Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS216382.roa
File:                     AS216382.roa (raw, json)
Hash identifier:          eYO1qEgZiXceObYviycgo4/1yJgSMUr9kaMWTWqalao=
Subject key identifier:   E8:CC:7C:D8:40:56:82:B9:B6:03:3B:56:BD:93:57:D5:7C:BB:7E:8F
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       361DCAB0733870DE00D3CA3DA60860D7497CDCE9
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS216382.roa
Signing time:             Fri 23 Jan 2026 02:04:10 +0000
ROA not before:           Fri 23 Jan 2026 01:59:10 +0000
ROA not after:            Fri 22 Jan 2027 02:04:10 +0000
asID:                     216382
IP address blocks:        2602:fed2:711b::/48 maxlen: 48
                          2602:fed2:7314::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 02:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:1d:ca:b0:73:38:70:de:00:d3:ca:3d:a6:08:60:d7:49:7c:dc:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Jan 23 01:59:10 2026 GMT
            Not After : Jan 22 02:04:10 2027 GMT
        Subject: CN=E8CC7CD8405682B9B6033B56BD9357D57CBB7E8F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:19:bc:0d:8c:25:1a:c2:bf:84:ee:4b:b9:2c:
                    0b:1e:5c:45:d5:bb:81:10:70:a6:45:54:b0:fb:1f:
                    d8:5b:fd:9d:fd:b7:e5:b1:db:62:34:ed:d0:b2:5a:
                    04:3c:63:24:51:4e:cc:95:e9:64:81:da:7d:9c:49:
                    47:5b:dc:e3:17:9b:54:f4:4a:ee:8e:03:75:dd:b8:
                    f8:db:d8:47:a9:48:1a:ff:fb:97:ff:57:7c:b1:fe:
                    0e:b8:96:e1:fe:b4:3a:7a:0a:31:67:ad:77:34:be:
                    5d:45:8e:0e:a1:80:06:4d:e7:a5:0c:1d:5f:66:3b:
                    e6:1f:74:8e:71:a8:a2:af:4c:b9:89:2a:70:48:a1:
                    d5:ce:1f:f1:bf:b0:58:0f:98:d1:7d:b4:69:40:28:
                    1d:80:7d:7c:47:a3:6c:53:d4:f9:0e:1e:b6:7a:80:
                    43:37:a7:42:6c:0f:83:a5:a9:67:51:f0:d5:80:dd:
                    90:8d:42:b2:ce:c7:69:50:15:ec:09:cc:23:d3:de:
                    c6:90:ee:fe:e5:71:63:d3:2c:8b:66:60:92:a9:a2:
                    d8:33:68:79:37:24:31:7e:ca:cf:39:f9:22:65:3b:
                    8d:7c:c0:24:ae:94:3f:46:95:72:0b:cd:a2:20:ee:
                    1f:85:38:f6:84:ca:ae:62:26:ea:b4:5b:b9:9c:51:
                    cf:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:CC:7C:D8:40:56:82:B9:B6:03:3B:56:BD:93:57:D5:7C:BB:7E:8F
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS216382.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed2:711b::/48
                  2602:fed2:7314::/48

    Signature Algorithm: sha256WithRSAEncryption
         56:3b:82:9b:8a:73:6f:13:cf:dc:7e:d2:f6:9c:da:0d:1a:06:
         f5:53:57:5b:7b:85:06:0c:d0:8e:70:2a:6f:94:de:b4:b7:18:
         7d:f6:cb:8b:78:58:dc:5d:3f:b7:53:47:8a:12:e9:66:f9:46:
         93:34:0a:6f:cf:e0:37:54:ec:7e:69:65:6e:e3:7b:3d:6f:0c:
         ee:30:6a:9a:aa:5a:dc:f9:40:3d:80:7b:ca:38:96:f4:79:47:
         79:3c:b8:de:b7:77:e0:17:74:01:ed:8f:31:a4:f0:ba:b2:ea:
         9c:07:8d:db:db:05:93:c6:33:96:b0:d1:90:ba:c0:8f:0f:94:
         74:b4:ac:ed:bc:00:69:9f:da:52:b5:f5:1b:be:cb:83:75:c0:
         88:e2:45:59:7e:8c:e3:67:f8:41:dd:e8:29:8f:7f:fd:47:38:
         f1:0c:c2:be:c9:64:dd:6b:85:7e:8f:08:9a:66:82:49:2c:c7:
         a8:e0:fd:10:98:22:37:76:0b:c5:1f:fb:ac:ff:a2:b8:9b:e8:
         b6:68:97:81:cc:7a:8e:c9:b9:4a:4c:f2:c1:f6:3e:ea:c2:12:
         db:08:36:7b:1b:b5:32:98:88:a9:08:5d:ff:4f:2f:40:ae:1a:
         cc:61:09:b6:62:b0:b4:97:82:64:f3:53:58:52:0d:e1:7f:c6:
         1c:a0:44:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:00:47 2026 by rpki-client