Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS36436.roa
File:                     AS36436.roa (raw, json)
Hash identifier:          XDsBCTe+IOnx0VQd2eHbSUNFgBvnMfayqlbfKUHy+d4=
Subject key identifier:   A0:59:EB:0F:4F:DA:6E:97:1B:A2:83:F1:45:27:9F:84:31:D4:91:E6
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       36D97E81B7662D239C3FA06CD84D35D504055F1F
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS36436.roa
Signing time:             Tue 19 May 2026 04:03:18 +0000
ROA not before:           Tue 19 May 2026 03:58:18 +0000
ROA not after:            Tue 18 May 2027 04:03:18 +0000
asID:                     36436
IP address blocks:        2602:fed2:7111::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:d9:7e:81:b7:66:2d:23:9c:3f:a0:6c:d8:4d:35:d5:04:05:5f:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: May 19 03:58:18 2026 GMT
            Not After : May 18 04:03:18 2027 GMT
        Subject: CN=A059EB0F4FDA6E971BA283F145279F8431D491E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:1d:d0:87:3d:45:f2:05:27:1d:ac:19:45:10:
                    a1:ea:a3:7f:57:bc:e0:bd:01:64:69:ba:16:55:61:
                    d6:3e:64:af:06:13:94:7f:c5:1f:e9:6d:a2:f4:89:
                    e5:67:9a:c9:e1:4f:02:77:2f:79:7a:e0:6b:f8:69:
                    c8:a4:e7:95:58:e6:7f:7a:93:a0:ef:46:d8:47:f6:
                    a1:c4:c7:3f:98:c6:e7:96:83:29:dc:ef:eb:12:b7:
                    16:89:06:6d:99:0f:dc:62:cf:7b:41:f4:8c:bb:88:
                    6a:06:39:7b:ef:79:74:8d:c1:64:50:31:99:17:9e:
                    78:74:2d:bc:5e:56:35:9c:4e:d3:14:c2:67:7c:54:
                    db:0a:20:50:f3:03:36:1c:95:5c:fa:7f:68:fb:43:
                    00:07:2b:46:df:28:8c:1c:2c:45:31:bb:cb:6f:37:
                    e5:95:f5:4b:2b:15:46:45:7e:0b:b1:8c:c6:6e:7a:
                    82:37:ec:59:2e:07:b7:46:5f:72:76:21:2b:ec:51:
                    10:84:f8:06:63:ee:2d:1e:89:c7:f7:88:cb:6f:05:
                    9f:0b:bc:cc:58:59:f7:9b:18:35:ea:91:04:22:72:
                    ff:86:2c:65:87:eb:a4:bf:6a:20:97:05:1c:f0:5f:
                    4e:74:fc:59:96:41:46:e4:30:49:b8:cb:8b:10:c0:
                    82:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:59:EB:0F:4F:DA:6E:97:1B:A2:83:F1:45:27:9F:84:31:D4:91:E6
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS36436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed2:7111::/48

    Signature Algorithm: sha256WithRSAEncryption
         b9:61:fd:4b:9c:c0:c0:46:44:cc:32:aa:b7:22:b3:dc:06:8c:
         35:73:37:35:f1:6c:8d:ce:62:16:f3:44:32:e8:15:ec:ff:ca:
         7f:e4:df:85:9e:77:2a:aa:1b:44:e4:35:20:85:b0:5c:a8:92:
         3a:7f:e1:ea:24:f6:a5:88:b1:d7:2e:06:6c:90:d0:59:b3:24:
         a8:b4:3b:94:d4:7f:8e:40:a1:7b:10:03:b7:f0:9c:a0:9f:3d:
         8b:64:0f:d1:ab:9b:98:02:8b:d2:c6:01:d0:47:90:59:5f:5b:
         3e:e5:cf:6d:e3:6f:c7:0e:e3:cd:8f:40:d0:4e:6a:06:05:86:
         dd:8b:e0:36:e7:db:70:51:01:d9:3e:fc:c1:e1:66:1f:58:69:
         ee:35:ef:ee:fe:87:51:89:49:60:3c:20:6d:bc:0e:44:41:fe:
         52:98:9a:6e:95:30:e1:ac:e7:13:44:a7:f7:29:d4:13:a1:d2:
         7c:67:14:99:74:b6:2c:75:63:4c:1e:a1:73:9a:2f:e2:93:f7:
         13:ad:d1:c6:a1:68:93:27:1b:99:02:5c:7d:a3:b5:91:69:5c:
         4e:78:f0:27:4a:8a:16:f8:38:cb:e1:a8:1b:3b:9c:90:2e:e7:
         58:9d:5f:79:d3:11:b1:d4:50:8b:dd:16:58:93:28:d2:98:52:
         d7:3c:1f:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:04:40 2026 by rpki-client