Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS397877.roa
File:                     AS397877.roa (raw, json)
Hash identifier:          hLdRCRaUTZ8CsQtRuXgatJMu7cqYtZB9SE3hu8HDoJg=
Subject key identifier:   E3:81:F0:35:96:1E:83:D8:AA:1B:40:0F:99:6F:D6:A1:E9:B9:F1:57
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       1F20473BB6E146237ED64333353C529046D9780A
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS397877.roa
Signing time:             Sat 26 Jul 2025 06:31:16 +0000
ROA not before:           Sat 26 Jul 2025 06:26:16 +0000
ROA not after:            Sat 25 Jul 2026 06:31:16 +0000
asID:                     397877
IP address blocks:        2602:fed2:7041::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 19:08:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:20:47:3b:b6:e1:46:23:7e:d6:43:33:35:3c:52:90:46:d9:78:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Jul 26 06:26:16 2025 GMT
            Not After : Jul 25 06:31:16 2026 GMT
        Subject: CN=E381F035961E83D8AA1B400F996FD6A1E9B9F157
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:5a:12:14:53:f7:7b:d3:29:c2:9a:a9:4a:7c:
                    b9:1b:b4:63:23:a4:b1:97:0a:d6:84:ad:e7:52:87:
                    7b:d8:38:dc:eb:57:1c:64:ec:84:c1:d5:0f:44:82:
                    51:77:a9:64:33:17:55:57:ed:be:be:72:bd:a3:ed:
                    03:b5:b9:dc:b0:79:ad:00:48:97:ae:38:da:7d:e8:
                    01:f4:cd:23:78:59:42:06:33:82:e8:c9:d4:f5:6e:
                    23:83:08:e9:0b:81:32:08:06:f2:76:f2:5f:97:e1:
                    5a:83:c6:d4:e6:51:b6:d3:44:b4:3d:6c:37:57:d3:
                    1d:96:64:30:4e:70:ec:7f:bd:6a:84:3a:4e:4e:ba:
                    f5:67:ff:91:ae:39:6b:bd:06:94:6b:8a:72:f0:e4:
                    72:77:fb:f7:a2:77:15:b2:d2:ac:4d:04:b8:42:8f:
                    1a:48:95:07:3c:64:8a:cf:55:14:7c:29:d5:90:03:
                    fa:60:83:2f:4d:a5:29:9d:64:2b:d7:8c:fc:ed:50:
                    20:de:c3:f4:94:e7:e4:ad:f6:0d:90:94:84:52:69:
                    68:d0:d7:e9:53:13:88:aa:97:de:61:3b:16:d3:ad:
                    44:9d:42:89:2c:a1:df:38:98:a4:cf:5c:79:01:24:
                    aa:14:ac:66:95:97:99:84:a6:5d:70:cb:25:87:8f:
                    ce:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:81:F0:35:96:1E:83:D8:AA:1B:40:0F:99:6F:D6:A1:E9:B9:F1:57
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS397877.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed2:7041::/48

    Signature Algorithm: sha256WithRSAEncryption
         3d:0a:ae:24:47:cb:76:c5:53:72:9d:f4:5d:fd:4b:29:29:60:
         1a:c3:a4:ce:ce:c5:ba:65:02:43:61:88:71:4b:a7:43:40:62:
