Route Origin Authorization

$ rpki-client -vvvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS398493.roa
File:                     AS398493.roa (raw, json)
Hash identifier:          nKMTth9EPR7CAKrRNoWaZXQ5h2nLNufBf2wzPT0bpm8=
Subject key identifier:   ED:12:27:C3:7C:A0:53:1D:59:9F:66:B9:59:F1:22:E6:7D:95:A6:16
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       325D5712D67F5D75027C39369A7296777039394F
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS398493.roa
Signing time:             Wed 19 Aug 2026 03:42:29 +0000
ROA not before:           Wed 19 Aug 2026 03:37:29 +0000
ROA not after:            Wed 18 Aug 2027 03:42:29 +0000
asID:                     398493
IP address blocks:        2602:fed2:7318::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:5d:57:12:d6:7f:5d:75:02:7c:39:36:9a:72:96:77:70:39:39:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Aug 19 03:37:29 2026 GMT
            Not After : Aug 18 03:42:29 2027 GMT
        Subject: CN=ED1227C37CA0531D599F66B959F122E67D95A616
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:20:b8:22:db:3f:72:c1:7a:95:21:87:23:c3:
                    9d:b4:12:a6:63:54:36:4e:8e:8a:43:fa:27:99:fa:
                    11:d7:4d:f7:ea:8a:70:2d:ec:7c:7b:4c:bb:c6:f3:
                    15:34:80:f3:17:ce:4d:ab:e2:83:82:0f:3d:a7:8f:
                    17:4a:4d:fb:5d:b9:d2:f9:b3:52:f0:ee:92:6d:14:
                    e2:52:b5:28:cc:50:a5:ca:1e:6f:3b:59:59:c4:16:
                    fc:29:8d:c9:cb:da:13:d2:8d:ba:5e:1a:83:bc:4f:
                    d4:9f:4c:8d:54:2e:19:71:0c:e9:fb:ac:2c:2f:dd:
                    b3:e7:e9:f5:13:10:d6:6c:15:1e:3a:3f:b0:46:c6:
                    0f:27:03:16:87:93:b0:c1:c9:6c:49:cb:51:68:20:
                    56:1b:e0:85:44:20:56:77:4d:e3:35:9d:95:33:18:
                    cc:50:05:a2:b8:7d:3d:fe:70:b1:98:8a:b3:0a:21:
                    1e:97:6d:85:b1:c6:8e:81:fd:6e:c9:69:09:b7:35:
                    55:e6:d6:c4:cb:60:d6:25:c4:61:e9:6c:cd:92:36:
                    8b:83:db:50:65:b8:c0:45:0c:da:f0:ec:73:71:3e:
                    c4:5c:e5:a9:6f:92:5d:90:8e:5f:74:df:bc:67:d1:
                    d5:9f:6e:d8:2d:65:af:4c:99:56:06:e0:65:93:8d:
                    9c:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:12:27:C3:7C:A0:53:1D:59:9F:66:B9:59:F1:22:E6:7D:95:A6:16
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS398493.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed2:7318::/48

    Signature Algorithm: sha256WithRSAEncryption
         b5:6c:94:d3:fc:3e:a4:f2:fc:e6:df:5d:ca:0f:10:a4:ca:c0:
         0a:bc:a2:8c:8a:61:3f:63:78:40:e2:f6:cf:87:fa:55:d3:81:
         35:75:c8:27:7c:cb:5c:62:5a:9b:64:23:11:a7:7a:33:82:62:
         49:9b:63:94:e0:59:a1:60:d6:83:43:bd:02:0a:64:d3:13:7e:
         62:48:cb:87:3a:b8:4a:80:a7:e0:1f:7e:7a:ff:42:e7:d0:5a:
         9b:05:01:09:95:b2:cc:e9:13:57:35:89:75:c7:80:d6:92:65:
         04:7a:92:71:68:78:15:f6:c8:ae:dc:72:ae:66:25:60:be:44:
         c5:8b:86:b1:c5:ee:ba:6d:73:cb:b1:30:21:e5:bf:72:86:d8:
         7a:3e:1a:62:65:c4:2f:87:00:66:d4:54:a3:f3:78:7e:68:eb:
         01:26:ac:8b:0e:5c:d3:53:5c:bd:c5:97:88:6c:8b:cf:25:64:
         9d:ac:24:d8:31:65:b4:49:34:0c:04:23:cd:82:6b:2d:9a:97:
         98:a5:e3:80:10:6f:57:f1:52:b4:52:53:0e:b6:fb:2f:92:0e:
         e8:55:46:69:4c:52:dd:d1:4b:54:72:27:af:f0:54:08:4b:d5:
         ed:65:03:b2:84:f6:d0:1e:82:5c:a9:fa:78:52:ed:50:c8:61:
         9f:22:3a:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:33:30 2026 by rpki-client