Route Origin Authorization

$ rpki-client -vvvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS218293.roa
File:                     AS218293.roa (raw, json)
Hash identifier:          mrnk2lSnxF+UT4b859uMKUOvNGUbE9nhRyjJVsG1GNU=
Subject key identifier:   DD:C6:06:D3:79:BF:28:C2:10:7A:39:E8:72:7A:1A:FD:5B:22:33:79
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       18B5C57E958DEC02DB020DE2A4E52D96A8E1F550
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS218293.roa
Signing time:             Fri 23 Oct 2026 21:08:46 +0000
ROA not before:           Fri 23 Oct 2026 21:03:46 +0000
ROA not after:            Fri 22 Oct 2027 21:08:46 +0000
asID:                     218293
IP address blocks:        2602:fed2:719c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Nov 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:b5:c5:7e:95:8d:ec:02:db:02:0d:e2:a4:e5:2d:96:a8:e1:f5:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Oct 23 21:03:46 2026 GMT
            Not After : Oct 22 21:08:46 2027 GMT
        Subject: CN=DDC606D379BF28C2107A39E8727A1AFD5B223379
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:3b:c2:b5:60:10:c4:f8:25:19:b1:69:10:6a:
                    01:9b:29:f0:5f:d6:b6:6d:14:ae:85:ea:4d:da:42:
                    48:5f:70:7b:89:3e:3d:58:3d:02:13:81:ad:9f:86:
                    65:f1:fc:b3:89:9a:7b:03:f5:06:ce:46:ce:9b:05:
                    a2:9e:87:32:d1:09:6b:da:45:80:b6:95:f1:ab:8d:
                    06:44:ad:a5:7d:2d:f4:32:d7:21:df:37:af:0f:e6:
                    89:2c:73:2f:86:6f:b9:7b:4a:b5:d5:c9:70:fb:1c:
                    2c:14:6a:d3:3e:48:15:9c:45:f1:f6:42:93:8b:40:
                    f1:b0:9f:4d:ba:5b:10:ef:8a:32:5e:18:0a:18:c8:
                    d0:4d:ce:2c:b8:18:ac:2a:fb:51:f7:64:6d:e9:b3:
                    d1:43:4f:81:78:32:e0:12:57:99:78:05:9e:59:e8:
                    27:4e:eb:9e:dc:ca:d0:f2:62:6c:af:83:60:03:2d:
                    c4:f2:73:fb:70:52:3c:d6:22:13:00:8a:90:36:16:
                    f2:69:12:90:fa:87:5c:76:0f:9e:fe:9e:db:2d:cd:
                    f6:b8:98:68:b5:8e:d0:da:ec:9b:14:10:4d:5a:24:
                    c4:92:4b:ff:f5:ef:7f:43:da:b4:c2:71:c6:a7:48:
                    9d:a2:1b:a6:86:87:dc:78:8d:e3:a5:13:d8:b2:7f:
                    a1:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:C6:06:D3:79:BF:28:C2:10:7A:39:E8:72:7A:1A:FD:5B:22:33:79
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS218293.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed2:719c::/48

    Signature Algorithm: sha256WithRSAEncryption
         53:e4:9b:67:03:39:0f:6c:21:8e:32:c1:6a:c9:3c:99:b3:f7:
         ea:9b:54:16:f0:bc:9c:ed:bf:79:44:61:67:69:f3:56:8a:26:
         49:b1:8c:ed:a8:e8:92:85:09:b2:a7:4f:5d:0c:81:b9:17:2e:
         04:07:8e:af:1d:ac:17:e5:5d:c6:e9:ce:ac:5e:85:a4:a8:78:
         17:cb:06:51:14:40:b4:60:68:9d:90:fb:05:a2:50:83:c1:80:
         f4:18:cb:6c:2d:71:5e:54:47:a9:86:73:2c:a0:bf:3e:05:e5:
         4e:99:64:f3:10:93:f9:23:a0:78:10:83:3e:51:74:46:5a:13:
         75:72:45:d9:71:05:4c:12:ca:4f:49:09:9f:5b:a7:0a:7f:fb:
         7a:bd:65:00:58:ff:e5:9f:47:13:82:a0:4f:32:38:ca:ae:62:
         8e:4c:b4:38:8b:69:33:b9:e3:2e:0e:3d:d1:3d:ba:55:2a:f7:
         3d:30:e4:67:3d:51:18:f0:42:1d:98:cd:67:22:e4:f4:b7:f4:
         a8:59:7d:08:9c:9f:1b:62:c6:ba:9f:4f:10:62:66:b3:17:5f:
         a2:3c:a8:88:e0:72:52:2e:72:14:f7:c0:90:8d:a7:2a:f8:f6:
         d6:e3:12:d6:cb:77:17:c6:ba:92:25:5b:da:2b:43:d5:59:14:
         d5:67:0f:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 08:54:25 2026 by rpki-client