Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS138166.roa
File:                     AS138166.roa (raw, json)
Hash identifier:          4X1qNlQCs4FMa3c/mICr2K/D4ukTU3iCYVPmIYfO+v8=
Subject key identifier:   36:48:3A:80:6F:59:AF:E4:9B:C2:D5:A2:3A:EB:2A:E2:10:FC:9E:9E
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       5BCAD581B8580BA06FA7A5FD736FAB77CCEF9620
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS138166.roa
Signing time:             Sun 22 Feb 2026 18:16:58 +0000
ROA not before:           Sun 22 Feb 2026 18:11:58 +0000
ROA not after:            Sun 21 Feb 2027 18:16:58 +0000
asID:                     138166
IP address blocks:        2602:fed2:710f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 02:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:ca:d5:81:b8:58:0b:a0:6f:a7:a5:fd:73:6f:ab:77:cc:ef:96:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Feb 22 18:11:58 2026 GMT
            Not After : Feb 21 18:16:58 2027 GMT
        Subject: CN=36483A806F59AFE49BC2D5A23AEB2AE210FC9E9E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d0:ec:90:84:31:d2:62:5c:52:7c:58:25:75:
                    16:5b:73:61:5a:09:77:41:aa:6f:ff:4f:dc:4d:e7:
                    4a:de:2f:8d:56:4d:9a:6e:d1:b5:69:24:55:7e:46:
                    fc:0a:06:2b:b5:81:ae:47:e4:97:ef:24:f1:c6:84:
                    e1:c5:34:f0:03:41:61:1f:65:0a:f1:8e:91:ea:0e:
                    af:94:76:30:66:13:f1:ed:52:0b:ef:c2:bf:6f:17:
                    c9:95:76:61:18:1f:bf:11:1b:fa:51:76:db:c7:63:
                    90:9c:fc:c9:66:5b:b3:4d:2b:08:74:ea:d4:c3:85:
                    3c:b3:41:7f:2d:f6:9b:e1:ab:72:6c:ba:6c:07:6e:
                    43:82:99:f9:87:d4:ee:8c:27:58:ef:6f:e9:06:90:
                    96:2d:fa:1f:20:7d:7e:8b:e1:df:aa:7b:67:4b:d7:
                    8d:c3:63:d4:b5:89:c9:da:b9:0c:34:a6:a1:86:37:
                    0a:0d:48:8a:6d:40:e4:c9:6d:4e:ef:e8:3b:61:81:
                    8b:a3:4e:a8:1c:77:b9:45:cd:43:3c:74:89:ec:ea:
                    9e:2f:40:2d:51:46:f0:a0:96:5c:08:ca:2f:a8:a0:
                    a0:c1:12:e0:a4:ed:dc:e7:71:e8:6a:02:77:4c:04:
                    4b:02:ee:9e:c2:d6:46:80:4d:97:32:ef:a6:0c:90:
                    0c:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:48:3A:80:6F:59:AF:E4:9B:C2:D5:A2:3A:EB:2A:E2:10:FC:9E:9E
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS138166.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed2:710f::/48

    Signature Algorithm: sha256WithRSAEncryption
         20:bd:1f:c4:83:f9:14:b4:6b:21:41:4a:23:04:bc:77:12:4b:
         91:bd:67:94:9e:8d:16:f9:60:7e:6e:14:eb:10:11:e8:62:e6:
         8c:65:3d:35:95:08:f3:21:2c:f3:f1:31:ca:9f:3e:f6:3e:1c:
         59:49:f0:55:b6:2a:64:40:19:10:c0:d6:2f:b3:58:a8:6b:61:
         41:45:0d:18:63:05:9a:7d:88:c5:ca:95:55:81:ae:bb:85:72:
         e2:b0:81:f7:12:09:7f:5e:c7:71:ef:ee:c5:ad:78:63:f6:93:
         a1:70:56:0d:af:2a:81:72:22:b0:7d:3f:87:15:58:fc:9b:56:
         81:f0:36:23:fd:89:95:bf:47:e0:65:26:0f:be:33:56:78:8d:
         fb:3b:e7:a6:4e:1a:60:66:02:b8:7d:4f:7e:d4:f3:dd:24:84:
         2b:c2:74:a4:19:47:39:68:bd:0c:14:93:25:19:c1:70:5a:b9:
         de:33:d7:86:2b:82:94:01:91:98:81:71:13:f3:3a:dd:ca:18:
         c8:f9:a2:cb:b9:a1:d5:a8:66:a3:14:01:cd:a6:fe:a9:a1:84:
         45:e7:ac:f1:f0:a5:ed:4d:31:0a:ea:87:e8:d7:88:7e:c8:f6:
         c6:f4:c9:8b:ff:16:4b:fb:de:80:ff:a3:ee:48:a4:ac:94:69:
         ac:7f:94:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:00:53 2026 by rpki-client