Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS36318.roa
File:                     AS36318.roa (raw, json)
Hash identifier:          iLkyGVg4DaxYcDAQz3dac7w6RnfviDklJvG/U0RJmPc=
Subject key identifier:   A8:61:90:C0:AD:1B:51:BE:54:F7:BF:5A:99:F7:9D:39:F3:2B:7F:9F
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       1CEC8A06B33BEC76C3D89154FA79A5BBED57CE74
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS36318.roa
Signing time:             Tue 03 Mar 2026 02:29:42 +0000
ROA not before:           Tue 03 Mar 2026 02:24:42 +0000
ROA not after:            Tue 02 Mar 2027 02:29:42 +0000
asID:                     36318
IP address blocks:        2602:fed2:7085::/48 maxlen: 48
                          2602:fed2:718f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 08:56:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:ec:8a:06:b3:3b:ec:76:c3:d8:91:54:fa:79:a5:bb:ed:57:ce:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Mar  3 02:24:42 2026 GMT
            Not After : Mar  2 02:29:42 2027 GMT
        Subject: CN=A86190C0AD1B51BE54F7BF5A99F79D39F32B7F9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:bb:24:f7:e4:bf:99:de:40:2f:c9:ec:02:7d:
                    a4:b1:3d:5b:ce:3b:27:f4:8e:a9:1b:1c:e2:21:15:
                    7c:82:15:c4:46:e8:d5:92:68:5f:07:43:a0:04:85:
                    97:f4:23:0d:68:fa:f6:53:e5:91:21:fd:7b:3e:2a:
                    36:13:a3:a9:50:3a:7a:c2:3a:0c:7e:83:a2:b9:ff:
                    0d:9d:a0:4e:bd:d1:26:d0:8e:7b:fd:02:13:9c:4d:
                    37:c9:5b:cc:38:3f:3b:a6:2f:9f:48:ce:b7:a3:1e:
                    25:f8:87:c1:70:50:74:5a:53:34:ad:f4:5c:f2:0c:
                    38:2f:14:74:16:e8:0e:66:5b:c2:1a:87:82:38:8a:
                    7c:0b:1a:7c:8b:1f:c7:0c:de:d8:11:3c:df:cb:46:
                    00:14:2d:57:ef:53:30:72:9d:55:01:fb:fe:7d:af:
                    42:d8:40:84:df:34:6c:7a:8d:58:45:f9:f2:69:b1:
                    3d:8a:46:56:27:f4:48:70:64:35:70:3f:89:ba:ae:
                    e9:53:15:6e:e6:79:17:b8:ac:07:5e:10:40:31:75:
                    9e:3e:a8:f2:d7:0f:d7:bb:d3:bc:8e:b4:93:70:45:
                    70:c2:47:08:7f:48:3f:74:e1:63:7f:0f:4a:07:2f:
                    af:38:6f:48:bb:a8:77:95:98:2d:ca:17:2e:aa:2d:
                    4b:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:61:90:C0:AD:1B:51:BE:54:F7:BF:5A:99:F7:9D:39:F3:2B:7F:9F
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS36318.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed2:7085::/48
                  2602:fed2:718f::/48

    Signature Algorithm: sha256WithRSAEncryption
         2d:5b:87:80:9e:d5:a8:0b:7e:12:3b:8c:34:89:16:b5:08:3a:
         82:5c:f1:3d:b8:53:d2:22:e5:3e:46:23:12:90:bc:fc:54:f8:
         f2:d0:6a:2c:7a:df:5a:59:56:4f:49:84:70:c9:d9:89:f1:1a:
         41:6b:82:45:75:90:2b:64:f6:49:af:85:34:4e:85:10:e8:27:
         23:6f:54:cf:bc:5b:59:dd:7e:75:d2:16:7a:de:5e:c1:88:16:
         79:9e:ea:a3:af:f3:d7:8c:4f:95:44:84:46:4e:e4:dd:d9:e7:
         da:81:50:51:ee:0c:be:7c:26:2c:f9:d0:68:77:d3:d4:09:54:
         96:58:f7:39:dc:3c:9c:4f:94:80:66:d0:4f:f2:71:8d:47:d0:
         49:67:76:bc:90:09:b5:f1:3c:5f:30:05:63:05:a7:50:0d:b3:
         d0:97:6a:de:be:76:a5:c3:24:82:62:11:8f:20:eb:6d:f3:87:
         49:fe:94:f8:8b:ab:e5:bb:94:0d:94:e6:07:a2:eb:0f:f6:a6:
         7f:c6:a9:dd:67:13:48:ac:bc:6a:32:79:9b:6a:f0:1b:33:4e:
         b2:16:c3:8f:cf:25:db:f4:3c:d2:b2:7e:c6:c7:b8:59:07:95:
         c2:1d:23:32:d8:31:d2:89:22:d6:b5:4c:22:86:1a:9f:ed:0f:
         d1:ca:d2:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:17:29 2026 by rpki-client