Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS49134.roa
File:                     AS49134.roa (raw, json)
Hash identifier:          9JuV8hajoAKyqN+UQmVRL/opt1r6jCNZkW6n4UC6RI8=
Subject key identifier:   9F:C8:F2:6D:AC:71:69:DA:BE:28:95:EB:81:2C:74:A5:3C:58:AE:F7
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       37C604D6D562A3F92DBC16BBBE4D07F08B21B288
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS49134.roa
Signing time:             Tue 19 May 2026 04:03:18 +0000
ROA not before:           Tue 19 May 2026 03:58:18 +0000
ROA not after:            Tue 18 May 2027 04:03:18 +0000
asID:                     49134
IP address blocks:        2602:fed2:31::/48 maxlen: 48
                          2602:fed2:fd0::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:c6:04:d6:d5:62:a3:f9:2d:bc:16:bb:be:4d:07:f0:8b:21:b2:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: May 19 03:58:18 2026 GMT
            Not After : May 18 04:03:18 2027 GMT
        Subject: CN=9FC8F26DAC7169DABE2895EB812C74A53C58AEF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:4b:29:1c:67:e9:ce:7b:46:83:2f:6d:d8:f8:
                    15:31:db:6e:6c:87:79:b5:4c:59:70:18:b9:79:0c:
                    b4:3f:1b:a0:a4:6f:be:c5:87:6b:e3:d8:2d:c7:03:
                    44:f8:42:a1:b8:48:54:80:4c:f2:fc:57:0a:c4:7b:
                    34:b2:4c:f4:a2:89:ee:91:8d:fc:84:61:c7:be:98:
                    78:cc:99:ba:ad:1c:5d:4a:50:2a:6d:e5:f6:d5:1d:
                    a7:fb:f1:26:16:86:38:d7:28:68:1d:ce:9d:54:23:
                    94:7b:b4:c2:88:25:e5:f7:c8:2f:e5:17:9e:99:7e:
                    f6:8b:60:04:56:df:92:4d:cd:35:3e:49:35:39:4f:
                    15:5e:a2:5b:75:0a:35:db:11:30:c1:7c:6c:4f:aa:
                    ce:f3:f7:4a:08:d3:a5:cd:a1:cb:d9:51:fe:49:af:
                    1b:c8:ea:c4:e1:9a:b2:78:d1:2b:0f:7d:f1:21:ca:
                    96:94:45:10:40:46:2b:18:c1:fc:cf:67:7d:50:a9:
                    a3:5b:06:64:04:cf:75:82:46:f6:a0:54:cd:97:ba:
                    48:05:7d:ee:5f:30:0d:87:5b:c9:9f:23:5f:d2:b5:
                    d6:7e:96:ff:dc:2c:e4:66:ca:d8:a2:34:e0:88:50:
                    9e:12:71:73:ea:83:2f:f4:55:a3:88:34:2b:14:00:
                    cc:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:C8:F2:6D:AC:71:69:DA:BE:28:95:EB:81:2C:74:A5:3C:58:AE:F7
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS49134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed2:31::/48
                  2602:fed2:fd0::/44

    Signature Algorithm: sha256WithRSAEncryption
         8b:08:6f:57:ea:56:91:cb:5a:3e:b1:20:74:e9:af:b6:c1:f5:
         f6:d7:33:14:67:58:a7:dd:8f:17:fc:f6:23:27:08:a3:0e:0a:
         1b:08:6c:e4:8b:15:dc:04:93:70:b2:a3:22:fb:cd:e0:0b:f5:
         07:82:0d:c4:7f:08:f1:92:6b:b6:a0:22:4d:6b:97:8d:7f:87:
         fc:a3:17:28:35:6c:8f:54:dc:c8:0b:c5:76:88:d4:62:51:5a:
         c6:31:27:4a:2f:eb:bd:2e:27:b1:b6:6e:84:81:be:16:77:e8:
         9c:df:62:a5:75:5a:37:8d:35:57:a8:3b:b9:7a:cf:f3:b5:89:
         cf:77:c1:1b:27:db:f3:e7:2f:df:e1:16:12:a7:88:83:99:c9:
         bc:c1:b7:b5:7e:6e:0e:a2:53:0f:eb:4a:e5:7f:f2:aa:b5:c7:
         54:2d:c2:8f:12:bd:53:82:4e:8d:9d:5f:c2:cf:3e:d4:e9:a6:
         e0:1f:ff:9d:82:6e:c5:16:26:e0:a4:b4:57:76:2a:64:b6:57:
         90:a4:65:61:ea:e4:d6:86:a3:73:ee:38:7a:36:fc:3f:cf:8e:
         58:10:67:d0:d6:97:2d:90:ab:49:db:e6:cf:95:f4:fd:a4:9c:
         c8:c0:8c:e3:9d:d5:42:f4:d7:17:91:c6:27:8e:04:f6:f0:ca:
         7c:ad:02:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 06:40:55 2026 by rpki-client