Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS400298.roa
File:                     AS400298.roa (raw, json)
Hash identifier:          yOg9IV3uBqQoCOY1zxj5vTqjdJkgDf6vP+FDfB4mf5s=
Subject key identifier:   C8:62:77:47:D8:E0:65:DC:9E:C4:20:DE:B5:5D:5D:FD:E0:A5:B1:22
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       44417FA53A48E1932DFD21A159D660477181B13E
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS400298.roa
Signing time:             Fri 13 Feb 2026 13:03:52 +0000
ROA not before:           Fri 13 Feb 2026 12:58:52 +0000
ROA not after:            Fri 12 Feb 2027 13:03:52 +0000
asID:                     400298
IP address blocks:        2602:fed2:7081::/48 maxlen: 48
                          2602:fed2:7086::/48 maxlen: 48
                          2602:fed2:7089::/48 maxlen: 48
                          2602:fed2:7184::/48 maxlen: 48
                          2602:fed2:7304::/48 maxlen: 48
                          2602:fed2:730e::/48 maxlen: 48
                          2602:fed2:7e85::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Mar 2026 08:44:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:41:7f:a5:3a:48:e1:93:2d:fd:21:a1:59:d6:60:47:71:81:b1:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Feb 13 12:58:52 2026 GMT
            Not After : Feb 12 13:03:52 2027 GMT
        Subject: CN=C8627747D8E065DC9EC420DEB55D5DFDE0A5B122
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:fe:18:83:bb:8f:92:88:44:f5:07:96:f6:48:
                    55:26:88:e3:8c:ec:2e:3a:03:d0:64:99:c0:ca:c2:
                    bf:44:f5:e7:84:a6:8d:84:75:f5:d4:79:a0:a0:ee:
                    07:3d:99:f0:c8:f6:20:1b:e6:24:55:9b:dd:92:bd:
                    a1:1a:ca:a1:f2:59:a3:a5:3b:45:a0:67:24:46:38:
                    4d:82:24:7b:76:c5:60:ff:1c:66:cf:96:4e:f2:c8:
                    5b:74:a3:ee:0a:29:28:fe:8a:7c:1f:ee:41:99:fa:
                    d3:ac:35:ec:f0:d4:1e:60:c1:23:d3:03:7a:1a:d0:
                    e9:c0:c0:5b:e8:54:53:e7:d3:16:89:de:ff:23:73:
                    1a:8b:f7:9b:4e:a8:8d:35:96:c0:bf:91:69:ee:cf:
                    8d:e4:ae:1a:cb:b3:5b:90:5d:cc:88:15:ad:97:64:
                    61:72:0f:f4:c4:0a:8f:7d:2e:2f:90:2f:43:9e:cd:
                    6a:1f:92:25:67:36:75:65:8a:ac:1e:ea:ba:41:46:
                    ca:ef:ba:ae:cb:95:4f:8a:4f:d8:6a:0e:32:8c:9f:
                    fc:24:1d:16:55:95:45:36:17:37:a6:7e:ca:47:e3:
                    7d:07:63:56:0d:4d:59:46:d2:df:73:94:cd:3f:5c:
                    84:af:2d:d0:10:73:b1:ef:51:5b:2b:64:0b:bb:85:
                    91:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:62:77:47:D8:E0:65:DC:9E:C4:20:DE:B5:5D:5D:FD:E0:A5:B1:22
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS400298.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed2:7081::/48
                  2602:fed2:7086::/48
                  2602:fed2:7089::/48
                  2602:fed2:7184::/48
                  2602:fed2:7304::/48
                  2602:fed2:730e::/48
                  2602:fed2:7e85::/48

    Signature Algorithm: sha256WithRSAEncryption
         5b:72:ae:72:21:79:b8:05:52:50:e6:85:9f:dc:69:87:68:60:
         4c:32:b3:41:f6:8d:cd:ce:cd:19:66:22:0d:aa:3e:ff:63:a9:
         0a:10:21:24:e8:9a:2e:a8:c8:f5:84:97:c9:2a:c9:4a:91:6c:
         f2:9f:4b:9c:c3:4d:29:e7:ee:fe:60:a0:3d:0c:ec:86:55:6f:
         c1:a3:ca:d8:9a:dd:ee:8b:4c:c1:09:fe:1a:39:27:15:cb:83:
         16:b9:2f:e0:78:30:27:91:b3:a0:4b:f7:e2:9d:aa:a0:5e:f7:
         a1:32:a5:6e:fb:9e:11:e3:36:78:4c:6f:0a:e0:72:f9:50:9c:
         44:fe:9a:ea:ca:4c:33:b3:a2:68:e3:c0:f4:51:aa:1d:ed:4c:
         f9:d8:b0:f6:f8:06:b0:3b:da:da:7b:20:fd:9f:ca:2a:29:38:
         86:c4:6c:f8:23:82:72:31:15:ae:a6:c1:42:d0:1d:bd:4c:a1:
         ad:a8:18:39:ef:42:af:e6:bb:be:6a:ad:84:ea:39:73:bd:02:
         da:89:7b:79:b5:c6:3f:76:83:86:aa:93:55:e0:3d:22:78:ee:
         82:f6:85:1f:3c:82:be:e3:42:b7:44:c9:03:0a:b1:03:59:a4:
         54:ea:8d:36:84:21:85:5b:4c:34:d9:b2:b1:85:e1:ca:32:86:
         6f:d0:0b:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:20:34 2026 by rpki-client