Route Origin Authorization

$ rpki-client -vvvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS8772.roa
File:                     AS8772.roa (raw, json)
Hash identifier:          VwbK62AsMpOvFUqI+JH3pxHMFM1TCWzwcDRO7r7O+FE=
Subject key identifier:   B1:C8:A5:08:4D:14:5D:44:8D:6D:B3:64:5F:EA:50:B9:BC:3C:71:66
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       45C8C0EF18A369445DC21A40FED8616F5AED3D8C
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS8772.roa
Signing time:             Mon 24 Aug 2026 04:31:07 +0000
ROA not before:           Mon 24 Aug 2026 04:26:07 +0000
ROA not after:            Mon 23 Aug 2027 04:31:07 +0000
asID:                     8772
IP address blocks:        2602:fed2:7910::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:c8:c0:ef:18:a3:69:44:5d:c2:1a:40:fe:d8:61:6f:5a:ed:3d:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Aug 24 04:26:07 2026 GMT
            Not After : Aug 23 04:31:07 2027 GMT
        Subject: CN=B1C8A5084D145D448D6DB3645FEA50B9BC3C7166
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:b4:55:40:bf:cc:02:77:5e:2c:6b:2b:e1:2d:
                    57:dc:fa:e8:d5:96:f3:3d:05:a2:b8:d6:b2:75:2c:
                    0a:fc:d5:20:f4:0f:89:cc:e5:a2:0f:6e:27:5d:5d:
                    08:33:9e:8b:8d:78:11:17:df:4e:6f:23:04:25:21:
                    d6:9f:43:09:8b:4e:bd:2d:74:cb:6e:21:7a:57:c3:
                    c4:8c:69:8a:b6:30:e4:c8:4c:24:1f:f9:ca:aa:ae:
                    0f:4d:88:45:6b:f4:5e:9a:04:01:e3:95:7b:90:51:
                    78:cb:70:1b:1b:8e:a3:7f:25:ec:c5:fb:ea:fc:f3:
                    69:4a:58:ec:0a:a4:6e:17:b4:1a:f2:2f:bf:cc:01:
                    f5:03:eb:a3:38:d3:ad:42:d1:a1:43:fd:96:8f:9a:
                    1e:a9:60:91:ee:20:2d:6c:72:59:69:53:e5:0a:73:
                    79:fb:2c:65:1a:62:2c:73:ba:4d:22:63:f3:ef:91:
                    ce:c7:ab:18:c3:d9:2b:c0:e6:6a:0a:b2:ad:41:5e:
                    10:83:eb:23:da:c2:6d:0a:f5:19:1a:4b:4d:48:8c:
                    41:53:ef:a4:a6:cb:e8:0e:98:7f:e1:e3:bb:00:82:
                    a3:22:99:98:bf:39:60:02:17:7a:b0:68:b7:ca:17:
                    16:a4:5a:fb:4a:aa:00:88:0f:55:fb:f5:4d:68:b3:
                    85:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:C8:A5:08:4D:14:5D:44:8D:6D:B3:64:5F:EA:50:B9:BC:3C:71:66
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS8772.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed2:7910::/44

    Signature Algorithm: sha256WithRSAEncryption
         2c:19:3f:40:d5:4b:9e:10:22:de:65:33:45:2c:a3:87:6e:43:
         a1:94:e3:15:e5:f9:43:68:eb:a9:f5:c0:48:8e:8d:d0:7e:a5:
         4e:db:f9:45:b4:a0:4e:7f:dc:db:d2:e2:6d:f5:fe:4c:5d:23:
         d7:bf:34:b0:78:06:d0:e7:bf:01:81:36:ff:31:69:77:7a:e0:
         9c:f1:06:77:05:b1:f0:78:ea:54:0f:11:29:fe:69:88:33:92:
         19:c1:ce:29:da:9f:59:ad:5f:e3:a7:7a:f8:4b:c1:7f:e2:fb:
         29:ae:b6:e0:4f:bd:dd:d1:b1:2e:07:86:e7:86:8a:e0:ef:7d:
         bf:93:a5:9f:6a:b3:31:a5:5e:1e:54:f9:5a:a1:4e:ad:ef:98:
         a4:d8:6e:6d:cf:0d:0e:62:fd:4a:0c:0f:d5:d8:87:59:ce:88:
         3c:fa:67:e4:c5:fd:26:a8:36:ac:eb:fe:d4:25:02:e9:82:ac:
         0f:6f:ee:7a:aa:9f:84:fb:b7:91:71:37:7f:75:aa:cd:26:69:
         90:20:a9:ce:85:a9:fe:21:bb:1e:9d:1e:06:22:14:5f:bb:6f:
         06:26:ec:c7:0f:b2:69:d4:61:b4:1a:b9:f5:2c:23:53:dd:79:
         45:da:c9:95:06:7e:a3:8b:14:20:f1:0c:4e:ca:05:28:f0:aa:
         f8:85:9b:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 13:23:24 2026 by rpki-client