7:b9:94:f4:45:59:ab:6f:b5:da:a5:75:bd:eb:0d:bf:ea:
         9c:b3:ed:60:14:81:15:99:cc:19:77:d9:1b:b3:b2:6b:e0:a8:
         da:13:fa:8b:52:63:fb:96:8f:b5:52:da:89:0c:1f:d4:56:a7:
         00:d0:0b:b2:41:d4:53:0e:f7:61:30:b4:c0:f3:12:a3:27:e3:
         c0:58:7a:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:21:13 2025 by rpki-client