Route Origin Authorization

$ rpki-client -vvvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS207328.roa
File:                     AS207328.roa (raw, json)
Hash identifier:          PirHPlonm/nuxHWfxe2DIS1ccik37bf51QG6fzl2zHs=
Subject key identifier:   1D:D2:5C:A8:96:40:7E:62:80:36:C8:8A:10:7B:F9:7F:D4:BB:F9:8E
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       204CDA2B863BD9BA5D8C6EEAC9D2CB5185F098AE
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS207328.roa
Signing time:             Mon 26 Oct 2026 20:32:28 +0000
ROA not before:           Mon 26 Oct 2026 20:27:28 +0000
ROA not after:            Mon 25 Oct 2027 20:32:28 +0000
asID:                     207328
IP address blocks:        2602:fed2:7103::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Nov 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:4c:da:2b:86:3b:d9:ba:5d:8c:6e:ea:c9:d2:cb:51:85:f0:98:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Oct 26 20:27:28 2026 GMT
            Not After : Oct 25 20:32:28 2027 GMT
        Subject: CN=1DD25CA896407E628036C88A107BF97FD4BBF98E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:fa:e1:3c:df:21:b5:8e:f7:12:41:1c:dd:06:
                    88:1e:3c:11:05:45:2a:66:37:37:5a:c1:f7:80:6c:
                    94:f3:5b:fe:3a:f5:88:72:13:e1:cc:1c:60:61:f3:
                    99:a9:22:80:be:79:a2:ef:34:3c:f9:be:7b:d3:11:
                    a2:99:b4:f5:b9:f8:2a:81:51:24:d9:60:23:f4:c0:
                    1c:be:31:02:51:cf:25:7c:ad:81:cd:37:12:af:c0:
                    12:1e:53:a3:91:c8:37:0a:0e:3c:87:34:2e:19:97:
                    cf:52:07:8f:ba:50:2d:27:cd:dc:1e:65:6b:9e:0c:
                    5e:4e:ad:c5:0c:b1:1a:7a:9f:ca:67:11:91:96:54:
                    34:c9:a5:20:96:03:aa:26:1d:93:d8:9c:d8:67:20:
                    ce:f2:a8:df:fa:e2:f0:65:1d:8d:3a:c5:73:58:7c:
                    0c:79:31:ef:c2:57:59:5c:81:2f:16:c4:83:1a:11:
                    8a:56:86:8a:08:6b:e5:25:38:8b:77:aa:f1:d2:16:
                    7a:8f:85:ff:ea:65:93:82:41:98:f2:c9:6e:d2:e3:
                    6f:02:39:6b:92:db:80:b9:66:5c:e5:9e:64:c6:78:
                    a5:dd:6b:35:ea:16:26:2f:8b:24:cf:21:8c:85:28:
                    29:51:98:ef:a6:65:50:0a:61:3c:90:3d:7e:2d:96:
                    cd:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:D2:5C:A8:96:40:7E:62:80:36:C8:8A:10:7B:F9:7F:D4:BB:F9:8E
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS207328.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed2:7103::/48

    Signature Algorithm: sha256WithRSAEncryption
         5d:71:f8:d6:d1:1d:1f:23:ea:88:8b:0f:8c:31:e7:b7:13:99:
         e0:39:86:c2:cd:0d:fe:c9:1c:3b:6c:a3:c3:a0:37:bd:c0:c6:
