Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS36832.roa
File:                     AS36832.roa (raw, json)
Hash identifier:          +yRjsaa/q3aXyaYmxnUVaBuFHVznqro3ZuMKO1yIMEQ=
Subject key identifier:   41:89:E9:A2:DF:42:2A:A2:42:F9:EC:FB:07:E1:9F:03:0B:E5:D5:81
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       156AE1DBE3FA51DD7A66136C7B2388BF2524D8A6
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS36832.roa
Signing time:             Fri 31 Oct 2025 21:20:21 +0000
ROA not before:           Fri 31 Oct 2025 21:15:21 +0000
ROA not after:            Fri 30 Oct 2026 21:20:21 +0000
asID:                     36832
IP address blocks:        2602:fed2:7b00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Nov 2025 19:38:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:6a:e1:db:e3:fa:51:dd:7a:66:13:6c:7b:23:88:bf:25:24:d8:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Oct 31 21:15:21 2025 GMT
            Not After : Oct 30 21:20:21 2026 GMT
        Subject: CN=4189E9A2DF422AA242F9ECFB07E19F030BE5D581
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c8:1b:9d:3f:ab:52:4b:80:98:d8:2a:be:7f:
                    40:6f:66:0b:b3:5c:55:fd:e2:35:00:b8:7a:69:0d:
                    db:7a:51:4e:10:18:08:bc:67:37:4e:77:fa:6b:d9:
                    da:62:6a:ed:a4:1d:83:7a:46:b1:0b:5e:8d:e4:2f:
                    4b:88:0c:2d:4d:e9:fd:68:e5:de:7f:47:e5:2d:9a:
                    c7:9a:33:e1:2c:ec:17:d3:b7:61:84:56:12:60:03:
                    4c:75:f3:53:ef:e2:93:28:ff:b9:aa:bf:5d:a3:dd:
                    92:d4:94:d8:bb:32:de:f3:0a:3f:c9:06:95:37:dd:
                    18:d6:69:85:fd:e8:6b:11:b7:35:9d:f7:01:c7:ae:
                    a5:fd:05:62:22:0c:5c:89:2a:fe:9e:68:d9:fb:b2:
                    7b:0e:65:6c:22:44:0e:29:b4:e1:91:6a:e3:7c:a3:
                    7b:ec:8f:39:28:23:5d:41:f3:ef:bc:26:9d:4f:59:
                    68:22:7a:3b:cc:12:d7:20:44:a2:18:70:f8:54:f6:
                    c4:10:2f:95:ca:15:9d:c8:03:c6:02:24:92:66:b3:
                    ba:f3:d7:36:37:15:94:23:06:71:e3:93:14:00:66:
                    22:2b:ed:7a:6b:04:1c:99:bb:cb:5a:97:ea:9a:da:
                    05:ed:70:c6:f7:b2:a2:4d:5d:9b:59:a0:c0:86:c7:
                    0b:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:89:E9:A2:DF:42:2A:A2:42:F9:EC:FB:07:E1:9F:03:0B:E5:D5:81
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS36832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed2:7b00::/40

    Signature Algorithm: sha256WithRSAEncryption
         48:e0:c8:53:2d:01:77:8f:29:f6:03:c4:1f:14:71:63:64:66:
         8d:24:c4:f3:7e:31:f3:7f:53:30:97:a2:3a:98:15:7c:41:35:
         66:48:25:20:17:61:9d:b0:f0:2e:df:05:9e:c0:5b:ac:b1:c8:
         83:8a:e3:e4:f8:fd:97:1f:62:5c:c5:b8:65:0d:7c:21:d6:85:
         54:76:09:1a:57:81:3a:f6:24:7c:8d:8b:5f:f1:35:a1:26:1e:
         01:9b:60:44:38:2e:8b:9e:09:43:d0:f5:83:84:5a:de:97:96:
         5d:b4:2b:d9:f5:51:5a:41:70:54:ad:c0:db:19:91:7c:6f:74:
         81:70:8c:8c:af:6d:14:30:20:f2:4a:77:ef:33:25:72:68:0a:
         cf:ac:a4:1c:41:7a:bb:2e:86:6e:0c:08:7d:2f:10:e4:2f:40:
         5f:35:aa:a5:32:7e:38:f5:83:32:15:e9:04:9e:64:17:56:44:
         f5:70:2c:15:97:68:4a:98:e4:3d:7a:58:f8:37:e8:b3:58:28:
         c7:5d:95:6a:7b:a3:e4:ae:a9:1a:b1:91:43:90:ed:05:32:7d:
         29:00:b7:7d:a0:7e:91:c3:74:f9:d1:11:3b:e0:c2:e9:c5:0e:
         0a:e7:eb:d9:94:21:68:b6:80:2e:85:79:e3:29:cb:6b:ea:81:
         2e:f5:8c:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:46:21 2025 by rpki-client