Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS26042.roa
File:                     AS26042.roa (raw, json)
Hash identifier:          HyAghpgInSOzODXOSpbVxXJ3lwH3vUswuXY4E7GkVkA=
Subject key identifier:   EE:89:DD:16:01:50:98:EF:14:A8:F2:71:39:04:73:85:17:88:CC:6A
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       5E17685131D98852DFD2657200B845431EF1F8A9
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS26042.roa
Signing time:             Mon 27 Oct 2025 19:25:55 +0000
ROA not before:           Mon 27 Oct 2025 19:20:55 +0000
ROA not after:            Mon 26 Oct 2026 19:25:55 +0000
asID:                     26042
IP address blocks:        2602:fed2:708e::/48 maxlen: 48
                          2602:fed2:7114::/48 maxlen: 48
                          2602:fed2:7318::/48 maxlen: 48
                          2602:fed2:7e05::/48 maxlen: 48
                          2602:fed2:7e06::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Nov 2025 19:38:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:17:68:51:31:d9:88:52:df:d2:65:72:00:b8:45:43:1e:f1:f8:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Oct 27 19:20:55 2025 GMT
            Not After : Oct 26 19:25:55 2026 GMT
        Subject: CN=EE89DD16015098EF14A8F271390473851788CC6A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:4f:1c:25:9c:4f:06:6e:30:a3:5b:89:37:6e:
                    61:a8:38:c3:e2:d1:e0:ba:99:17:d1:98:7a:fd:09:
                    65:21:2a:32:64:7b:d8:8f:60:11:53:13:ef:d1:92:
                    1e:de:4c:39:22:43:50:5d:80:3c:1a:6e:f2:bb:5a:
                    20:58:74:ff:21:ac:19:ea:6a:38:ae:44:79:cb:3f:
                    53:08:67:31:36:fd:8e:a5:d2:c4:75:d8:22:0c:44:
                    73:35:c2:89:f0:4b:da:c8:9e:d1:21:ac:36:a3:b7:
                    95:80:58:93:0e:8f:94:64:f3:b9:59:22:60:12:61:
                    d9:26:2b:d5:30:99:58:bb:b1:a5:1e:8e:1b:40:24:
                    c5:9c:01:6b:6e:7b:fc:dc:73:d6:ec:79:af:71:a7:
                    cf:e0:5b:7e:62:10:3b:a5:81:66:cb:cd:6f:23:9e:
                    c1:a4:21:cb:af:f7:fd:56:f5:e2:f3:bc:15:d0:00:
                    ad:78:87:f6:67:37:12:57:9c:45:1e:d1:40:75:cd:
                    51:5d:e2:57:e0:52:5c:77:a9:01:c6:23:34:53:a4:
                    84:06:f0:ed:6b:53:36:3c:c2:15:0a:00:df:1a:85:
                    4f:73:4d:5d:d3:7d:e9:a2:98:20:0e:19:03:42:c5:
                    2a:e8:1c:81:65:e8:53:8c:9e:84:3c:11:77:c0:1f:
                    4a:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:89:DD:16:01:50:98:EF:14:A8:F2:71:39:04:73:85:17:88:CC:6A
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS26042.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed2:708e::/48
                  2602:fed2:7114::/48
                  2602:fed2:7318::/48
                  2602:fed2:7e05::-2602:fed2:7e06:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         b9:3f:92:8c:fa:de:e0:17:41:57:24:fa:e9:7b:20:c6:6a:f6:
         02:11:41:f4:09:08:53:9b:00:fc:d6:f8:a0:e7:94:52:77:eb:
         e5:f3:01:24:f8:e5:1d:a5:da:a3:79:5c:1a:84:36:82:87:07:
         dd:03:71:d6:2c:66:c1:04:31:bf:fd:4a:0a:30:31:61:92:c5:
         8a:8a:23:5d:64:ad:50:44:2c:cd:f5:c8:3f:ad:2b:b6:8f:03:
         89:b4:64:c4:db:b4:ed:80:9d:5c:7f:16:75:6f:ca:eb:1b:d8:
         3a:9c:d3:e7:f1:98:d1:cf:52:d5:c5:0e:37:f0:17:d4:93:21:
         f6:f9:19:60:83:6d:2e:be:ac:9a:f2:d0:6d:62:df:03:7c:00:
         26:b9:37:d7:0e:15:e2:f0:0b:b8:aa:20:33:f0:41:71:a5:79:
         74:8c:59:76:ff:4e:8a:10:e9:10:7b:48:59:27:3c:45:2e:3d:
         37:61:95:cf:fc:fe:89:08:5a:cf:84:ae:85:84:36:3f:d8:0f:
         38:4c:28:aa:96:ff:33:16:dc:e8:6e:be:c2:bf:4c:cc:d2:57:
         e4:34:b4:2a:ab:8e:f4:0d:fd:8a:9c:c1:b3:fb:53:09:f7:04:
         de:06:36:4b:90:e6:4e:07:ba:4e:3f:fd:0e:0e:2b:b5:87:a3:
         46:6a:94:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:32:45 2025 by rpki-client