         66:41:d7:0c:f5:d5:b7:8c:44:62:fd:35:3b:8b:5d:92:96:df:
         be:07:85:e9:8c:d8:2b:66:90:52:46:b1:5d:92:bc:7a:25:9a:
         df:f4:1a:55:ff:af:00:1a:d7:94:4c:80:44:80:f7:76:d2:1c:
         a3:79:a0:43:2a:02:12:25:2b:04:87:41:de:ae:5c:7d:41:5d:
         6d:3d:cc:1e:44:7d:e5:6c:19:9d:6b:42:66:40:26:7a:73:bf:
         25:b3:d4:4d:cf:d2:4d:f6:6f:ba:63:6f:54:49:e7:df:1e:48:
         38:dd:4d:5c:7b:09:6a:a9:e9:f7:ba:e5:82:3a:43:5c:31:1d:
         d7:33:56:40:12:5c:a4:e8:f3:9a:f3:66:d2:e0:08:e8:33:ca:
         de:fd:56:bf:23:c2:dd:86:d4:64:f1:a7:1f:7a:a4:d6:fb:f2:
         96:d8:e9:0d:75:d9:d3:16:bd:96:c8:fc:ee:0d:0d:f0:73:13:
         99:be:0a:03:09:04:37:ba:02:cd:17:05:6b:73:0c:d0:cb:db:
         f5:9b:39:dc:f0:42:4d:72:d9:4e:b1:03:6e:b6:f1:ec:6a:92:
         fa:e3:b5:88
-----BEGIN CERTIFICATE-----
MIIFWTCCBEGgAwIBAgIUIEzaK4Y72bpdjG7qydLLUYXwmK4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZmQ3N2Y1NWVmZTNhOTNjNTNjYTNkYzhhNmY4Mzc0ZmU3
MGZlYzU1NjdkZDFlOGM4NTUwHhcNMjYxMDI2MjAyNzI4WhcNMjcxMDI1MjAzMjI4
WjAzMTEwLwYDVQQDEygxREQyNUNBODk2NDA3RTYyODAzNkM4OEExMDdCRjk3RkQ0
QkJGOThFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7vrhPN8htY73
EkEc3QaIHjwRBUUqZjc3WsH3gGyU81v+OvWIchPhzBxgYfOZqSKAvnmi7zQ8+b57
0xGimbT1ufgqgVEk2WAj9MAcvjECUc8lfK2BzTcSr8ASHlOjkcg3Cg48hzQuGZfP
UgePulAtJ83cHmVrngxeTq3FDLEaep/KZxGRllQ0yaUglgOqJh2T2JzYZyDO8qjf
+uLwZR2NOsVzWHwMeTHvwldZXIEvFsSDGhGKVoaKCGvlJTiLd6rx0hZ6j4X/6mWT
gkGY8slu0uNvAjlrktuAuWZc5Z5kxnil3Ws16hYmL4skzyGMhSgpUZjvpmVQCmE8
kD1+LZbNHQIDAQABo4ICWTCCAlUwHQYDVR0OBBYEFB3SXKiWQH5igDbIihB7+X/U
u/mOMB8GA1UdIwQYMBaAFMiTX9ylAoroIJ/sgq2K6M+3xud2MA4GA1UdDwEB/wQE
AwIHgDBxBgNVHR8EajBoMGagZKBihmByc3luYzovL3Jwa2kuYWRtaW4uZnJlZXJh
bmdlY2xvdWQuY29tL3JlcG8vRlJDLUNBLzAvQzg5MzVGRENBNTAyOEFFODIwOUZF
QzgyQUQ4QUU4Q0ZCN0M2RTc3Ni5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYw
YzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzZlNWQ5NjExLWZkMzMt
NDg4Yy05YWVjLWY0ZGYyYTI1MzUxZS9mZDc3ZjU1ZWZlM2E5M2M1M2NhM2RjOGE2
ZjgzNzRmZTcwZmVjNTU2N2RkMWU4Yzg1NS5jZXIwXAYIKwYBBQUHAQsEUDBOMEwG
CCsGAQUFBzALhkByc3luYzovL3Jwa2kuYWRtaW4uZnJlZXJhbmdlY2xvdWQuY29t
L3JlcG8vRlJDLUNBLzAvQVMyMDczMjgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAmAv7ScQMwDQYJKoZI
hvcNAQELBQADggEBAF1x+NbRHR8j6oiLD4wx57cTmeA5hsLNDf7JHDtso8OgN73A
xmZB1wz11beMRGL9NTuLXZKW374HhemM2CtmkFJGsV2SvHolmt/0GlX/rwAa15RM
gESA93bSHKN5oEMqAhIlKwSHQd6uXH1BXW09zB5EfeVsGZ1rQmZAJnpzvyWz1E3P
0k32b7pjb1RJ598eSDjdTVx7CWqp6fe65YI6Q1wxHdczVkASXKTo85rzZtLgCOgz
yt79Vr8jwt2G1GTxpx96pNb78pbY6Q112dMWvZbI/O4NDfBzE5m+CgMJBDe6As0X
BWtzDNDL2/WbOdzwQk1y2U6xA2628exqkvrjtYg=
-----END CERTIFICATE-----
Generated at Thu Nov 5 11:10:59 2026 by rpki-client