Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS25846.roa
File:                     AS25846.roa (raw, json)
Hash identifier:          6SqfPbC8CBapZ7wcX/GaDR+7ewTystTwfhPcK5/G8aY=
Subject key identifier:   F8:53:82:CB:D1:BE:6B:2C:46:38:14:F6:C5:20:8A:9F:0D:1D:3E:66
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       3DB5E1FE71F6CC2CB8908DE57B208E8C7182A60A
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS25846.roa
Signing time:             Tue 23 Jun 2026 09:29:13 +0000
ROA not before:           Tue 23 Jun 2026 09:24:13 +0000
ROA not after:            Tue 22 Jun 2027 09:29:13 +0000
asID:                     25846
IP address blocks:        2602:fed2:770a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:b5:e1:fe:71:f6:cc:2c:b8:90:8d:e5:7b:20:8e:8c:71:82:a6:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Jun 23 09:24:13 2026 GMT
            Not After : Jun 22 09:29:13 2027 GMT
        Subject: CN=F85382CBD1BE6B2C463814F6C5208A9F0D1D3E66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:46:da:84:e7:cb:a5:bb:54:8d:4f:80:7e:37:
                    21:e8:ca:1f:5d:f8:d9:b0:2f:f1:f3:98:73:5a:46:
                    52:a3:a6:26:62:25:82:17:05:47:14:11:bf:bb:54:
                    1b:8b:cc:2f:e6:8c:f4:db:d9:7e:9d:9b:d6:7b:53:
                    ff:9c:d8:17:6c:ad:b6:fc:b2:cc:89:ef:14:a5:f9:
                    1f:df:93:b5:77:98:d3:7b:85:f0:f1:74:3b:3e:ba:
                    93:a9:31:1e:f4:c5:ce:9b:5f:79:52:0c:7f:ad:2a:
                    ec:46:bb:d4:5f:13:0a:06:84:da:f4:d2:a4:54:0a:
                    bd:7c:4d:c1:a7:93:2a:59:97:45:68:25:f5:ec:d2:
                    45:dd:22:dd:26:d6:70:af:33:0c:da:1c:06:cf:00:
                    ed:69:b7:1f:21:9d:2e:8b:82:a9:e8:04:c9:0e:bd:
                    99:3a:f1:04:f5:e6:6c:b1:ad:1a:b8:f5:fd:7c:b8:
                    3a:b6:27:70:0e:49:84:2f:a1:24:8b:2f:73:f8:6a:
                    06:27:aa:7b:8e:c4:68:b0:09:4e:30:5f:21:3d:d9:
                    2d:b9:b3:62:99:75:4a:7f:5f:b8:ee:41:3a:af:50:
                    36:bc:83:a2:61:a4:fc:3c:cd:d3:11:c3:87:15:fa:
                    8a:e4:00:59:f8:c6:da:3e:c2:9e:35:9e:e8:3d:60:
                    34:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:53:82:CB:D1:BE:6B:2C:46:38:14:F6:C5:20:8A:9F:0D:1D:3E:66
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS25846.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed2:770a::/48

    Signature Algorithm: sha256WithRSAEncryption
         78:26:0e:42:b0:b7:c5:1a:ee:e7:76:68:2a:c9:8f:e7:32:0e:
         5a:35:8e:d9:9d:8e:16:a1:ea:66:54:95:0b:a9:de:53:db:68:
         89:3b:c6:92:c6:bd:c3:0e:1b:6b:bd:e8:2e:29:de:49:2a:58:
