Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS49459.roa
File:                     AS49459.roa (raw, json)
Hash identifier:          9ORj1eHLkF+2fW/EUv6rySoB/h8kArYlhXL0WuSBHG8=
Subject key identifier:   61:4E:8D:99:22:34:88:AA:7F:83:36:E5:2D:6C:BF:1F:06:C4:73:BB
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       46BA47C8E8D3B274E7276A941C9B85B4B41A1D68
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS49459.roa
Signing time:             Tue 19 May 2026 04:03:18 +0000
ROA not before:           Tue 19 May 2026 03:58:18 +0000
ROA not after:            Tue 18 May 2027 04:03:18 +0000
asID:                     49459
IP address blocks:        2602:fed2:10::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 01 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:ba:47:c8:e8:d3:b2:74:e7:27:6a:94:1c:9b:85:b4:b4:1a:1d:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: May 19 03:58:18 2026 GMT
            Not After : May 18 04:03:18 2027 GMT
        Subject: CN=614E8D99223488AA7F8336E52D6CBF1F06C473BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:a0:0b:52:ff:07:45:3e:d4:e7:10:3a:da:78:
                    4e:44:6e:41:5c:7a:59:c0:96:56:f8:3b:0b:56:f5:
                    fe:e2:0e:44:5d:85:ad:48:90:02:be:75:e4:3a:b3:
                    f7:95:63:86:e9:22:d4:fe:00:00:25:30:d8:33:da:
                    b0:20:0d:21:b4:cb:49:b0:d0:8c:e4:8c:89:2a:6b:
                    f2:a0:a0:6c:e3:75:5f:c8:c3:50:9b:b2:64:ec:d2:
                    d1:c3:45:51:94:81:62:48:df:75:9d:4c:98:20:7e:
                    9a:e7:9b:3c:d6:5e:f1:75:0e:be:11:56:f3:43:f6:
                    b4:59:61:7b:41:d0:9b:8c:a8:bb:bc:b4:7e:a5:ec:
                    7b:1f:a9:1c:27:c4:67:9c:38:ef:90:f5:03:f7:ee:
                    73:7e:24:df:85:3e:fa:44:48:cf:03:4f:fe:06:80:
                    63:4f:b4:ec:15:2b:68:0d:9c:98:67:19:46:0e:0f:
                    51:86:ab:64:bc:72:cb:8f:77:95:e4:4a:d2:97:8a:
                    5c:fe:fc:f1:3a:38:30:2b:2a:c6:38:53:64:c2:7c:
                    66:63:a5:a3:8e:d9:a4:e4:b7:a9:2d:c8:bc:85:0a:
                    0f:28:a6:45:f1:10:39:4c:11:88:2d:eb:bc:39:f4:
                    e2:61:48:9f:b7:f9:77:03:5f:07:59:40:c7:1b:57:
                    6a:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:4E:8D:99:22:34:88:AA:7F:83:36:E5:2D:6C:BF:1F:06:C4:73:BB
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS49459.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed2:10::/44

    Signature Algorithm: sha256WithRSAEncryption
         ad:6e:7c:6d:12:09:b2:4a:a4:95:b7:dd:70:6b:8b:93:d3:76:
         36:d2:10:bd:2f:f6:4f:d1:09:14:1d:5a:7a:23:53:ed:c2:dd:
         1f:ba:e8:d7:42:4c:47:47:62:a5:66:ae:ad:b4:2d:79:cc:01:
         88:b4:92:a4:6e:c7:c5:bd:d2:e9:d1:cd:8f:30:f2:da:b2:81:
         e7:4c:a5:c3:4a:11:4d:a1:a3:90:49:7e:5a:06:97:3a:17:f9:
         4c:ea:50:32:8e:71:b4:58:9f:92:b9:c2:39:37:37:cf:33:85:
         8a:19:fe:16:bb:2b:93:19:64:39:58:35:e0:54:4a:fe:01:11:
         7e:a6:83:8e:6e:7e:e9:c2:f9:7c:b0:44:cb:62:22:d0:c0:ba:
         d6:67:8f:bd:f1:9f:0b:cd:7f:f5:41:0b:f7:78:28:ae:c5:71:
         d5:78:84:cb:1e:73:bb:f1:45:b0:39:84:9f:6a:93:63:9c:b1:
         cb:fb:96:46:dd:85:3c:f7:09:a9:8d:7c:0f:1d:95:7f:66:a6:
         da:b2:05:d8:85:b4:db:1d:29:38:10:63:74:0d:94:8d:a3:59:
         a9:e6:25:50:c8:c4:00:33:aa:ad:7b:9e:34:fe:d1:df:59:6f:
         28:89:b0:8a:88:c8:c2:75:1d:fe:cf:9c:68:9c:89:17:22:77:
         87:93:97:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 31 09:57:52 2026 by rpki-client