Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS213550.roa
File:                     AS213550.roa (raw, json)
Hash identifier:          Dxg9ueb6vzrvtnigTwxbkyq6Jis0R8uNjmnG1MCPiLM=
Subject key identifier:   6F:B6:30:41:74:EC:13:4F:C8:94:B7:B1:6F:D4:16:96:59:1E:EE:DD
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       0B6BEDD39A17D8EADFE575B5F1C5997044F51322
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS213550.roa
Signing time:             Thu 09 Jul 2026 17:29:34 +0000
ROA not before:           Thu 09 Jul 2026 17:24:34 +0000
ROA not after:            Thu 08 Jul 2027 17:29:34 +0000
asID:                     213550
IP address blocks:        2602:fed2:7000::/44 maxlen: 48
                          2602:fed2:7004::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:6b:ed:d3:9a:17:d8:ea:df:e5:75:b5:f1:c5:99:70:44:f5:13:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Jul  9 17:24:34 2026 GMT
            Not After : Jul  8 17:29:34 2027 GMT
        Subject: CN=6FB6304174EC134FC894B7B16FD41696591EEEDD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:27:c1:34:77:47:ef:6c:8b:b1:2e:9b:5f:5c:
                    cd:34:78:d5:5c:9c:d0:bb:13:35:40:22:e5:d8:a4:
                    0c:27:02:16:18:6f:7b:5e:08:ce:08:0a:9c:fb:a0:
                    ea:1d:5f:a8:1a:fc:c1:58:9d:b8:7d:b0:5f:f2:9c:
                    a9:10:ce:be:9f:38:6b:7e:27:ef:63:32:47:4a:61:
                    54:1f:0f:0f:68:8a:c4:66:3a:9d:f0:6f:53:4f:62:
                    b9:4a:ce:48:8c:4f:10:ba:c8:af:63:90:ef:14:e1:
                    49:e8:51:6d:1c:28:f5:7e:20:06:ec:17:c5:51:7f:
                    99:02:b4:00:dd:1b:38:ab:9d:3b:8a:ab:64:46:cd:
                    35:f4:1d:59:d8:2c:dd:ff:bb:2e:21:e9:64:85:a2:
                    d8:9b:28:c0:93:55:58:a4:fa:cd:de:35:6a:ec:d6:
                    c6:7b:99:1b:2d:58:05:55:23:25:b8:38:d3:2f:2e:
                    61:9a:5d:a1:e3:ae:67:27:d0:64:ee:11:e0:90:9e:
                    ce:3a:6d:7b:3e:b9:18:30:14:fc:c9:24:48:0b:48:
                    58:aa:b1:87:93:9f:17:cd:0e:0c:83:6b:b1:44:06:
                    38:a8:62:17:7d:39:47:9b:30:d4:08:94:53:5f:19:
                    71:a6:66:94:fa:9a:1c:7f:4c:26:26:81:4e:f1:4f:
                    bd:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:B6:30:41:74:EC:13:4F:C8:94:B7:B1:6F:D4:16:96:59:1E:EE:DD
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS213550.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed2:7000::/44

    Signature Algorithm: sha256WithRSAEncryption
         aa:c1:d0:2d:0f:c0:0b:b2:cb:e6:20:ba:e5:fb:ff:e7:e8:7a:
         ec:3c:89:22:3e:74:c7:ba:09:a6:6e:91:e6:c3:d5:2e:0f:41:
