Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS136317.roa
File:                     AS136317.roa (raw, json)
Hash identifier:          4YnaK6Al5vfgHQ1OfBh8NhKxLxlF0yrKqIHqoVrRBDU=
Subject key identifier:   39:54:C2:60:F3:20:88:14:47:82:9F:87:3F:B8:0B:C7:3D:D6:1C:7D
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       694B0C2E19463E65DFE480A4B7F0DDEC570D91BD
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS136317.roa
Signing time:             Sat 26 Jul 2025 06:31:17 +0000
ROA not before:           Sat 26 Jul 2025 06:26:17 +0000
ROA not after:            Sat 25 Jul 2026 06:31:17 +0000
asID:                     136317
IP address blocks:        2602:fed2:7042::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 19:08:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:4b:0c:2e:19:46:3e:65:df:e4:80:a4:b7:f0:dd:ec:57:0d:91:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Jul 26 06:26:17 2025 GMT
            Not After : Jul 25 06:31:17 2026 GMT
        Subject: CN=3954C260F320881447829F873FB80BC73DD61C7D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:1c:5c:9c:13:a9:59:c2:e2:77:bd:e1:24:c3:
                    78:b0:35:7d:c1:4e:d3:06:da:f9:21:bb:bc:89:d1:
                    57:30:52:ac:af:5a:1d:58:6c:8b:d9:b7:56:a8:87:
                    c4:10:b0:b0:19:76:50:2e:d5:7d:5c:35:5c:cd:b9:
                    8f:50:53:b4:fe:18:6f:9a:01:48:99:d8:2e:e2:2a:
                    c3:85:e0:e7:06:75:14:2b:c5:ce:c2:8e:f5:05:a6:
                    8b:53:48:06:33:67:b4:38:19:84:a4:4f:c7:89:1c:
                    90:23:dd:18:1a:7d:16:86:35:e9:92:fe:76:4c:34:
                    e6:b9:dd:ae:f4:4d:88:a8:cb:ae:f2:72:3a:39:16:
                    84:b1:1c:b0:a8:a3:79:9d:9b:1c:1b:eb:23:d8:f4:
                    d4:17:40:2f:ef:2d:7d:54:ca:bc:41:f9:d0:81:8c:
                    b0:b8:80:48:9e:1e:61:15:5b:34:2f:3b:7d:49:7e:
                    3a:e1:f2:2f:93:5e:ca:2f:13:69:61:6c:e2:9b:3d:
                    6b:64:3f:0e:95:36:7e:82:0a:84:ae:c4:bd:de:8d:
                    c4:26:e6:0f:50:71:6d:0b:34:e1:43:02:c5:c9:09:
                    de:bb:dc:7e:9d:b3:26:b7:59:a9:7e:68:82:b1:1b:
                    92:07:74:3c:7f:bb:14:1b:82:6e:3d:5e:1c:89:c6:
                    26:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:54:C2:60:F3:20:88:14:47:82:9F:87:3F:B8:0B:C7:3D:D6:1C:7D
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS136317.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed2:7042::/48

    Signature Algorithm: sha256WithRSAEncryption
         57:1a:7f:59:ab:9b:c6:9f:de:21:d0:07:5d:11:65:c0:ae:6e:
         39:1d:4a:ea:ec:25:9f:d8:21:c0:cf:46:25:17:91:5d:55:f9:
         c7:58:86:87:41:5a:86:5d:d3:15:8c:bb:ee:de:0b:63:78:5b:
         88:06:0f:46:5c:a2:b5:f7:12:72:be:2f:d8:a4:ec:f6:d2:d4:
         b1:31:b8:fd:17:e5:26:6c:88:af:d0:8e:a4:57:bc:89:87:ea:
         c2:f3:50:41:ac:81:94:22:df:78:42:41:aa:89:b6:db:b4:87:
         de:5b:e1:4a:a0:2f:35:ca:d7:62:46:85:80:1f:80:11:d9:92:
         a4:0d:8b:90:df:58:5d:93:d2:fa:9a:4f:a8:6d:c0:b7:18:2a:
         81:10:64:5d:6c:8a:41:48:9d:81:a1:29:14:a8:89:bb:ac:72:
         ed:2c:9a:fd:97:00:8a:26:0d:a0:46:8c:a0:20:e2:58:b9:a5:
         8b:cc:10:22:d6:5a:68:21:e8:3e:01:d6:4c:50:12:a4:66:3c:
         b9:4f:1b:54:42:7f:cd:17:f0:69:08:6e:80:bb:e9:b5:ed:d6:
         26:03:bd:57:8d:7e:f5:d8:7e:7d:70:df:62:32:99:60:df:df:
         7b:69:59:97:4f:7c:cf:21:ff:ea:d0:ef:f9:ea:00:c3:ef:5f:
         cf:29:b0:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 21:39:25 2025 by rpki-client