Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS39753.roa
File:                     AS39753.roa (raw, json)
Hash identifier:          F7XuLY9r/suo82HD+LueMDx4FqE9fyA98C1gJKW6S3Q=
Subject key identifier:   36:7E:73:DF:B6:6D:18:36:A9:1F:7F:95:45:A0:22:4C:6F:69:31:D8
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       710591861B6A75E3FF04EB6753BE9899857E8109
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS39753.roa
Signing time:             Tue 19 May 2026 04:03:17 +0000
ROA not before:           Tue 19 May 2026 03:58:17 +0000
ROA not after:            Tue 18 May 2027 04:03:17 +0000
asID:                     39753
IP address blocks:        2602:fed2:7020::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:05:91:86:1b:6a:75:e3:ff:04:eb:67:53:be:98:99:85:7e:81:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: May 19 03:58:17 2026 GMT
            Not After : May 18 04:03:17 2027 GMT
        Subject: CN=367E73DFB66D1836A91F7F9545A0224C6F6931D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:39:49:bd:15:8e:c1:e1:8a:fd:6b:6a:7f:35:
                    23:f3:06:62:e6:44:44:a8:35:5e:ac:51:c9:1d:e4:
                    78:c3:52:62:18:dd:2a:42:cd:d8:93:de:c5:1d:98:
                    4e:de:84:06:32:38:17:03:f7:02:c5:07:3f:4a:de:
                    db:7b:8b:10:a4:03:0e:6b:d1:ce:08:fc:9b:f4:85:
                    24:50:27:46:d9:69:6b:5b:24:80:40:96:11:95:9e:
                    1f:4b:82:b9:1c:8d:85:b8:ea:98:ea:50:10:25:0e:
                    43:76:92:a3:65:a5:c6:f2:67:be:55:97:95:e1:80:
                    72:23:94:a6:3a:b7:1e:6e:28:51:c1:37:d0:6a:00:
                    a5:c2:d3:a1:4b:1e:d0:30:4f:ad:12:00:5c:5b:41:
                    cf:de:6a:5b:78:94:28:99:15:51:1a:1b:d1:2f:30:
                    28:8e:ed:18:ce:5b:8b:eb:8a:d2:80:fa:0c:05:17:
                    92:ed:c7:c4:2a:d5:6d:9d:30:d0:47:66:c8:f3:de:
                    99:8a:fd:54:9b:05:38:3c:54:98:47:17:83:e9:79:
                    21:5a:80:7a:7e:e7:f9:dd:62:d4:69:86:9e:a2:08:
                    09:89:5b:27:b3:76:c4:a1:ea:e9:d5:89:9e:c1:21:
                    33:d0:dd:1b:d8:19:0d:a7:1b:7a:c1:62:a9:c8:31:
                    68:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:7E:73:DF:B6:6D:18:36:A9:1F:7F:95:45:A0:22:4C:6F:69:31:D8
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS39753.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed2:7020::/44

    Signature Algorithm: sha256WithRSAEncryption
         87:3d:31:e2:4f:ac:9f:43:43:38:7b:0a:b2:76:b6:bd:4d:74:
         7a:8c:8d:75:c5:fc:be:f3:00:18:8c:9f:54:d8:5c:63:c9:93:
         26:dd:c9:31:0e:67:9b:98:7b:aa:ba:14:2b:10:25:30:35:b9:
         e3:a6:42:98:88:31:08:9b:ef:13:c0:f1:ef:3e:db:9a:40:53:
         1d:c2:b8:65:18:5e:74:40:a4:2b:84:af:85:e2:2d:4a:5b:38:
         5e:29:19:cc:da:93:bd:57:69:87:7d:c6:0f:15:1b:23:57:d0:
         2a:56:c9:0b:7e:37:0f:c0:13:da:56:2b:1c:58:f8:e9:39:1c:
         c1:f5:22:f5:99:df:38:b4:36:55:07:27:e6:fb:2c:ea:9c:c9:
         d7:df:ec:8c:37:58:a3:cb:3b:7e:8a:c6:bd:fa:de:61:89:82:
         b5:42:99:bd:69:5d:69:c2:e7:b7:11:a4:70:58:20:ec:09:3a:
         be:73:9e:f3:55:54:77:07:a1:54:96:88:69:de:94:07:93:7e:
         2e:7b:67:64:43:ce:e4:70:50:43:cf:33:4a:94:0e:7a:ed:cd:
         2f:dd:2c:72:0c:1c:e5:41:a6:e9:89:3c:b8:14:b4:0a:32:81:
         5a:46:8c:da:6d:2a:16:9a:26:bb:32:94:53:cd:0d:58:54:77:
         32:09:5f:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 00:06:04 2026 by rpki-client