Route Origin Authorization

$ rpki-client -vvvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS23470.roa
File:                     AS23470.roa (raw, json)
Hash identifier:          W5O0PdRP2oC6nEFfoMCF3YE+wPjavd0F9XjIAeBmgOw=
Subject key identifier:   5F:54:AA:62:33:17:54:20:B6:D8:EB:27:65:0F:BA:78:BF:ED:0B:75
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       42A7AEEF547C625FD13BCB8F3DEF8ECE08EA904A
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS23470.roa
Signing time:             Sat 08 Aug 2026 12:34:02 +0000
ROA not before:           Sat 08 Aug 2026 12:29:02 +0000
ROA not after:            Sat 07 Aug 2027 12:34:02 +0000
asID:                     23470
IP address blocks:        2602:fed2:7084::/48 maxlen: 48
                          2602:fed2:7110::/48 maxlen: 48
                          2602:fed2:7189::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:a7:ae:ef:54:7c:62:5f:d1:3b:cb:8f:3d:ef:8e:ce:08:ea:90:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Aug  8 12:29:02 2026 GMT
            Not After : Aug  7 12:34:02 2027 GMT
        Subject: CN=5F54AA6233175420B6D8EB27650FBA78BFED0B75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:12:ea:52:c5:6e:23:84:e9:60:43:72:02:22:
                    ca:0c:41:ef:e8:26:30:5c:10:c6:f2:50:24:dc:40:
                    8f:ce:fd:44:2f:98:40:a6:7a:e0:53:7b:e5:05:17:
                    5f:dc:a7:3a:d4:20:87:bc:ec:24:94:5c:d8:72:64:
                    c2:e3:24:05:35:0e:9c:5f:5f:91:7a:7d:6e:fc:c3:
                    ea:9a:eb:3c:d9:59:1d:32:8e:27:aa:e9:ab:08:44:
                    7c:ee:ab:0f:9c:b5:42:5f:b3:02:46:b9:ac:db:52:
                    8f:c9:54:83:5d:0f:ad:da:7a:15:e3:d7:46:06:a0:
                    38:55:97:68:aa:f3:5f:8d:e3:56:80:f4:fe:2e:df:
                    71:7e:30:67:98:3a:07:c6:6e:78:05:74:0b:fd:2d:
                    99:60:cb:df:1c:88:f2:0a:73:fc:92:97:62:70:bc:
                    34:31:36:0a:ec:7c:66:00:2a:52:05:b6:d3:b6:0e:
                    2a:6e:5b:75:15:b0:9b:f4:d2:77:5f:8e:dd:fc:78:
                    92:e8:6b:67:e7:ed:41:9e:1c:f0:e7:8a:ec:d0:48:
                    c8:9e:bb:b5:2a:8c:98:61:47:02:1b:13:7f:75:27:
                    88:95:15:41:f8:68:8d:39:ca:fe:0f:11:1a:3a:87:
                    66:08:29:17:4a:4e:8a:af:fd:8a:62:46:10:00:a2:
                    e8:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:54:AA:62:33:17:54:20:B6:D8:EB:27:65:0F:BA:78:BF:ED:0B:75
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS23470.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed2:7084::/48
                  2602:fed2:7110::/48
                  2602:fed2:7189::/48

    Signature Algorithm: sha256WithRSAEncryption
         50:94:ec:3f:45:3b:a4:fd:9a:1a:64:98:8d:02:5f:6c:8a:92:
