Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS14315.roa
File:                     AS14315.roa (raw, json)
Hash identifier:          t4ioSjCJNpxd1uCwsILVfzFj0uiUxE1aN/dEsbTUbho=
Subject key identifier:   9A:7D:CF:FC:08:CB:19:8D:76:5E:13:5E:50:D3:18:74:B4:3D:99:D5
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       2DC73622E5453C7A439C9BD186431AD44FA998D0
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS14315.roa
Signing time:             Fri 26 Jun 2026 06:29:17 +0000
ROA not before:           Fri 26 Jun 2026 06:24:17 +0000
ROA not after:            Fri 25 Jun 2027 06:29:17 +0000
asID:                     14315
IP address blocks:        2602:fed2:730b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:c7:36:22:e5:45:3c:7a:43:9c:9b:d1:86:43:1a:d4:4f:a9:98:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Jun 26 06:24:17 2026 GMT
            Not After : Jun 25 06:29:17 2027 GMT
        Subject: CN=9A7DCFFC08CB198D765E135E50D31874B43D99D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:24:7e:03:23:02:85:52:32:7a:80:3d:1a:60:
                    40:3b:92:0a:d4:9b:e1:a4:6f:67:50:32:10:60:2c:
                    df:8d:54:24:ed:80:53:c9:6e:35:c0:a2:58:ac:01:
                    62:d4:62:2a:18:a2:25:e0:ca:9c:61:db:2f:20:48:
                    b1:b7:a5:75:be:c6:69:77:86:04:69:b4:1c:2b:28:
                    ad:6d:b9:82:06:72:1d:8c:df:3f:21:ba:aa:5f:17:
                    50:4d:a5:ee:f5:4d:bd:b3:74:ed:d1:63:5f:a7:5f:
                    5a:0f:44:56:95:29:5d:f8:97:a4:04:8b:b8:ee:45:
                    b9:46:31:a6:f8:c4:b1:a7:21:33:ad:de:ee:b0:1e:
                    20:02:fc:93:92:fa:bf:98:64:98:e9:73:e7:54:50:
                    06:2f:6a:dc:b9:50:96:8f:9a:d2:5c:99:cb:8c:6f:
                    75:35:fb:bf:07:6b:62:a8:b7:b8:55:27:7d:dc:ec:
                    5f:ff:b4:1a:6d:0e:5e:4c:c1:8b:33:87:f9:e7:e4:
                    f6:db:18:9d:95:fd:27:6f:db:78:2c:57:a4:9a:67:
                    65:da:9b:c3:c8:28:b3:92:64:a4:ae:fa:2d:92:3f:
                    cc:9b:38:a9:fb:33:82:ac:01:e0:06:93:9a:0e:06:
                    7b:13:ec:4c:61:0b:5b:39:5c:b6:10:c2:19:88:db:
                    f9:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:7D:CF:FC:08:CB:19:8D:76:5E:13:5E:50:D3:18:74:B4:3D:99:D5
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS14315.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed2:730b::/48

    Signature Algorithm: sha256WithRSAEncryption
         a9:8d:c7:b2:9e:94:c4:8e:ee:0b:c3:d0:8e:3f:2c:1e:ce:a4:
         aa:8e:2b:cb:e2:93:58:19:c3:5a:43:0a:c1:05:6c:bb:51:81:
         df:6f:77:d5:be:aa:b1:36:13:5c:34:37:9f:0d:c8:04:f6:84:
         53:9a:76:ea:ae:7b:c4:de:6b:f7:23:46:e2:57:e9:70:b3:27:
         91:57:f5:7b:95:f6:3e:4c:a2:0b:b1:e5:75:02:72:df:15:02:
         48:6d:d4:d9:3b:32:e7:b3:05:49:13:a1:25:fa:d3:cb:80:5a:
         de:46:78:23:00:6e:f9:88:8a:98:42:d1:f9:96:4f:15:ed:4a:
         94:00:00:0c:e8:68:3c:6f:9c:f4:f3:84:7e:0a:cd:de:e3:4c:
         78:4d:a0:15:ed:29:7d:ca:cc:14:21:29:c5:25:cd:78:d7:98:
         0c:b9:ca:f7:8a:fb:22:6f:b0:ec:36:96:9c:71:36:53:7d:88:
         2d:f1:2b:0f:1a:eb:1a:0a:64:0e:e4:b4:55:01:6a:9f:6d:13:
         68:38:cc:e3:25:cb:8a:19:5c:8d:29:70:da:c6:35:73:32:54:
         41:89:ef:8f:d1:aa:38:c8:51:17:2d:3e:09:74:5f:ff:38:23:
         01:f6:61:8c:15:e8:49:86:f2:e7:51:e1:4d:35:5e:e1:7c:32:
         2d:e3:11:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:47:36 2026 by rpki-client