Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS8100.roa
File:                     AS8100.roa (raw, json)
Hash identifier:          Bjr5j2lq5OZkgzUTSI9LrAexVA9ko7keTSdBKytXQPE=
Subject key identifier:   6C:07:F3:1B:17:F2:AD:51:F2:73:F2:82:DF:18:F1:32:EE:A9:1A:75
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       22636CCF784AC5A18C886E012E501BAC3E11210B
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS8100.roa
Signing time:             Tue 16 Jun 2026 20:29:11 +0000
ROA not before:           Tue 16 Jun 2026 20:24:11 +0000
ROA not after:            Tue 15 Jun 2027 20:29:11 +0000
asID:                     8100
IP address blocks:        2602:fed2:708d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:63:6c:cf:78:4a:c5:a1:8c:88:6e:01:2e:50:1b:ac:3e:11:21:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Jun 16 20:24:11 2026 GMT
            Not After : Jun 15 20:29:11 2027 GMT
        Subject: CN=6C07F31B17F2AD51F273F282DF18F132EEA91A75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:80:f0:2d:9c:78:9a:67:a3:23:0a:78:f6:a3:
                    7c:7e:b5:1f:fa:6e:fb:e4:f3:a1:5c:a0:af:37:c9:
                    43:31:3c:33:36:65:9a:14:15:ec:fd:bd:26:ed:18:
                    63:ed:de:e3:46:d8:3c:8f:a8:af:6a:75:09:62:ba:
                    1d:b7:af:ac:0e:ed:64:da:65:6e:11:35:3b:58:6d:
                    95:42:b0:7c:c6:a8:0a:40:8f:64:45:7b:94:fd:8b:
                    42:42:77:2f:ad:58:0b:52:11:30:4d:67:5e:c2:d2:
                    11:5f:8e:59:35:90:19:f9:96:1d:6c:86:a5:88:af:
                    a1:63:df:dd:69:bc:59:5b:d8:58:6e:e6:a2:9c:a0:
                    71:48:64:67:3f:96:3a:cb:4c:a6:39:3c:7b:f8:82:
                    07:63:a4:09:1d:03:75:e5:bd:b8:99:40:d4:f3:a2:
                    fb:bb:97:90:40:b8:32:f4:a8:08:d8:80:3e:0c:a9:
                    1e:51:08:3d:2a:55:d8:36:bb:ae:f9:77:b8:de:eb:
                    4b:1b:b8:98:e0:d7:26:e3:b7:bf:30:3c:3f:8d:02:
                    b7:d2:83:cf:e2:bd:ff:0b:4f:d3:49:fb:b4:51:8d:
                    b9:e0:e6:42:b6:df:88:f3:0f:e2:e7:92:9e:96:6b:
                    42:39:4c:37:fb:df:dc:58:02:5a:cf:f2:ff:74:91:
                    45:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:07:F3:1B:17:F2:AD:51:F2:73:F2:82:DF:18:F1:32:EE:A9:1A:75
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS8100.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed2:708d::/48

    Signature Algorithm: sha256WithRSAEncryption
         3c:21:dc:fe:5d:9d:c3:20:c2:3b:2e:1e:71:84:ad:70:33:be:
         bd:d1:d5:4f:5a:f2:a5:70:75:95:0a:87:df:34:d3:36:f3:93:
         f0:1a:eb:74:7d:a6:1f:9c:a3:89:b8:f9:41:2f:c5:c6:ef:90:
         24:49:42:2f:59:3a:db:0f:55:6d:9e:42:55:23:6c:87:5c:cd:
         2a:3f:38:23:71:87:06:9e:98:1a:dc:97:c5:a2:bb:75:9b:1a:
         68:cc:5c:34:5b:b6:d6:d7:8d:66:87:41:74:29:57:51:3a:43:
         49:9c:07:ed:7d:e5:b4:49:7a:a0:a3:56:0d:ce:c1:aa:40:ca:
         58:e1:bd:0f:96:73:80:a4:cf:55:3a:87:e7:20:56:84:cc:41:
         bf:61:48:d2:b2:24:8d:7a:9a:0d:ec:fb:1e:3b:38:7e:2f:74:
         02:2f:0e:9e:7c:a6:a0:43:06:0b:50:31:24:27:dc:79:63:b7:
         fe:7a:ca:eb:47:a7:86:47:86:61:7d:5b:67:d8:d4:c5:00:5e:
         ee:c6:f2:f0:aa:5e:16:83:de:34:9f:ec:f7:61:1c:21:74:b5:
         b2:8e:65:95:98:ef:82:65:e0:f2:31:7a:be:a1:34:aa:c6:51:
         cd:e7:d4:2f:44:f7:88:c4:66:5a:8d:cd:50:fd:85:8e:e8:e1:
         0f:22:60:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:47:04 2026 by rpki-client