         88:12:8b:ad:77:0b:3f:6e:c7:97:83:3c:d4:67:7e:86:30:b0:
         13:c9:51:a0:cc:00:90:a1:d5:d3:c5:a4:c8:53:fa:76:b0:71:
         bd:ca:58:52:b4:41:61:40:98:55:52:70:c3:85:29:7a:b2:50:
         d1:f9:69:cd:55:fc:a6:6a:44:02:83:da:f7:e4:16:33:39:6b:
         91:f6:3f:78:82:8a:87:c8:17:17:14:07:e8:25:bf:6f:3f:72:
         18:1f:e0:ec:6a:29:45:6f:88:47:96:39:df:92:0a:d5:31:bf:
         94:28:84:8c:82:b5:e2:97:a8:33:d7:a3:ab:76:e7:d6:d6:e1:
         ba:24:ac:eb:37:b7:59:62:bd:ed:bc:c2:dd:d0:bd:3c:fb:ca:
         7d:82:89:6a:2a:3f:6e:03:db:fb:b5:0d:13:0c:20:87:de:e5:
         8b:00:05:68:a2:75:d2:3d:e5:df:37:2a:87:0f:de:1d:74:8c:
         ab:6c:a3:74:52:57:4b:96:68:97:76:55:0a:37:1f:49:f8:73:
         bf:ea:4f:ce:92:2b:c4:47:cd:2e:ed:44:ef:a2:5c:80:c1:2f:
         06:0c:6d:dc
-----BEGIN CERTIFICATE-----
MIIFWTCCBEGgAwIBAgIUHyBHO7bhRiN+1kMzNTxSkEbZeAowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZmQ3N2Y1NWVmZTNhOTNjNTNjYTNkYzhhNmY4Mzc0ZmU3
MGZlYzU1NjdkZDFlOGM4NTUwHhcNMjUwNzI2MDYyNjE2WhcNMjYwNzI1MDYzMTE2
WjAzMTEwLwYDVQQDEyhFMzgxRjAzNTk2MUU4M0Q4QUExQjQwMEY5OTZGRDZBMUU5
QjlGMTU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlVoSFFP3e9Mp
wpqpSny5G7RjI6SxlwrWhK3nUod72Djc61ccZOyEwdUPRIJRd6lkMxdVV+2+vnK9
o+0DtbncsHmtAEiXrjjafegB9M0jeFlCBjOC6MnU9W4jgwjpC4EyCAbydvJfl+Fa
g8bU5lG200S0PWw3V9MdlmQwTnDsf71qhDpOTrr1Z/+RrjlrvQaUa4py8ORyd/v3
oncVstKsTQS4Qo8aSJUHPGSKz1UUfCnVkAP6YIMvTaUpnWQr14z87VAg3sP0lOfk
rfYNkJSEUmlo0NfpUxOIqpfeYTsW061EnUKJLKHfOJikz1x5ASSqFKxmlZeZhKZd
cMslh4/OOwIDAQABo4ICWTCCAlUwHQYDVR0OBBYEFOOB8DWWHoPYqhtAD5lv1qHp
ufFXMB8GA1UdIwQYMBaAFMiTX9ylAoroIJ/sgq2K6M+3xud2MA4GA1UdDwEB/wQE
AwIHgDBxBgNVHR8EajBoMGagZKBihmByc3luYzovL3Jwa2kuYWRtaW4uZnJlZXJh
bmdlY2xvdWQuY29tL3JlcG8vRlJDLUNBLzAvQzg5MzVGRENBNTAyOEFFODIwOUZF
QzgyQUQ4QUU4Q0ZCN0M2RTc3Ni5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYw
YzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzZlNWQ5NjExLWZkMzMt
NDg4Yy05YWVjLWY0ZGYyYTI1MzUxZS9mZDc3ZjU1ZWZlM2E5M2M1M2NhM2RjOGE2
ZjgzNzRmZTcwZmVjNTU2N2RkMWU4Yzg1NS5jZXIwXAYIKwYBBQUHAQsEUDBOMEwG
CCsGAQUFBzALhkByc3luYzovL3Jwa2kuYWRtaW4uZnJlZXJhbmdlY2xvdWQuY29t
L3JlcG8vRlJDLUNBLzAvQVMzOTc4Nzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAmAv7ScEEwDQYJKoZI
hvcNAQELBQADggEBAD0KriRHy3bFU3Kd9F39SykpYBrDpM7OxbplAkNhiHFLp0NA
YogSi613Cz9ux5eDPNRnfoYwsBPJUaDMAJCh1dPFpMhT+nawcb3KWFK0QWFAmFVS
cMOFKXqyUNH5ac1V/KZqRAKD2vfkFjM5a5H2P3iCiofIFxcUB+glv28/chgf4Oxq
KUVviEeWOd+SCtUxv5QohIyCteKXqDPXo6t259bW4bokrOs3t1live28wt3QvTz7
yn2CiWoqP24D2/u1DRMMIIfe5YsABWiiddI95d83KocP3h10jKtso3RSV0uWaJd2
VQo3H0n4c7/qT86SK8RHzS7tRO+iXIDBLwYMbdw=
-----END CERTIFICATE-----
Generated at Mon Aug 4 21:47:30 2025 by rpki-client