Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS136317.roa
File:                     AS136317.roa (raw, json)
Hash identifier:          flRrxt6GIc5ZGr/LkTouDnvV8kz4a4Sev9Jat2oKg30=
Subject key identifier:   DC:88:27:E5:44:C9:4F:8E:48:88:24:63:89:2B:2B:71:0B:48:77:FA
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       368001E98DDE3FCA3181355CE0DFD16DF48B0F32
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS136317.roa
Signing time:             Sat 27 Jun 2026 07:29:19 +0000
ROA not before:           Sat 27 Jun 2026 07:24:19 +0000
ROA not after:            Sat 26 Jun 2027 07:29:19 +0000
asID:                     136317
IP address blocks:        2602:fed2:7042::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:80:01:e9:8d:de:3f:ca:31:81:35:5c:e0:df:d1:6d:f4:8b:0f:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Jun 27 07:24:19 2026 GMT
            Not After : Jun 26 07:29:19 2027 GMT
        Subject: CN=DC8827E544C94F8E48882463892B2B710B4877FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:f8:fe:9d:f8:6b:e0:7b:69:f1:ec:02:f5:80:
                    b3:6b:b2:9c:8e:7f:1b:09:4d:86:07:81:dc:10:90:
                    bd:43:c8:59:52:06:11:c5:4c:0b:19:d1:5f:45:9c:
                    3f:ae:5d:c1:4c:ae:87:c1:10:c6:09:88:c6:f7:f8:
                    95:bb:38:b8:b6:92:b3:dd:38:b5:5b:03:ce:2c:b4:
                    b1:22:90:de:c2:79:5f:ed:57:5c:ff:78:ba:52:0d:
                    cf:3b:80:b6:1d:28:5b:32:b6:a7:15:e5:9a:ba:1b:
                    46:a3:aa:39:6c:ca:bb:37:ed:ec:0c:2b:43:4b:6b:
                    96:77:25:77:49:3e:64:68:1b:e0:bf:33:b9:de:b0:
                    46:19:1a:54:b6:00:ef:87:00:aa:38:a4:dc:dc:da:
                    09:fe:44:55:a3:ba:90:6b:49:cc:87:aa:d8:7c:17:
                    de:9e:52:55:2f:22:97:9d:ec:ca:e0:84:bb:a8:d7:
                    05:cb:5d:c9:07:01:f3:6a:f8:d6:ce:23:d6:0d:f8:
                    a1:02:e6:4e:08:f8:0c:1b:59:d9:4b:89:73:bd:dd:
                    8e:12:a8:bf:94:87:13:82:c5:df:67:ef:72:77:b8:
                    ed:c1:1e:8a:20:53:33:99:0b:ea:22:46:41:a6:b2:
                    91:14:de:08:8d:97:d4:34:11:cf:0b:77:38:a7:32:
                    d9:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:88:27:E5:44:C9:4F:8E:48:88:24:63:89:2B:2B:71:0B:48:77:FA
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS136317.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed2:7042::/48

    Signature Algorithm: sha256WithRSAEncryption
         6d:ad:ea:e8:29:64:91:14:16:42:cf:7c:43:ba:3d:09:e9:a7:
         43:9b:17:f3:86:ff:94:93:35:68:19:ff:bc:33:e4:38:8c:2f:
         97:cb:0f:b0:af:60:34:69:38:57:0a:69:4b:00:ee:ad:3c:24:
