Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS39753.roa
File:                     AS39753.roa (raw, json)
Hash identifier:          xnBsvhHsTXv1Tu2hO6jwemLD5xoKqQDK/ohyRQ4GHGY=
Subject key identifier:   E8:F9:6F:2C:1C:3D:C6:6F:3D:5D:6D:CC:B5:7A:09:F3:77:E6:72:C4
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       743390D4C171A63825BC4D0AD346180849F3A81D
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS39753.roa
Signing time:             Tue 17 Jun 2025 03:15:00 +0000
ROA not before:           Tue 17 Jun 2025 03:10:00 +0000
ROA not after:            Tue 16 Jun 2026 03:15:00 +0000
asID:                     39753
IP address blocks:        2602:fed2:7020::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 00:40:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:33:90:d4:c1:71:a6:38:25:bc:4d:0a:d3:46:18:08:49:f3:a8:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Jun 17 03:10:00 2025 GMT
            Not After : Jun 16 03:15:00 2026 GMT
        Subject: CN=E8F96F2C1C3DC66F3D5D6DCCB57A09F377E672C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:d0:3e:98:68:e0:8b:a8:51:a4:b6:7a:5d:95:
                    71:ed:a4:74:84:83:16:5c:d1:84:ec:91:e4:33:80:
                    58:af:a3:3f:99:42:81:90:c0:0c:44:b8:06:e0:29:
                    a0:60:52:67:fe:2b:86:c6:05:c0:f5:8a:26:72:70:
                    5a:31:3f:16:d2:26:ad:0a:b0:4f:05:8d:55:49:1c:
                    44:39:e1:db:f6:98:d4:c5:ef:e7:d6:ed:f8:47:07:
                    78:51:2d:19:92:72:62:74:2e:c5:04:63:14:da:e8:
                    23:71:c8:7d:25:eb:0e:73:43:73:18:bd:37:5e:b5:
                    d4:69:de:fb:b1:72:53:91:1d:d0:c1:73:0d:26:49:
                    62:78:3d:d8:c7:ce:32:ce:28:5f:a2:17:01:07:e5:
                    d0:42:45:42:fa:09:59:65:de:e1:af:4b:80:41:19:
                    9c:50:e6:55:99:18:63:d0:38:69:1b:f1:f5:32:94:
                    c8:26:b4:25:a9:4f:cc:e1:a9:44:8e:02:bc:58:f2:
                    cd:c5:59:45:70:3b:2e:5e:3c:23:0e:5d:dc:0c:bb:
                    3c:f0:e3:c0:fe:e5:81:33:bd:be:48:83:44:58:54:
                    ce:ca:b3:83:ba:2a:df:87:93:c1:8c:c5:e1:6a:d3:
                    d1:bc:e8:01:76:12:7d:e0:bb:92:b6:01:41:d9:97:
                    7a:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:F9:6F:2C:1C:3D:C6:6F:3D:5D:6D:CC:B5:7A:09:F3:77:E6:72:C4
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS39753.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed2:7020::/44

    Signature Algorithm: sha256WithRSAEncryption
         3d:3b:52:9d:d9:be:6a:14:b3:7b:53:2e:6a:c9:f9:37:0d:94:
         39:ae:11:c7:27:be:ab:93:d1:ac:2c:5c:5c:dd:e0:ec:9f:10:
