Route Origin Authorization

$ rpki-client -vvvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS203090.roa
File:                     AS203090.roa (raw, json)
Hash identifier:          n0z+uxIdS+jBesqhSYBUdfONM4AcJz/JuSzeV3QQZHg=
Subject key identifier:   AC:D6:95:6C:6C:78:5F:A7:99:AD:47:07:F4:4E:60:BD:A3:71:12:7E
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       5EA623F7EF3A83062CBC84B03642A2455C831F53
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS203090.roa
Signing time:             Thu 20 Aug 2026 05:33:07 +0000
ROA not before:           Thu 20 Aug 2026 05:28:07 +0000
ROA not after:            Thu 19 Aug 2027 05:33:07 +0000
asID:                     203090
IP address blocks:        2602:fed2:708e::/48 maxlen: 48
                          2602:fed2:730b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:a6:23:f7:ef:3a:83:06:2c:bc:84:b0:36:42:a2:45:5c:83:1f:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Aug 20 05:28:07 2026 GMT
            Not After : Aug 19 05:33:07 2027 GMT
        Subject: CN=ACD6956C6C785FA799AD4707F44E60BDA371127E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:06:ce:6e:f3:3c:a9:0b:35:ad:00:cc:30:86:
                    3a:74:c6:0e:f8:7b:6b:1e:ed:43:8a:23:90:9c:ae:
                    8e:81:3c:55:14:0f:75:e7:51:29:da:2c:2e:45:9a:
                    2d:30:19:c0:c6:c3:b4:54:c4:7e:98:de:0e:42:d8:
                    04:6d:fb:ec:27:37:15:41:24:6b:de:0a:cd:00:97:
                    a4:76:41:56:00:ae:66:b3:36:49:7c:73:34:21:85:
                    63:c3:6b:c3:64:4b:c5:78:17:ed:9b:79:39:c6:5f:
                    35:5f:42:30:4d:8f:2c:b6:2b:06:0c:71:ab:bf:08:
                    5c:29:48:7e:08:a6:f1:b1:ba:3b:82:ac:a9:e6:59:
                    7d:54:50:6f:be:84:7f:55:0a:7e:fb:d1:fc:02:3e:
                    fe:4e:b6:69:ef:4c:1c:c3:f6:af:c2:46:eb:68:73:
                    89:c0:61:e8:58:2f:6a:a9:4d:17:4e:03:02:0c:7c:
                    f7:0b:df:87:b9:b2:97:64:f4:8f:fa:1e:06:09:3d:
                    51:77:d9:ac:f5:ad:6d:e2:58:19:5f:32:43:d0:87:
                    88:b4:98:a0:00:9b:88:bb:3f:33:b1:0e:e9:ff:75:
                    cf:a4:f9:4b:cf:2b:c6:f0:7b:1c:94:72:f5:d1:0e:
                    90:bc:3c:40:9e:e9:9c:d5:c4:8f:ed:8d:dc:e0:1b:
                    de:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:D6:95:6C:6C:78:5F:A7:99:AD:47:07:F4:4E:60:BD:A3:71:12:7E
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS203090.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed2:708e::/48
                  2602:fed2:730b::/48

    Signature Algorithm: sha256WithRSAEncryption
         1c:88:d8:42:b5:f2:c1:1e:9c:42:bd:27:90:b5:f1:5d:34:18:
         24:4f:98:60:0f:31:16:67:5b:44:72:5a:7a:dc:b4:f9:fb:a4:
         3e:ea:5f:8a:c3:a5:e1:5d:62:be:ac:9a:f2:8b:6b:26:05:b7:
         78:e5:df:8b:4b:51:16:31:53:c4:49:9b:e0:b3:95:8c:f1:58:
         0d:ec:af:be:b8:07:e6:2a:59:ec:fe:d4:12:54:7f:3c:09:13:
         22:60:de:5b:8b:3b:52:3e:2b:05:04:0e:b7:4b:13:e6:a6:9d:
         b3:4a:1f:ff:78:dc:a1:c5:31:90:98:fd:04:0f:1d:7d:4d:bf:
         36:f6:73:4b:2e:a6:7e:ba:34:49:46:ef:79:4f:4c:54:08:51:
         ec:f5:6e:36:56:91:f3:eb:c8:49:d6:7b:fd:bc:48:16:73:87:
         c0:41:36:77:66:97:a1:a8:9d:5d:b4:dc:be:04:6e:49:40:a9:
         21:f1:ee:43:2a:68:5e:75:35:b1:ed:d7:8e:44:b6:09:9f:c2:
         f4:cd:e1:be:1a:8b:89:b0:f5:d7:ee:c5:5a:2b:e1:8c:89:cd:
         1c:28:5b:c0:0a:0f:dd:82:3f:00:1b:61:ee:ca:92:03:fe:54:
         35:09:fd:72:8c:03:18:80:90:25:07:63:4c:e7:f0:d5:6d:2e:
         40:a2:72:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 01:42:26 2026 by rpki-client