Route Origin Authorization

$ rpki-client -vvvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS20473.roa
File:                     AS20473.roa (raw, json)
Hash identifier:          /0syn7ZFGzg28Is2948DZ2GnclUIRyuMLefGfJTT73w=
Subject key identifier:   4C:A9:86:96:7C:F8:32:7B:72:83:C3:72:CE:2E:4C:11:6E:6E:4C:03
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       486A70B1E9A5D862490223A9DDB0DED023ADC586
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS20473.roa
Signing time:             Fri 11 Sep 2026 22:10:15 +0000
ROA not before:           Fri 11 Sep 2026 22:05:15 +0000
ROA not after:            Fri 10 Sep 2027 22:10:15 +0000
asID:                     20473
IP address blocks:        2602:fed2:710e::/48 maxlen: 48
                          2602:fed2:710f::/48 maxlen: 48
                          2602:fed2:712c::/48 maxlen: 48
                          2602:fed2:719a::/48 maxlen: 48
                          2602:fed2:719b::/48 maxlen: 48
                          2602:fed2:719c::/48 maxlen: 48
                          2602:fed2:719d::/48 maxlen: 48
                          2602:fed2:719e::/48 maxlen: 48
                          2602:fed2:730d::/48 maxlen: 48
                          2602:fed2:731c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:6a:70:b1:e9:a5:d8:62:49:02:23:a9:dd:b0:de:d0:23:ad:c5:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Sep 11 22:05:15 2026 GMT
            Not After : Sep 10 22:10:15 2027 GMT
        Subject: CN=4CA986967CF8327B7283C372CE2E4C116E6E4C03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:1c:69:31:fc:e2:f0:39:c6:30:e8:f6:d7:98:
                    bd:16:61:64:a5:a7:57:d7:2b:e1:53:dd:d3:15:66:
                    0a:4f:7d:80:14:cf:eb:aa:ae:d3:c6:12:49:a8:d0:
                    82:f1:fd:ce:9d:2e:65:c3:56:68:cc:15:6a:20:78:
                    b2:87:76:26:45:7e:d1:e8:30:21:83:04:20:e7:87:
                    75:f0:61:82:c7:2e:39:2c:99:dd:35:bc:9e:37:5b:
                    38:fb:e0:7a:3d:68:10:6a:12:8e:7a:bf:44:c6:1f:
                    e3:36:48:07:a0:37:77:77:7b:84:58:19:db:8f:01:
                    6a:9b:15:b3:2a:00:cd:5d:7f:fc:e8:72:7c:cc:90:
                    1d:4c:84:47:6e:81:41:2f:59:05:7c:5f:42:08:a2:
                    8b:1f:4f:8f:c2:dc:07:bc:63:2b:4d:e6:e8:b6:d7:
                    85:95:ef:a5:13:d8:48:aa:7e:6a:df:c7:ec:a7:4f:
                    36:f7:81:c1:56:c4:00:6e:d2:25:29:8a:76:76:7a:
                    7c:de:9d:f7:0b:be:85:55:2f:27:db:2a:4d:71:da:
                    f2:be:a9:9f:da:8f:74:f5:cc:67:4e:a8:84:95:df:
                    61:74:23:3a:a2:57:9b:04:cd:94:a5:36:ce:6f:26:
                    6a:d2:f1:bc:de:1b:2f:44:d4:0d:9a:1d:90:8e:14:
                    09:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:A9:86:96:7C:F8:32:7B:72:83:C3:72:CE:2E:4C:11:6E:6E:4C:03
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS20473.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed2:710e::/47
                  2602:fed2:712c::/48
                  2602:fed2:719a::-2602:fed2:719e:ffff:ffff:ffff:ffff:ffff
                  2602:fed2:730d::/48
                  2602:fed2:731c::/48

    Signature Algorithm: sha256WithRSAEncryption
         1c:db:af:7b:89:81:4c:dd:01:5d:e2:92:66:09:8a:75:c4:da:
         ec:a4:41:cb:27:9f:96:3f:42:2b:42:d5:a6:60:73:93:24:d2:
         9e:52:28:68:59:a4:eb:7f:51:9e:71:9c:08:f7:36:8f:b4:cd:
         96:54:4e:96:8b:50:43:7b:ef:7a:57:39:df:ec:af:9e:5c:86:
         b4:e1:3d:72:52:5f:10:ba:2c:57:da:ce:64:11:a9:45:ea:bd:
         65:31:52:88:d2:2b:f9:85:d5:f3:79:25:5f:2b:82:38:b5:c3:
         d6:ba:b3:bd:73:21:9e:57:2c:82:41:d5:5b:09:09:e9:37:0d:
         d3:18:cd:ff:a9:72:d3:d3:32:48:29:69:09:32:9e:e6:ac:17:
         67:4e:a6:18:4c:c1:27:a3:76:b0:67:b1:b7:0c:57:6d:a8:9e:
         86:e0:a7:15:08:ef:79:8d:fe:ed:13:b1:17:5e:48:f3:95:68:
         9b:09:2a:b0:9d:51:e2:ea:89:9d:31:e2:be:af:ac:12:4e:e0:
         48:b2:ed:99:6e:5a:b0:c7:39:2c:f9:d8:8f:2c:c5:2b:45:7d:
         ad:d9:42:60:29:23:36:9b:ac:48:ca:84:b0:cf:45:36:78:4d:
         e1:04:a3:2b:0d:db:d8:e8:df:4e:de:c8:d2:6d:ee:6f:02:be:
         7f:9a:98:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 15:08:10 2026 by rpki-client