Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS400536.roa
File:                     AS400536.roa (raw, json)
Hash identifier:          4ANEflTcAxv+aYDQ9D8slp9HycLJxvgZg9Czr50JMjM=
Subject key identifier:   D9:D2:CA:3F:39:90:67:B8:11:B2:18:B2:ED:8B:50:53:15:AF:29:12
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       0EF02FCC75E361563737029D0ADDF106BFB21290
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS400536.roa
Signing time:             Fri 06 Feb 2026 10:10:11 +0000
ROA not before:           Fri 06 Feb 2026 10:05:11 +0000
ROA not after:            Fri 05 Feb 2027 10:10:11 +0000
asID:                     400536
IP address blocks:        2602:fed2:711c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 23 Feb 2026 20:07:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:f0:2f:cc:75:e3:61:56:37:37:02:9d:0a:dd:f1:06:bf:b2:12:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Feb  6 10:05:11 2026 GMT
            Not After : Feb  5 10:10:11 2027 GMT
        Subject: CN=D9D2CA3F399067B811B218B2ED8B505315AF2912
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:03:b2:6d:83:b8:24:65:ea:f1:b1:fa:52:38:
                    84:9f:2b:b7:b7:18:1b:87:68:ea:4d:65:ed:27:0c:
                    c3:8d:d1:1b:c6:76:d3:70:9d:cf:65:35:6a:98:cd:
                    f3:16:4f:f4:8b:96:b5:e2:f1:26:09:62:ba:79:83:
                    9b:7a:0f:84:15:b0:e0:cf:24:07:14:3d:ca:81:d4:
                    3e:1d:ef:16:ed:7a:6c:ce:99:43:67:26:a1:ff:66:
                    62:d5:97:12:c0:15:18:d9:99:99:4d:34:d3:73:5f:
                    9c:53:e0:c0:41:8c:97:fe:76:12:61:04:5e:52:c1:
                    ab:9f:15:96:de:0e:1c:fd:25:48:ea:e5:ae:e9:36:
                    70:cd:c6:cd:ce:fe:1a:6b:dd:b0:e3:08:5a:89:01:
                    fd:fe:ea:d3:6e:58:49:72:74:c6:9c:76:34:c9:2b:
                    12:49:fe:ad:2e:c6:a0:1f:bb:02:3c:31:91:b6:36:
                    c5:a4:db:ba:88:0c:c9:a8:c8:60:ab:17:e3:20:12:
                    eb:3f:51:78:53:29:5b:8d:e2:72:71:91:28:d9:4e:
                    d0:8b:1a:73:63:4d:68:e3:a5:69:88:76:ef:95:91:
                    04:b0:98:fd:4b:f8:f8:7f:be:59:ea:47:6f:84:36:
                    92:5a:17:c6:28:0d:c7:e1:0e:47:aa:11:b9:b3:3c:
                    d1:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:D2:CA:3F:39:90:67:B8:11:B2:18:B2:ED:8B:50:53:15:AF:29:12
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS400536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed2:711c::/48

    Signature Algorithm: sha256WithRSAEncryption
         02:ed:00:e8:49:25:22:4a:25:2a:d6:0f:dd:13:3d:af:46:fe:
         4f:82:cb:28:37:da:6e:5c:c4:06:7e:64:32:0b:9c:6f:6a:e5:
         37:a8:88:c8:c6:90:a3:f3:c3:2f:4a:e2:83:1b:39:f7:0f:b2:
         34:cc:3b:ca:99:fb:e6:ea:a0:5e:f4:e8:4e:22:39:af:23:49:
         0c:b9:41:21:72:fe:33:da:de:9e:94:dc:d8:6d:11:eb:69:22:
         3c:38:b2:01:df:51:14:f8:ed:6a:12:64:15:ae:88:5f:81:35:
         09:d2:6e:73:aa:49:2b:a0:3c:92:68:54:37:58:f2:91:a2:58:
         5c:9f:47:00:79:9c:53:2f:c7:5c:f3:d0:9c:39:50:bf:63:27:
         28:da:3b:a1:13:9b:51:51:21:77:d8:8d:91:35:99:fc:e8:6f:
         bc:cb:22:70:e8:c6:e0:0c:bb:3c:af:6a:10:5a:67:b0:30:dd:
         fc:bf:d0:8c:a9:39:54:7f:46:eb:09:a5:34:19:d3:9c:b8:ad:
         48:8a:38:bc:b9:95:13:b7:c3:eb:fc:55:d3:53:85:c2:49:f4:
         2b:49:a4:1e:b9:18:99:94:e3:5f:23:40:8e:71:68:8c:e1:18:
         3d:11:21:40:79:04:de:6a:fa:4b:79:83:21:55:40:e4:0a:19:
         37:6b:33:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 02:43:53 2026 by rpki-client