Route Origin Authorization

$ rpki-client -vvvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS397423.roa
File:                     AS397423.roa (raw, json)
Hash identifier:          NVo9soKH6y0hanZ6YRd4D97ftELjOji9rr65mCCWjjA=
Subject key identifier:   36:A1:BD:08:8D:E7:D0:D9:02:D7:11:11:C2:EA:31:AC:4C:9E:A7:80
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       3CC0E2801EC7FADEC34EFFCC94F897BBF10EDB5D
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS397423.roa
Signing time:             Fri 16 Oct 2026 14:32:10 +0000
ROA not before:           Fri 16 Oct 2026 14:27:10 +0000
ROA not after:            Fri 15 Oct 2027 14:32:10 +0000
asID:                     397423
IP address blocks:        2602:fed2:7116::/48 maxlen: 48
                          2602:fed2:7127::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 23 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:c0:e2:80:1e:c7:fa:de:c3:4e:ff:cc:94:f8:97:bb:f1:0e:db:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Oct 16 14:27:10 2026 GMT
            Not After : Oct 15 14:32:10 2027 GMT
        Subject: CN=36A1BD088DE7D0D902D71111C2EA31AC4C9EA780
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ec:2a:b3:d5:ab:cb:9a:d9:ec:24:de:d8:d2:
                    02:c7:f7:96:04:b3:1b:c2:20:8d:1d:f4:b6:ba:91:
                    f2:48:a4:ab:8c:25:d6:f9:0b:07:89:8e:0b:7e:0f:
                    a9:1e:4a:99:ce:28:96:e9:bf:2b:cf:92:e9:7e:04:
                    41:8a:8d:b3:eb:a0:39:fe:46:78:60:44:ea:c9:ba:
                    1f:6f:c5:fb:1b:19:6e:04:8b:87:36:83:80:d0:2f:
                    13:1d:1b:e4:2f:cc:c9:dc:7b:75:af:83:f3:7d:10:
                    08:35:a5:0a:62:4a:08:12:8b:c0:0e:64:50:88:20:
                    d7:5f:5e:9c:3b:a4:f6:50:2e:c2:d3:61:91:4c:b1:
                    74:19:50:a2:13:2c:b1:c2:a4:5c:50:3f:80:5e:b3:
                    e9:e4:8c:83:a5:e4:cb:e1:fd:d9:a8:06:70:48:3f:
                    cb:01:61:fe:9c:d3:bb:f7:07:38:94:fc:45:e7:cb:
                    04:63:10:d8:fb:c1:ae:e9:63:9e:f2:e5:51:3e:98:
                    6f:cf:27:51:0b:af:9d:21:6b:6c:9a:71:4f:8f:6e:
                    89:ce:e4:d1:26:89:9b:04:82:3c:ea:67:69:f1:1f:
                    24:4b:a3:a8:0a:d0:bf:ed:0d:5a:d9:2c:78:85:38:
                    25:46:6c:f3:29:3b:bd:ef:d5:4b:f5:bc:63:df:b6:
                    47:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:A1:BD:08:8D:E7:D0:D9:02:D7:11:11:C2:EA:31:AC:4C:9E:A7:80
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS397423.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed2:7116::/48
                  2602:fed2:7127::/48

    Signature Algorithm: sha256WithRSAEncryption
         5b:66:de:9e:8c:10:90:2e:7f:5d:4e:c1:6c:1f:02:f2:1e:8f:
         58:83:fc:91:8f:56:a4:b1:95:7f:2d:f9:e8:8c:7a:7f:f1:57:
         5f:2c:58:c9:a5:0f:f8:2b:d1:5a:cd:40:6a:9d:93:db:e7:bc:
         5b:8d:47:5d:aa:04:e9:ae:dc:c2:fd:3c:00:22:07:11:83:16:
         47:1a:0b:95:02:46:ae:fb:a7:b5:66:69:1b:49:42:b3:39:ee:
         15:bc:66:e1:29:2a:56:20:c7:46:ed:92:1b:06:d0:7c:b6:dc:
         04:b8:0f:ea:03:d6:58:d9:23:d5:38:d7:cd:84:02:fa:81:91:
         90:ce:89:75:32:e9:43:9a:4e:b7:3a:88:0e:3a:c2:6f:68:7c:
         e8:e2:7f:ab:cd:41:4a:86:7a:3f:ce:54:5e:b0:b1:60:54:dc:
         bc:ed:a7:28:40:b2:d0:a9:21:56:54:ac:4b:8c:36:57:41:e7:
         20:8e:9d:26:a8:df:de:34:8e:80:80:8d:9e:35:e1:b6:61:9e:
         2d:4d:8e:42:b2:4b:e0:f7:78:9d:a5:c5:d2:a1:6b:cf:72:36:
         13:77:90:95:a0:0e:3e:9b:b5:9e:92:a1:7b:20:56:f3:31:a2:
         6e:33:1d:d0:64:98:0e:62:98:40:7c:64:49:22:bc:71:4c:34:
         32:ff:8d:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 01:18:39 2026 by rpki-client