         78:2f:9b:34:3a:db:a6:df:8c:54:cd:d9:a8:0f:4f:18:32:bc:
         98:d1:ca:3e:9d:be:62:fa:0f:c6:3c:fe:13:1a:28:53:3f:00:
         f0:76:bd:5d:55:be:7d:05:30:fa:58:0d:c7:98:91:0b:26:d3:
         ac:fc:95:e3:86:56:f4:a8:0b:b2:d9:31:dc:5f:d5:29:19:57:
         9b:e0:61:42:46:58:c9:8a:c9:93:e0:53:91:f4:fa:0b:76:d6:
         7f:ef:b3:34:15:05:10:8d:a5:71:cb:b3:1f:b4:f6:dd:1c:4c:
         66:63:23:ed:1d:9c:49:4c:63:33:77:04:56:26:7d:08:ec:69:
         e7:dd:ed:a4:18:bd:38:8b:de:72:b7:06:44:14:49:77:56:7e:
         dd:ef:bc:93:c8:d1:9b:87:30:24:11:97:dc:15:eb:ba:35:3a:
         96:fc:10:0c:ce:26:fd:9b:9a:c3:c4:af:9d:be:14:20:9b:14:
         5b:76:9e:40:90:4d:f5:de:6d:ab:54:4a:84:5b:51:a6:d6:c5:
         22:c7:75:4d:87:ce:26:1b:69:82:48:87:99:b9:ef:ae:77:1d:
         8c:3b:cd:16:a6:ab:87:ab:b7:fe:c8:78:08:15:db:7e:15:93:
         da:e2:02:3d
-----BEGIN CERTIFICATE-----
MIIFajCCBFKgAwIBAgIUQqeu71R8Yl/RO8uPPe+OzgjqkEowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZmQ3N2Y1NWVmZTNhOTNjNTNjYTNkYzhhNmY4Mzc0ZmU3
MGZlYzU1NjdkZDFlOGM4NTUwHhcNMjYwODA4MTIyOTAyWhcNMjcwODA3MTIzNDAy
WjAzMTEwLwYDVQQDEyg1RjU0QUE2MjMzMTc1NDIwQjZEOEVCMjc2NTBGQkE3OEJG
RUQwQjc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxLqUsVuI4Tp
YENyAiLKDEHv6CYwXBDG8lAk3ECPzv1EL5hApnrgU3vlBRdf3Kc61CCHvOwklFzY
cmTC4yQFNQ6cX1+Ren1u/MPqmus82VkdMo4nqumrCER87qsPnLVCX7MCRrms21KP
yVSDXQ+t2noV49dGBqA4VZdoqvNfjeNWgPT+Lt9xfjBnmDoHxm54BXQL/S2ZYMvf
HIjyCnP8kpdicLw0MTYK7HxmACpSBbbTtg4qblt1FbCb9NJ3X47d/HiS6Gtn5+1B
nhzw54rs0EjInru1KoyYYUcCGxN/dSeIlRVB+GiNOcr+DxEaOodmCCkXSk6Kr/2K
YkYQAKLoxQIDAQABo4ICajCCAmYwHQYDVR0OBBYEFF9UqmIzF1QgttjrJ2UPuni/
7Qt1MB8GA1UdIwQYMBaAFMiTX9ylAoroIJ/sgq2K6M+3xud2MA4GA1UdDwEB/wQE
AwIHgDBxBgNVHR8EajBoMGagZKBihmByc3luYzovL3Jwa2kuYWRtaW4uZnJlZXJh
bmdlY2xvdWQuY29tL3JlcG8vRlJDLUNBLzAvQzg5MzVGRENBNTAyOEFFODIwOUZF
QzgyQUQ4QUU4Q0ZCN0M2RTc3Ni5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYw
YzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzZlNWQ5NjExLWZkMzMt
NDg4Yy05YWVjLWY0ZGYyYTI1MzUxZS9mZDc3ZjU1ZWZlM2E5M2M1M2NhM2RjOGE2
ZjgzNzRmZTcwZmVjNTU2N2RkMWU4Yzg1NS5jZXIwWwYIKwYBBQUHAQsETzBNMEsG
CCsGAQUFBzALhj9yc3luYzovL3Jwa2kuYWRtaW4uZnJlZXJhbmdlY2xvdWQuY29t
L3JlcG8vRlJDLUNBLzAvQVMyMzQ3MC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjA0BggrBgEFBQcBBwEB/wQlMCMwIQQCAAIwGwMHACYC/tJwhAMHACYC/tJx
EAMHACYC/tJxiTANBgkqhkiG9w0BAQsFAAOCAQEAUJTsP0U7pP2aGmSYjQJfbIqS
eC+bNDrbpt+MVM3ZqA9PGDK8mNHKPp2+YvoPxjz+ExooUz8A8Ha9XVW+fQUw+lgN
x5iRCybTrPyV44ZW9KgLstkx3F/VKRlXm+BhQkZYyYrJk+BTkfT6C3bWf++zNBUF
EI2lccuzH7T23RxMZmMj7R2cSUxjM3cEViZ9COxp593tpBi9OIvecrcGRBRJd1Z+
3e+8k8jRm4cwJBGX3BXrujU6lvwQDM4m/Zuaw8Svnb4UIJsUW3aeQJBN9d5tq1RK
hFtRptbFIsd1TYfOJhtpgkiHmbnvrncdjDvNFqarh6u3/sh4CBXbfhWT2uICPQ==
-----END CERTIFICATE-----
Generated at Sat Aug 22 14:51:31 2026 by rpki-client