Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS38179.roa
File:                     AS38179.roa (raw, json)
Hash identifier:          8I/Ga6OJCgkZt0al1n4eHgzSawBrjyA9nOwrOzElipE=
Subject key identifier:   2E:E2:D7:00:14:46:53:81:59:59:25:E5:47:9C:D7:A2:1E:76:03:2E
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       69358B6FF927D76D3F76DFE28D10F2708FB2C2BC
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS38179.roa
Signing time:             Tue 19 May 2026 04:03:17 +0000
ROA not before:           Tue 19 May 2026 03:58:17 +0000
ROA not after:            Tue 18 May 2027 04:03:17 +0000
asID:                     38179
IP address blocks:        2602:fed2:7700::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:35:8b:6f:f9:27:d7:6d:3f:76:df:e2:8d:10:f2:70:8f:b2:c2:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: May 19 03:58:17 2026 GMT
            Not After : May 18 04:03:17 2027 GMT
        Subject: CN=2EE2D70014465381595925E5479CD7A21E76032E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:d8:46:37:ff:2f:6f:9c:a3:46:f3:df:9b:6c:
                    46:ba:e0:c1:20:1d:4c:94:8b:44:04:9c:8e:53:de:
                    02:21:f7:6e:b2:14:d2:08:5d:12:f5:7c:ec:9e:48:
                    70:63:78:b3:93:df:01:0a:f7:2a:10:fe:74:34:f6:
                    a8:26:a7:31:c2:8b:7d:f9:e6:04:29:92:c1:b7:19:
                    d0:7c:ab:d7:d4:ea:9e:e5:00:5f:4d:3b:65:0e:14:
                    1c:00:fa:01:44:00:3b:a7:5c:35:ea:03:01:b2:63:
                    45:45:a1:2a:73:ed:ef:e0:ad:f7:54:76:68:52:51:
                    03:5a:42:bf:6c:30:9f:4b:8a:c7:12:83:c0:27:ca:
                    b1:71:fa:95:83:b9:c3:10:f8:e6:86:54:d2:a8:c6:
                    32:68:f0:f7:26:c9:74:fc:7b:59:9b:a9:a4:a4:5d:
                    a3:96:21:22:79:70:0a:f6:17:d8:34:ff:5d:df:a1:
                    6b:47:fe:60:0e:d8:9b:0d:6f:f6:42:98:88:33:a5:
                    5c:6c:f8:98:95:bc:90:fc:df:21:8c:26:fd:41:1f:
                    35:fe:bf:c6:3f:ce:0d:d8:6a:e5:e4:91:26:e1:bf:
                    8d:43:c7:25:fd:74:51:83:95:9e:2a:4e:ce:41:b1:
                    4a:91:07:cc:b6:fa:65:7b:7b:84:63:f8:83:f1:e1:
                    ae:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:E2:D7:00:14:46:53:81:59:59:25:E5:47:9C:D7:A2:1E:76:03:2E
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS38179.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed2:7700::/48

    Signature Algorithm: sha256WithRSAEncryption
         10:c2:d7:d1:d5:5f:09:04:c4:b8:cd:c3:15:48:36:ca:fa:89:
         3a:8a:b7:75:0c:b5:0b:92:56:29:9a:5a:4e:e0:40:de:20:3e:
         d8:3e:bf:4d:3c:7d:3c:41:09:5b:a4:f8:63:87:31:08:70:a5:
         aa:cd:4a:ca:f6:cc:5e:2c:c9:d1:3e:2a:b4:a1:7d:69:85:a3:
         5c:ca:56:b1:af:4c:29:5f:a9:df:05:52:fb:6d:ca:55:ec:82:
         3f:17:07:51:ae:16:a4:6e:05:6a:b0:94:d1:4e:bf:cd:11:d3:
         4f:dc:2c:5b:9f:e0:a1:e4:53:a6:cf:88:b6:58:14:74:3b:3d:
         51:5c:5f:61:2c:51:20:cc:bc:14:0f:05:75:7f:5a:c4:09:b2:
         70:27:06:d3:de:13:c7:c8:e5:64:3c:bb:48:e5:dc:2c:95:c7:
         64:46:f5:ea:04:9c:fa:b4:6d:9d:f0:ee:6e:a4:7b:54:f5:84:
         98:54:54:fc:9b:4a:02:01:bc:de:fd:67:81:e6:00:5b:68:71:
         a8:92:e3:67:d2:85:5e:2c:a7:e4:bd:92:f4:79:0c:ef:bd:6b:
         fb:e4:e7:73:f6:50:e3:d8:a8:0f:6a:01:3a:7d:24:b7:96:c0:
         7e:2d:66:45:2d:40:12:1d:a1:12:87:ea:cb:08:a4:c9:a4:90:
         5f:91:bf:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:04:39 2026 by rpki-client