Route Origin Authorization

$ rpki-client -vvvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS205749.roa
File:                     AS205749.roa (raw, json)
Hash identifier:          61LoR4VIkZQjXr6YMoKDrVoSps0Mu9hT9BTx9tYXK+w=
Subject key identifier:   37:F1:F5:2D:BD:3E:3F:DF:FD:08:DE:23:E0:95:CD:0F:0D:8D:46:08
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       726C85721A5F22853C1E51869AFFE7F2D6CBBEC1
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS205749.roa
Signing time:             Fri 07 Aug 2026 00:30:22 +0000
ROA not before:           Fri 07 Aug 2026 00:25:22 +0000
ROA not after:            Fri 06 Aug 2027 00:30:22 +0000
asID:                     205749
IP address blocks:        2602:fed2:7191::/48 maxlen: 48
                          2602:fed2:7193::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:6c:85:72:1a:5f:22:85:3c:1e:51:86:9a:ff:e7:f2:d6:cb:be:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Aug  7 00:25:22 2026 GMT
            Not After : Aug  6 00:30:22 2027 GMT
        Subject: CN=37F1F52DBD3E3FDFFD08DE23E095CD0F0D8D4608
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:59:4e:5c:4f:77:3f:7a:67:65:c6:b2:db:4e:
                    d4:dd:ee:bb:cc:20:e1:e5:68:b2:1e:ce:a5:a9:3e:
                    4c:24:95:63:bb:27:1b:7b:e1:40:db:70:eb:80:cc:
                    5b:c5:db:8e:7e:eb:1e:4d:d3:53:3a:4a:c7:3e:0e:
                    36:63:a4:4b:9f:d4:74:d4:e1:ca:1a:28:f1:c3:a7:
                    f7:d1:2f:dc:d0:67:fa:ca:33:fe:47:cb:97:66:fa:
                    63:30:60:e0:ce:03:47:2b:b7:c4:6a:00:4d:44:7e:
                    57:94:77:33:fd:6a:53:d0:70:0c:4e:64:f4:a0:19:
                    5d:c6:9c:ba:a6:7a:d7:53:66:13:13:56:47:90:45:
                    95:b1:55:cf:54:c4:2c:15:04:66:51:21:3a:98:55:
                    83:fd:ac:8b:e8:25:2a:47:8f:51:f8:e7:d3:fb:be:
                    3c:cb:99:29:70:64:12:12:9c:bc:57:3f:be:e1:ef:
                    9e:36:fe:e5:62:27:4c:0f:90:f0:ba:d9:02:ab:28:
                    87:a4:39:7b:17:dd:3b:11:9e:16:f2:b5:8f:3d:5c:
                    ce:7d:66:57:57:9b:f2:bd:90:7c:ee:0f:75:3e:c3:
                    74:fa:82:17:05:35:77:a0:95:46:21:6c:11:ef:3a:
                    4f:1a:f9:fe:90:25:9b:57:f8:f9:59:e1:35:0f:94:
                    2d:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:F1:F5:2D:BD:3E:3F:DF:FD:08:DE:23:E0:95:CD:0F:0D:8D:46:08
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS205749.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed2:7191::/48
                  2602:fed2:7193::/48

    Signature Algorithm: sha256WithRSAEncryption
         9b:5d:8f:36:8c:09:71:46:77:f8:65:a6:38:3a:cb:ff:17:17:
         d3:17:05:fe:01:49:65:87:70:90:d3:c8:21:0c:b0:9a:d9:6a:
         10:b0:0d:94:09:c4:f3:ae:ab:ad:6f:3e:00:86:25:2b:38:ea:
         a7:14:cc:e9:21:6a:93:9c:bf:04:ce:3a:e4:08:2f:de:74:b6:
         40:09:80:81:3a:1a:74:00:3d:1d:69:bc:09:ce:82:aa:50:82:
         08:79:ce:79:57:a4:90:2b:81:22:66:10:e4:7b:f4:cd:bf:6e:
         e4:df:b7:d8:72:94:e7:c1:0c:f9:8b:c8:59:8e:ac:1a:cf:e1:
         0b:c0:da:a1:e8:8c:5e:86:0f:b4:17:a2:67:9b:35:8a:46:63:
         20:8d:2c:98:5b:53:f3:ae:47:3e:bb:08:49:50:4c:31:b5:ee:
         09:5d:6b:79:12:10:b1:dd:d0:a3:65:25:c2:d0:da:60:15:bf:
         10:e5:71:24:9e:c4:b0:fd:38:3a:94:8a:19:71:55:97:6f:ba:
         b8:ef:58:57:29:e9:d8:6c:06:2a:5e:50:d2:9a:2b:8a:ff:b3:
         e2:ee:1d:a7:88:74:7c:12:b8:1c:09:76:3b:0e:20:66:60:81:
         9c:ea:17:7f:95:84:22:f5:1e:8f:cb:5a:f8:95:4f:09:00:48:
         c4:19:19:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 01:09:26 2026 by rpki-client