         b6:00:00:51:0d:2b:0e:21:d8:8c:d1:ea:ee:44:3c:d8:34:28:
         3e:8f:0b:3e:01:ce:49:f6:2a:05:51:75:40:11:f0:00:0c:5a:
         ea:da:3f:22:8e:ab:9c:bc:db:6b:25:52:0f:59:9a:90:6b:25:
         91:88:0f:cb:fd:eb:26:7a:2a:c0:af:ee:ba:5c:c6:ec:eb:bd:
         27:fc:fe:cd:d2:9e:7e:7f:84:a9:44:4b:8b:25:45:52:ae:c9:
         96:c4:76:67:a4:07:0d:6b:de:af:69:59:3d:c3:10:31:9d:88:
         ce:6a:cd:bb:db:88:4d:63:2b:d9:43:91:67:11:e0:ec:15:d7:
         d1:88:dc:c0:64:76:a8:68:9e:ed:2f:72:59:15:e0:fa:12:ed:
         35:28:d5:86:69:a8:08:35:5c:0b:95:3f:0f:b2:d8:19:79:eb:
         45:fa:3e:19:3c:96:d6:e4:6b:6f:7d:84:14:a2:f7:aa:ac:82:
         d9:1b:d9:79:b5:cc:ff:00:6f:78:de:9d:42:45:5e:4c:d3:d0:
         da:ef:48:24:74:39:1a:5d:58:de:a3:f4:a9:10:ee:73:63:38:
         c4:97:f6:eb
-----BEGIN CERTIFICATE-----
MIIFWDCCBECgAwIBAgIUdDOQ1MFxpjglvE0K00YYCEnzqB0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZmQ3N2Y1NWVmZTNhOTNjNTNjYTNkYzhhNmY4Mzc0ZmU3
MGZlYzU1NjdkZDFlOGM4NTUwHhcNMjUwNjE3MDMxMDAwWhcNMjYwNjE2MDMxNTAw
WjAzMTEwLwYDVQQDEyhFOEY5NkYyQzFDM0RDNjZGM0Q1RDZEQ0NCNTdBMDlGMzc3
RTY3MkM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAydA+mGjgi6hR
pLZ6XZVx7aR0hIMWXNGE7JHkM4BYr6M/mUKBkMAMRLgG4CmgYFJn/iuGxgXA9Yom
cnBaMT8W0iatCrBPBY1VSRxEOeHb9pjUxe/n1u34Rwd4US0ZknJidC7FBGMU2ugj
cch9JesOc0NzGL03XrXUad77sXJTkR3QwXMNJklieD3Yx84yzihfohcBB+XQQkVC
+glZZd7hr0uAQRmcUOZVmRhj0DhpG/H1MpTIJrQlqU/M4alEjgK8WPLNxVlFcDsu
XjwjDl3cDLs88OPA/uWBM72+SINEWFTOyrODuirfh5PBjMXhatPRvOgBdhJ94LuS
tgFB2Zd6gQIDAQABo4ICWDCCAlQwHQYDVR0OBBYEFOj5bywcPcZvPV1tzLV6CfN3
5nLEMB8GA1UdIwQYMBaAFMiTX9ylAoroIJ/sgq2K6M+3xud2MA4GA1UdDwEB/wQE
AwIHgDBxBgNVHR8EajBoMGagZKBihmByc3luYzovL3Jwa2kuYWRtaW4uZnJlZXJh
bmdlY2xvdWQuY29tL3JlcG8vRlJDLUNBLzAvQzg5MzVGRENBNTAyOEFFODIwOUZF
QzgyQUQ4QUU4Q0ZCN0M2RTc3Ni5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYw
YzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzZlNWQ5NjExLWZkMzMt
NDg4Yy05YWVjLWY0ZGYyYTI1MzUxZS9mZDc3ZjU1ZWZlM2E5M2M1M2NhM2RjOGE2
ZjgzNzRmZTcwZmVjNTU2N2RkMWU4Yzg1NS5jZXIwWwYIKwYBBQUHAQsETzBNMEsG
CCsGAQUFBzALhj9yc3luYzovL3Jwa2kuYWRtaW4uZnJlZXJhbmdlY2xvdWQuY29t
L3JlcG8vRlJDLUNBLzAvQVMzOTc1My5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCYC/tJwIDANBgkqhkiG
9w0BAQsFAAOCAQEAPTtSndm+ahSze1Muasn5Nw2UOa4Rxye+q5PRrCxcXN3g7J8Q
tgAAUQ0rDiHYjNHq7kQ82DQoPo8LPgHOSfYqBVF1QBHwAAxa6to/Io6rnLzbayVS
D1makGslkYgPy/3rJnoqwK/uulzG7Ou9J/z+zdKefn+EqURLiyVFUq7JlsR2Z6QH
DWver2lZPcMQMZ2IzmrNu9uITWMr2UORZxHg7BXX0YjcwGR2qGie7S9yWRXg+hLt
NSjVhmmoCDVcC5U/D7LYGXnrRfo+GTyW1uRrb32EFKL3qqyC2RvZebXM/wBveN6d
QkVeTNPQ2u9IJHQ5Gl1Y3qP0qRDuc2M4xJf26w==
-----END CERTIFICATE-----
Generated at Wed Jun 18 01:55:24 2025 by rpki-client