         53:c9:0c:e6:ce:c9:71:d0:39:65:a6:fb:c9:fe:4f:0a:55:01:
         f1:29:b6:bc:a2:05:b8:f5:8b:4e:08:88:f8:70:db:ed:76:e5:
         bd:1e:d9:f4:aa:e7:3b:c1:53:80:42:06:b3:35:2f:56:ce:d7:
         dc:bb:dd:69:3f:4e:e8:a3:41:07:bd:75:64:14:25:46:51:9b:
         0e:b9:2f:e6:57:7e:55:db:2a:9a:01:55:c2:7f:02:4a:da:ac:
         16:a8:0c:c6:85:98:32:a3:f9:44:42:72:4f:79:4e:60:53:27:
         26:53:a0:a3:33:4f:ee:17:29:fd:12:4f:d8:04:fe:cf:c9:56:
         d5:5e:24:af:76:f6:70:64:5d:79:85:75:fe:c6:6d:bc:de:27:
         d9:f7:4d:24:ee:a3:59:3b:97:4f:6f:0c:b1:4c:16:d7:dd:d5:
         54:4a:b9:3d:d8:f5:65:0c:93:80:78:e1:c9:ec:84:db:f2:dd:
         c3:a1:b0:08:b5:d3:77:e8:a3:61:38:7a:f5:aa:69:09:98:0f:
         2d:ea:b1:b1:1e:db:52:5c:f4:0d:7d:70:4e:91:5d:82:f8:eb:
         7c:0a:a9:ae
-----BEGIN CERTIFICATE-----
MIIFWTCCBEGgAwIBAgIUC2vt05oX2Orf5XW18cWZcET1EyIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZmQ3N2Y1NWVmZTNhOTNjNTNjYTNkYzhhNmY4Mzc0ZmU3
MGZlYzU1NjdkZDFlOGM4NTUwHhcNMjYwNzA5MTcyNDM0WhcNMjcwNzA4MTcyOTM0
WjAzMTEwLwYDVQQDEyg2RkI2MzA0MTc0RUMxMzRGQzg5NEI3QjE2RkQ0MTY5NjU5
MUVFRUREMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvSfBNHdH72yL
sS6bX1zNNHjVXJzQuxM1QCLl2KQMJwIWGG97XgjOCAqc+6DqHV+oGvzBWJ24fbBf
8pypEM6+nzhrfifvYzJHSmFUHw8PaIrEZjqd8G9TT2K5Ss5IjE8QusivY5DvFOFJ
6FFtHCj1fiAG7BfFUX+ZArQA3Rs4q507iqtkRs019B1Z2Czd/7suIelkhaLYmyjA
k1VYpPrN3jVq7NbGe5kbLVgFVSMluDjTLy5hml2h465nJ9Bk7hHgkJ7OOm17PrkY
MBT8ySRIC0hYqrGHk58XzQ4Mg2uxRAY4qGIXfTlHmzDUCJRTXxlxpmaU+pocf0wm
JoFO8U+90QIDAQABo4ICWTCCAlUwHQYDVR0OBBYEFG+2MEF07BNPyJS3sW/UFpZZ
Hu7dMB8GA1UdIwQYMBaAFMiTX9ylAoroIJ/sgq2K6M+3xud2MA4GA1UdDwEB/wQE
AwIHgDBxBgNVHR8EajBoMGagZKBihmByc3luYzovL3Jwa2kuYWRtaW4uZnJlZXJh
bmdlY2xvdWQuY29tL3JlcG8vRlJDLUNBLzAvQzg5MzVGRENBNTAyOEFFODIwOUZF
QzgyQUQ4QUU4Q0ZCN0M2RTc3Ni5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYw
YzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzZlNWQ5NjExLWZkMzMt
NDg4Yy05YWVjLWY0ZGYyYTI1MzUxZS9mZDc3ZjU1ZWZlM2E5M2M1M2NhM2RjOGE2
ZjgzNzRmZTcwZmVjNTU2N2RkMWU4Yzg1NS5jZXIwXAYIKwYBBQUHAQsEUDBOMEwG
CCsGAQUFBzALhkByc3luYzovL3Jwa2kuYWRtaW4uZnJlZXJhbmdlY2xvdWQuY29t
L3JlcG8vRlJDLUNBLzAvQVMyMTM1NTAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQmAv7ScAAwDQYJKoZI
hvcNAQELBQADggEBAKrB0C0PwAuyy+YguuX7/+foeuw8iSI+dMe6CaZukebD1S4P
QVPJDObOyXHQOWWm+8n+TwpVAfEptryiBbj1i04IiPhw2+125b0e2fSq5zvBU4BC
BrM1L1bO19y73Wk/TuijQQe9dWQUJUZRmw65L+ZXflXbKpoBVcJ/AkrarBaoDMaF
mDKj+URCck95TmBTJyZToKMzT+4XKf0ST9gE/s/JVtVeJK929nBkXXmFdf7Gbbze
J9n3TSTuo1k7l09vDLFMFtfd1VRKuT3Y9WUMk4B44cnshNvy3cOhsAi103foo2E4
evWqaQmYDy3qsbEe21Jc9A19cE6RXYL463wKqa4=
-----END CERTIFICATE-----
Generated at Tue Jul 21 14:47:02 2026 by rpki-client