         46:b9:51:dc:c2:10:27:91:b8:fe:a2:79:6c:d1:57:80:ff:ef:
         19:81:d5:3d:01:bd:b7:6b:ef:be:06:92:71:56:4e:60:c3:df:
         f3:cc:87:8e:c4:ed:40:b9:31:d1:b1:3a:59:23:1b:a8:92:74:
         4f:f1:5a:f2:c8:c3:c5:90:9d:22:73:71:85:46:2f:5c:fb:39:
         84:60:43:eb:a7:a0:5d:b2:1c:b3:86:08:a6:20:0d:15:48:04:
         54:36:db:ae:be:ce:3c:73:a1:5d:75:24:24:d8:aa:bf:7d:eb:
         7d:48:4f:b5:21:29:3e:68:59:92:00:0b:99:77:cb:20:19:e7:
         64:8b:ab:34:a1:11:c2:02:51:5e:06:3e:a2:c8:60:f9:b4:3e:
         28:a4:37:58:f8:1a:db:9c:69:02:a1:ed:fa:98:51:dd:50:07:
         10:95:c9:12:ad:cf:ca:a7:16:cb:eb:8e:b0:01:a3:25:bf:f5:
         c2:ff:49:5d:61:91:ca:f2:90:e3:ef:b8:4a:21:93:21:52:04:
         d3:98:1b:48
-----BEGIN CERTIFICATE-----
MIIFWDCCBECgAwIBAgIUPbXh/nH2zCy4kI3leyCOjHGCpgowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZmQ3N2Y1NWVmZTNhOTNjNTNjYTNkYzhhNmY4Mzc0ZmU3
MGZlYzU1NjdkZDFlOGM4NTUwHhcNMjYwNjIzMDkyNDEzWhcNMjcwNjIyMDkyOTEz
WjAzMTEwLwYDVQQDEyhGODUzODJDQkQxQkU2QjJDNDYzODE0RjZDNTIwOEE5RjBE
MUQzRTY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8kbahOfLpbtU
jU+Afjch6MofXfjZsC/x85hzWkZSo6YmYiWCFwVHFBG/u1Qbi8wv5oz029l+nZvW
e1P/nNgXbK22/LLMie8Upfkf35O1d5jTe4Xw8XQ7PrqTqTEe9MXOm195Ugx/rSrs
RrvUXxMKBoTa9NKkVAq9fE3Bp5MqWZdFaCX17NJF3SLdJtZwrzMM2hwGzwDtabcf
IZ0ui4Kp6ATJDr2ZOvEE9eZssa0auPX9fLg6tidwDkmEL6Ekiy9z+GoGJ6p7jsRo
sAlOMF8hPdktubNimXVKf1+47kE6r1A2vIOiYaT8PM3TEcOHFfqK5ABZ+MbaPsKe
NZ7oPWA0awIDAQABo4ICWDCCAlQwHQYDVR0OBBYEFPhTgsvRvmssRjgU9sUgip8N
HT5mMB8GA1UdIwQYMBaAFMiTX9ylAoroIJ/sgq2K6M+3xud2MA4GA1UdDwEB/wQE
AwIHgDBxBgNVHR8EajBoMGagZKBihmByc3luYzovL3Jwa2kuYWRtaW4uZnJlZXJh
bmdlY2xvdWQuY29tL3JlcG8vRlJDLUNBLzAvQzg5MzVGRENBNTAyOEFFODIwOUZF
QzgyQUQ4QUU4Q0ZCN0M2RTc3Ni5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYw
YzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzZlNWQ5NjExLWZkMzMt
NDg4Yy05YWVjLWY0ZGYyYTI1MzUxZS9mZDc3ZjU1ZWZlM2E5M2M1M2NhM2RjOGE2
ZjgzNzRmZTcwZmVjNTU2N2RkMWU4Yzg1NS5jZXIwWwYIKwYBBQUHAQsETzBNMEsG
CCsGAQUFBzALhj9yc3luYzovL3Jwa2kuYWRtaW4uZnJlZXJhbmdlY2xvdWQuY29t
L3JlcG8vRlJDLUNBLzAvQVMyNTg0Ni5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACYC/tJ3CjANBgkqhkiG
9w0BAQsFAAOCAQEAeCYOQrC3xRru53ZoKsmP5zIOWjWO2Z2OFqHqZlSVC6neU9to
iTvGksa9ww4ba73oLineSSpYRrlR3MIQJ5G4/qJ5bNFXgP/vGYHVPQG9t2vvvgaS
cVZOYMPf88yHjsTtQLkx0bE6WSMbqJJ0T/Fa8sjDxZCdInNxhUYvXPs5hGBD66eg
XbIcs4YIpiANFUgEVDbbrr7OPHOhXXUkJNiqv33rfUhPtSEpPmhZkgALmXfLIBnn
ZIurNKERwgJRXgY+oshg+bQ+KKQ3WPga25xpAqHt+phR3VAHEJXJEq3PyqcWy+uO
sAGjJb/1wv9JXWGRyvKQ4++4SiGTIVIE05gbSA==
-----END CERTIFICATE-----
Generated at Tue Jul 21 14:47:04 2026 by rpki-client