Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS13737.roa
File:                     AS13737.roa (raw, json)
Hash identifier:          ayRpf+lYhEJ3DRX/e99vftzXZ+SsHYqYUY/Xy8D6lt4=
Subject key identifier:   36:0A:4B:56:FF:19:A9:33:61:B5:1B:C3:35:FE:4B:4D:00:F1:53:A9
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       5986D9428F70D149604CFFD55A9FB61CB229D073
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS13737.roa
Signing time:             Fri 26 Sep 2025 14:25:15 +0000
ROA not before:           Fri 26 Sep 2025 14:20:15 +0000
ROA not after:            Fri 25 Sep 2026 14:25:15 +0000
asID:                     13737
IP address blocks:        2602:fed2:731b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 19:43:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:86:d9:42:8f:70:d1:49:60:4c:ff:d5:5a:9f:b6:1c:b2:29:d0:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Sep 26 14:20:15 2025 GMT
            Not After : Sep 25 14:25:15 2026 GMT
        Subject: CN=360A4B56FF19A93361B51BC335FE4B4D00F153A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:81:a9:50:47:b4:98:86:4d:f5:81:21:b8:75:
                    2f:50:45:d9:f7:3f:5a:a6:13:c6:f8:ef:36:66:44:
                    f0:47:20:6e:50:0e:13:2b:d9:38:cf:8c:d5:3f:ac:
                    97:b2:22:65:35:ca:88:9e:e0:e8:e0:a4:ed:da:1f:
                    7e:bb:5e:2d:57:95:28:ba:0e:f1:f7:14:32:b2:9d:
                    2f:3f:66:07:e6:10:a7:f6:b3:75:73:0d:e4:73:28:
                    12:bd:d8:3f:52:15:54:38:b9:9d:6d:c7:4a:68:cc:
                    bd:9e:2a:23:12:fa:55:f6:be:6a:d9:f4:d2:a9:89:
                    d7:7b:f0:7e:7e:55:a0:2f:8c:93:92:cc:91:87:ee:
                    72:c5:9c:5f:9b:11:79:7a:87:c4:6c:99:a0:17:f8:
                    cb:8c:2b:df:8c:b3:5f:8a:3a:58:af:70:38:6c:7d:
                    bf:63:dd:73:5a:66:db:48:3a:37:67:c5:9d:44:83:
                    e4:e1:50:d5:2c:1f:b0:2c:fa:50:c7:90:61:27:e8:
                    6d:c0:f0:84:7d:c6:db:7f:cd:23:28:fe:63:1e:68:
                    ff:b1:b5:7d:88:22:f7:c3:2b:90:b9:04:43:a1:cb:
                    8e:9c:3b:6e:95:42:30:6c:92:e2:5b:8e:60:08:b1:
                    eb:3d:45:64:70:06:6f:03:34:9f:5e:98:02:ea:ee:
                    b1:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:0A:4B:56:FF:19:A9:33:61:B5:1B:C3:35:FE:4B:4D:00:F1:53:A9
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS13737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed2:731b::/48

    Signature Algorithm: sha256WithRSAEncryption
         48:f9:25:56:6b:1e:0e:e4:32:85:77:06:58:b4:39:bc:b5:43:
         ac:d3:b2:7a:49:0f:a2:12:e3:37:49:b9:7a:80:7e:bf:af:c8:
         be:67:bd:e0:fb:e7:45:3e:4c:97:8c:64:75:8c:51:97:d1:00:
         d2:ee:75:78:dc:55:b2:69:6b:53:11:da:54:78:58:89:f1:2a:
         ec:a7:47:e7:12:2f:5f:28:80:4d:81:b0:88:dc:1f:7f:05:a0:
         11:98:22:2a:f1:94:4d:1b:04:58:35:22:50:49:03:ee:d3:d6:
         5a:94:bf:95:0b:49:bf:ba:73:16:33:2c:4e:f7:f7:ea:70:69:
         01:fc:c3:68:50:98:65:66:d5:a6:3d:49:3a:19:e8:77:56:0d:
         1a:05:00:bb:2e:84:a4:33:09:2f:2f:a6:d4:9f:3d:ca:39:de:
         38:70:9b:60:0d:23:a6:5a:0a:8b:03:32:b1:ed:f3:2e:5d:25:
         89:32:f8:f9:56:79:e0:8f:32:da:19:b7:98:22:22:f2:5d:d2:
         e2:2d:eb:bb:cd:7d:24:cd:f3:ed:ee:fe:97:df:66:5e:bf:53:
         5b:45:d7:d0:fa:e7:bb:b3:47:e2:f7:a9:7e:ce:bb:53:2c:08:
         e7:6d:6a:9b:65:3e:02:cf:48:e5:12:fc:08:ca:7a:fd:fa:ca:
         a7:c5:49:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:20:24 2025 by rpki-client