         29:b6:d2:bc:00:31:71:2c:8c:ea:3f:66:6b:c0:f1:41:ed:ac:
         63:fb:5e:52:7e:35:64:26:34:95:9d:6b:2a:54:04:d8:be:65:
         78:1b:53:51:30:6e:8d:73:24:11:09:10:98:59:08:bb:de:71:
         c2:fd:be:0f:64:b9:31:8b:ab:64:4b:6b:41:df:11:02:4b:da:
         93:89:1a:73:31:c0:8b:b4:43:4e:64:9c:e6:a0:11:1d:a9:d9:
         6e:c9:36:f6:fa:0f:59:8b:15:ed:72:35:3c:62:4c:54:71:45:
         9f:45:9d:18:bf:f3:79:fb:c7:94:68:21:f7:91:0e:f1:06:ab:
         5b:2b:b7:0a:53:e0:76:f5:3d:e4:82:92:32:b9:df:48:6a:c2:
         59:57:3d:b7:4c:2d:83:66:69:52:ff:4f:64:38:a8:ac:3a:ab:
         d7:99:7c:fd:f5:22:e6:c8:f3:79:13:5a:75:6d:53:53:74:57:
         51:23:ba:d8:81:0a:6a:d2:d8:90:2d:ae:a0:c1:54:dc:19:02:
         c1:6c:f7:ae
-----BEGIN CERTIFICATE-----
MIIFWTCCBEGgAwIBAgIUNoAB6Y3eP8oxgTVc4N/RbfSLDzIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZmQ3N2Y1NWVmZTNhOTNjNTNjYTNkYzhhNmY4Mzc0ZmU3
MGZlYzU1NjdkZDFlOGM4NTUwHhcNMjYwNjI3MDcyNDE5WhcNMjcwNjI2MDcyOTE5
WjAzMTEwLwYDVQQDEyhEQzg4MjdFNTQ0Qzk0RjhFNDg4ODI0NjM4OTJCMkI3MTBC
NDg3N0ZBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/j+nfhr4Htp
8ewC9YCza7Kcjn8bCU2GB4HcEJC9Q8hZUgYRxUwLGdFfRZw/rl3BTK6HwRDGCYjG
9/iVuzi4tpKz3Ti1WwPOLLSxIpDewnlf7Vdc/3i6Ug3PO4C2HShbMranFeWauhtG
o6o5bMq7N+3sDCtDS2uWdyV3ST5kaBvgvzO53rBGGRpUtgDvhwCqOKTc3NoJ/kRV
o7qQa0nMh6rYfBfenlJVLyKXnezK4IS7qNcFy13JBwHzavjWziPWDfihAuZOCPgM
G1nZS4lzvd2OEqi/lIcTgsXfZ+9yd7jtwR6KIFMzmQvqIkZBprKRFN4IjZfUNBHP
C3c4pzLZTQIDAQABo4ICWTCCAlUwHQYDVR0OBBYEFNyIJ+VEyU+OSIgkY4krK3EL
SHf6MB8GA1UdIwQYMBaAFMiTX9ylAoroIJ/sgq2K6M+3xud2MA4GA1UdDwEB/wQE
AwIHgDBxBgNVHR8EajBoMGagZKBihmByc3luYzovL3Jwa2kuYWRtaW4uZnJlZXJh
bmdlY2xvdWQuY29tL3JlcG8vRlJDLUNBLzAvQzg5MzVGRENBNTAyOEFFODIwOUZF
QzgyQUQ4QUU4Q0ZCN0M2RTc3Ni5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYw
YzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzZlNWQ5NjExLWZkMzMt
NDg4Yy05YWVjLWY0ZGYyYTI1MzUxZS9mZDc3ZjU1ZWZlM2E5M2M1M2NhM2RjOGE2
ZjgzNzRmZTcwZmVjNTU2N2RkMWU4Yzg1NS5jZXIwXAYIKwYBBQUHAQsEUDBOMEwG
CCsGAQUFBzALhkByc3luYzovL3Jwa2kuYWRtaW4uZnJlZXJhbmdlY2xvdWQuY29t
L3JlcG8vRlJDLUNBLzAvQVMxMzYzMTcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAmAv7ScEIwDQYJKoZI
hvcNAQELBQADggEBAG2t6ugpZJEUFkLPfEO6PQnpp0ObF/OG/5STNWgZ/7wz5DiM
L5fLD7CvYDRpOFcKaUsA7q08JCm20rwAMXEsjOo/ZmvA8UHtrGP7XlJ+NWQmNJWd
aypUBNi+ZXgbU1Ewbo1zJBEJEJhZCLveccL9vg9kuTGLq2RLa0HfEQJL2pOJGnMx
wIu0Q05knOagER2p2W7JNvb6D1mLFe1yNTxiTFRxRZ9FnRi/83n7x5RoIfeRDvEG
q1srtwpT4Hb1PeSCkjK530hqwllXPbdMLYNmaVL/T2Q4qKw6q9eZfP31IubI83kT
WnVtU1N0V1EjutiBCmrS2JAtrqDBVNwZAsFs964=
-----END CERTIFICATE-----
Generated at Tue Jul 21 14:47:34 2026 by rpki-client