Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS400307.roa
File:                     AS400307.roa (raw, json)
Hash identifier:          I9fx77HupkagQfBrZcfHU6LJR/TF3Ax7DAUuNQ+uwSw=
Subject key identifier:   C3:D5:B6:A1:8B:D4:D9:FC:E2:AA:BF:FB:A7:0E:08:37:8B:68:82:05
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       61371E968E35F813E5C7BE8990866BAB9E595834
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS400307.roa
Signing time:             Tue 19 May 2026 04:03:17 +0000
ROA not before:           Tue 19 May 2026 03:58:17 +0000
ROA not after:            Tue 18 May 2027 04:03:17 +0000
asID:                     400307
IP address blocks:        2602:fed2:7183::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:37:1e:96:8e:35:f8:13:e5:c7:be:89:90:86:6b:ab:9e:59:58:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: May 19 03:58:17 2026 GMT
            Not After : May 18 04:03:17 2027 GMT
        Subject: CN=C3D5B6A18BD4D9FCE2AABFFBA70E08378B688205
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:8c:7f:8d:2d:c4:f6:7b:43:f3:ca:ea:a9:99:
                    f3:2a:6f:f6:0f:56:5e:ac:03:a8:a4:f4:39:d0:8d:
                    c5:7e:28:d8:6a:e5:05:67:33:61:7a:b3:7f:0e:03:
                    9c:5c:11:8f:35:1f:b0:d8:e6:c0:4c:16:ca:36:3e:
                    25:6f:be:d1:1a:1a:7f:24:24:e0:b5:3a:6d:34:97:
                    cd:42:eb:a5:7f:db:b7:72:a5:e5:fa:5f:22:b1:e2:
                    cd:a1:ae:86:33:6c:65:de:f3:fc:97:4c:af:cc:05:
                    37:42:4f:b8:04:ec:19:85:e0:7a:eb:32:f8:b9:0a:
                    a5:de:f8:cb:22:cc:49:62:c3:91:68:08:33:f4:db:
                    b4:4b:a8:ea:cc:c9:1f:86:85:ab:b8:87:d9:17:06:
                    fe:f9:ae:c8:8d:b8:fa:22:6d:04:bb:93:71:d3:b0:
                    ad:57:26:e0:2d:be:d1:5f:8e:07:93:c3:e4:9d:84:
                    bb:61:09:4e:49:32:9a:29:2e:da:e0:d6:2f:ef:d4:
                    be:ac:1f:a9:d9:bd:e1:d9:b2:a5:c6:24:09:08:e2:
                    25:12:73:2d:77:ba:46:ab:e6:2d:1d:ce:d8:6a:60:
                    fd:4c:7a:7f:76:b4:1d:a5:ce:4f:36:1e:39:2b:e9:
                    da:1b:24:03:7b:ef:c9:2c:2e:ed:66:3e:51:14:a8:
                    0c:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:D5:B6:A1:8B:D4:D9:FC:E2:AA:BF:FB:A7:0E:08:37:8B:68:82:05
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS400307.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed2:7183::/48

    Signature Algorithm: sha256WithRSAEncryption
         33:d2:7b:05:b9:45:a9:65:ea:bc:29:fa:de:5a:81:cf:74:6e:
         c6:e9:99:8a:f7:84:1a:33:17:cc:ee:0b:26:41:57:ba:42:98:
         46:0b:11:fd:44:7b:1a:5d:d2:38:f5:cb:d0:21:56:19:a4:ba:
         a3:61:87:f4:a3:df:f1:c0:af:54:ff:e7:f7:b2:e8:ec:f5:31:
         11:80:a1:cc:b6:57:61:8a:c0:90:c5:77:9a:0d:c9:8a:97:77:
         11:43:df:cd:e6:ad:3f:20:34:33:35:2c:20:5a:9e:e5:40:f2:
         16:de:30:8a:b3:7f:d2:e0:e0:c2:db:45:6c:0d:e9:16:72:31:
         17:51:be:4b:d9:be:b8:1c:11:8d:89:5a:ec:00:8d:06:d7:7d:
         a4:fb:ca:01:f7:c7:92:dc:63:2c:dd:25:4c:63:bc:fc:ec:47:
         cc:aa:45:e6:8b:9c:5a:aa:bd:b4:64:6a:5e:10:9c:6b:95:c6:
         ad:ca:5b:b0:aa:d9:3b:14:26:79:b1:1d:d5:09:02:bb:e8:ed:
         d5:ea:78:67:9e:13:2a:2d:c7:b9:f8:ab:a5:23:d1:20:c5:3a:
         ae:7d:f1:05:47:04:6d:5f:9d:58:73:b8:d4:49:7a:d7:0a:16:
         61:6e:33:ee:f4:42:59:56:3a:d9:40:7b:ee:78:6e:ee:de:68:
         81:2e:28:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:04:21 2026 by rpki-client