Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS205552.roa
File:                     AS205552.roa (raw, json)
Hash identifier:          0/+/v25G27cdLn8D807SoWyUYedozJEosTknR8AkME4=
Subject key identifier:   C1:7F:09:B6:D9:73:4F:94:93:C4:8E:9B:47:59:91:B2:63:6F:FE:9C
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       307E4033D47F099A14AA33FB6DAE2A7C6DDD2F48
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS205552.roa
Signing time:             Mon 03 Aug 2026 15:30:11 +0000
ROA not before:           Mon 03 Aug 2026 15:25:11 +0000
ROA not after:            Mon 02 Aug 2027 15:30:11 +0000
asID:                     205552
IP address blocks:        161.129.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 16 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:7e:40:33:d4:7f:09:9a:14:aa:33:fb:6d:ae:2a:7c:6d:dd:2f:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Aug  3 15:25:11 2026 GMT
            Not After : Aug  2 15:30:11 2027 GMT
        Subject: CN=C17F09B6D9734F9493C48E9B475991B2636FFE9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:77:2a:31:27:9c:4f:26:86:1c:74:ef:8e:e6:
                    db:17:4f:80:79:fb:02:c0:eb:4f:bc:61:51:c0:82:
                    c3:8c:c4:13:a3:40:bb:57:e1:79:f5:69:35:69:2f:
                    21:22:36:c5:b0:75:d7:0e:a5:90:fa:82:d2:38:00:
                    2f:a6:e2:d0:82:e3:b1:37:5e:eb:98:f9:cf:ff:fc:
                    a9:fb:8d:60:29:05:e2:ea:45:fd:b9:a3:54:cf:c1:
                    81:0a:24:81:31:b1:da:5e:69:84:2e:65:d9:1c:8a:
                    36:a0:45:71:3c:42:4d:52:84:d5:7b:67:8b:e7:47:
                    c0:0c:b7:6c:96:a1:c6:a8:a0:e4:d2:0e:97:bc:86:
                    4f:cf:77:9c:8e:80:be:37:96:72:a5:7a:e9:55:0b:
                    66:1f:4c:61:3a:69:74:a1:57:ad:a1:75:3f:25:6f:
                    a5:32:1a:a8:8f:b5:17:fa:49:4b:1d:2c:32:a7:db:
                    e9:89:e7:85:69:87:4d:fc:c5:c9:55:3f:5d:ae:89:
                    f3:da:c1:55:6e:a3:46:c1:31:85:ed:c3:d1:07:f7:
                    d9:40:9b:07:49:2d:5a:23:ce:b8:04:bf:5e:b5:78:
                    d6:4f:66:b5:3e:40:28:5a:93:f0:5a:62:58:2c:a9:
                    f4:0b:c9:48:5c:c9:8c:ff:6b:39:f0:2a:13:21:74:
                    f8:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:7F:09:B6:D9:73:4F:94:93:C4:8E:9B:47:59:91:B2:63:6F:FE:9C
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS205552.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.129.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:d4:8a:bf:8e:a1:55:4a:8c:fa:ba:47:b5:28:59:53:cc:6c:
         c4:86:2c:7c:24:ff:f4:7f:67:75:1b:4b:43:f1:13:4f:e6:dd:
         89:d1:84:52:f7:6c:80:e8:c2:53:5e:9a:bc:85:ac:d2:b3:c2:
         5a:ca:37:e2:28:e3:3c:72:02:1a:1a:7f:13:44:fe:c2:7a:ce:
         bc:dd:07:33:64:b1:b8:9c:f8:71:46:cd:7e:cb:2c:5c:f7:18:
         35:33:ff:c8:2c:3c:e9:50:03:3b:72:f5:38:41:9a:65:86:8e:
         2e:cd:e4:2c:60:e4:b2:dc:d0:c8:72:e9:42:28:56:2e:31:58:
         08:86:ba:0a:3c:78:85:c3:ba:c0:b5:76:b3:4b:17:f3:a5:8d:
         1f:c9:f1:c4:07:c1:e4:d0:84:29:77:d9:ad:5d:6c:bc:38:9f:
         66:fb:5d:72:81:3e:a1:b2:62:61:31:0a:a6:24:3e:22:c7:a1:
         c4:12:17:8f:fe:bd:2d:f4:7a:18:01:a4:63:67:0a:9d:5c:0f:
         4b:65:30:25:d6:22:3d:84:b3:7a:89:9f:dd:13:2b:7e:3b:ba:
         e4:1e:db:ce:3b:c4:ad:62:92:ea:ce:4b:e0:21:49:c5:b7:76:
         e0:2a:e2:27:fe:91:7e:f7:da:9b:03:7d:14:68:dd:4b:00:e9:
         1d:33:d9:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 03:12:33 2026 by rpki-client