Route Origin Authorization

$ rpki-client -vvvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS36832.roa
File:                     AS36832.roa (raw, json)
Hash identifier:          fJZkVju2tPJKu1s2WXsxrdW8pLH5xRUSWN9fk51D+LQ=
Subject key identifier:   90:73:86:C3:42:B8:4C:30:05:36:04:C7:63:0E:52:1C:F7:9A:7E:57
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       4CC53EA21F727F7F8562CE99603CAA1404452073
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS36832.roa
Signing time:             Fri 02 Oct 2026 21:31:55 +0000
ROA not before:           Fri 02 Oct 2026 21:26:55 +0000
ROA not after:            Fri 01 Oct 2027 21:31:55 +0000
asID:                     36832
IP address blocks:        2602:fed2:7b00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 22 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:c5:3e:a2:1f:72:7f:7f:85:62:ce:99:60:3c:aa:14:04:45:20:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Oct  2 21:26:55 2026 GMT
            Not After : Oct  1 21:31:55 2027 GMT
        Subject: CN=907386C342B84C30053604C7630E521CF79A7E57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:37:96:2d:7d:6e:4b:37:93:c5:df:16:10:09:
                    d8:05:45:7e:c7:38:7b:0b:28:7c:81:f2:53:6d:6b:
                    ed:34:7e:d4:0e:3a:a7:a6:ca:75:f1:d0:1e:17:9f:
                    ea:21:55:af:3e:4e:b8:23:f9:45:6f:21:0e:e9:cc:
                    ed:e3:0b:91:73:c1:d5:79:7a:c4:81:11:1e:06:fd:
                    27:32:53:eb:39:35:4d:10:98:8f:75:f3:ff:59:ce:
                    a6:b6:ea:35:57:f3:4a:29:09:a5:be:12:5d:80:d6:
                    49:de:6f:46:53:6b:38:bf:6f:ba:69:43:4d:c9:b3:
                    9d:e5:fc:cb:d0:76:54:04:a8:66:b6:f4:c3:25:e2:
                    5d:cb:bc:05:ef:d3:ab:f4:1d:42:4a:1e:9c:d0:6a:
                    c9:ad:52:94:75:49:32:08:b9:10:a3:4f:d3:27:50:
                    c8:e6:81:19:38:6c:f1:8e:05:3c:9a:46:b1:b4:e3:
                    bf:e6:27:51:d4:e3:4f:7f:ed:4f:e3:dc:36:89:ab:
                    01:10:79:63:87:7a:6b:32:e1:10:ac:40:d7:8c:e2:
                    57:d3:a0:6f:97:52:89:dc:f4:4f:58:2b:57:b5:63:
                    44:36:86:0b:8c:80:44:8e:6d:c6:e5:c2:3f:1d:99:
                    df:6f:a0:42:0b:e6:1f:fe:99:71:53:f1:56:a5:b6:
                    b3:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:73:86:C3:42:B8:4C:30:05:36:04:C7:63:0E:52:1C:F7:9A:7E:57
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS36832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed2:7b00::/40

    Signature Algorithm: sha256WithRSAEncryption
         bd:7f:04:20:5b:7d:6e:1a:ce:45:a8:49:5f:07:1f:0b:ed:a5:
         a5:0a:cd:87:d3:55:1a:c9:17:a9:c4:21:e1:ae:fc:d2:b8:76:
         04:15:00:0c:81:14:06:2e:dc:19:49:84:f4:6a:b1:bf:a0:4b:
         37:05:ba:73:39:d1:97:e7:c8:3e:1e:6d:89:ba:a0:76:6d:f6:
         0d:54:46:b5:d1:4e:eb:3d:10:3f:d5:e3:3d:17:27:22:d5:fd:
         2f:93:f6:4d:65:ac:11:19:1a:55:95:21:28:d5:5e:cf:aa:4b:
         93:ba:1f:d7:d8:96:da:ea:e3:d7:ac:4c:8a:1a:5d:74:5d:0a:
         2d:e6:7f:8f:22:d6:d4:ba:d8:6c:8b:06:1f:8c:72:36:4b:6e:
         b2:76:08:29:41:bc:ce:c0:1d:d1:fd:80:cc:e7:2f:54:38:72:
         5f:f6:98:5a:42:b9:f7:98:3d:5e:e0:b4:a6:11:c4:25:40:d9:
         cf:b5:b0:f2:98:8f:b3:f7:ba:8b:bd:fc:a4:9c:e7:35:2c:72:
         c7:85:8d:91:9f:44:ad:73:25:51:c3:71:42:22:9b:01:10:42:
         a2:be:7c:97:b0:7c:fb:d2:23:7b:e4:d9:90:ce:b4:8c:52:e2:
         f8:38:3f:1f:ca:39:87:58:de:31:c7:54:cf:de:07:2d:2b:ba:
         99:18:17:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 05:02:35 2026 by rpki-client