Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS8772.roa
File:                     AS8772.roa (raw, json)
Hash identifier:          hXyJK+My76eflgcWfPo8EgOKHPqznGWiTarWQBmi760=
Subject key identifier:   E7:3B:05:D1:0C:5E:8F:A4:C2:11:96:E7:57:E5:00:37:62:9C:1F:D5
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       116DF9C0A5D598CE1E32FCC5B44BA52318515728
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS8772.roa
Signing time:             Mon 22 Sep 2025 03:58:35 +0000
ROA not before:           Mon 22 Sep 2025 03:53:35 +0000
ROA not after:            Mon 21 Sep 2026 03:58:35 +0000
asID:                     8772
IP address blocks:        2602:fed2:7910::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 19:43:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:6d:f9:c0:a5:d5:98:ce:1e:32:fc:c5:b4:4b:a5:23:18:51:57:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Sep 22 03:53:35 2025 GMT
            Not After : Sep 21 03:58:35 2026 GMT
        Subject: CN=E73B05D10C5E8FA4C21196E757E50037629C1FD5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:0c:46:0c:4b:40:98:b3:b5:3d:a6:23:3c:27:
                    da:04:18:08:01:d4:08:5a:23:87:61:02:e4:3f:fa:
                    46:db:a4:e9:99:88:fa:72:f4:89:14:3e:6f:7b:41:
                    ff:0b:05:3b:a6:b1:7a:58:fa:65:c2:1d:c6:1e:ec:
                    0a:45:72:77:13:b7:77:ee:5e:12:ed:6c:be:75:c5:
                    47:81:c2:97:da:d5:ba:1b:b8:aa:cc:e7:00:b2:8e:
                    89:64:d6:03:61:98:1c:f3:4a:eb:81:1f:4f:ed:b5:
                    6a:a0:8f:62:36:40:a7:f2:bb:4e:69:73:09:db:10:
                    f8:a8:da:42:c7:a4:7c:96:05:76:37:b1:6e:62:ee:
                    91:82:18:a7:b7:34:39:d1:16:df:92:6f:24:44:54:
                    db:f9:7e:df:28:36:57:dd:a9:21:39:33:ef:8a:d2:
                    c9:c1:1b:63:32:f8:8d:92:ad:11:07:22:ef:b1:bc:
                    20:76:c3:67:8b:b2:6c:42:9e:1b:19:fb:25:dd:70:
                    61:df:80:be:a1:53:e2:b5:78:fc:70:5d:99:c0:88:
                    5e:89:a8:3b:17:d9:3e:44:7b:4d:7a:cd:d1:ed:b9:
                    81:77:2d:6a:4c:4e:34:93:b0:c5:57:77:9d:7a:19:
                    2d:97:82:0e:41:8d:4b:6b:70:da:1a:ae:f7:f3:93:
                    e2:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:3B:05:D1:0C:5E:8F:A4:C2:11:96:E7:57:E5:00:37:62:9C:1F:D5
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS8772.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed2:7910::/44

    Signature Algorithm: sha256WithRSAEncryption
         b9:67:17:d1:74:bd:ed:fe:8b:df:d5:ca:01:88:15:db:cd:89:
         fb:5f:cd:10:90:f5:44:ae:5f:ee:0a:62:b2:49:6a:24:09:71:
         37:a4:ab:ec:bd:19:b1:d2:96:35:61:e5:d5:0b:f0:0d:a5:86:
         56:e3:b0:94:83:db:d7:07:09:7a:b5:45:0c:70:b7:9d:f2:01:
         67:ba:a4:82:c1:1f:9e:52:70:70:71:21:b0:89:fd:5e:1f:a8:
         0d:2f:33:7b:4a:4e:8f:81:fd:9f:be:96:bb:d4:a6:e0:1d:d9:
         85:fc:6d:fd:3c:cf:77:f7:79:27:62:87:c0:3b:5f:3f:4f:22:
         f1:26:f3:6b:4d:f0:7c:14:d6:35:2a:7d:0d:f0:be:56:b5:f1:
         7f:31:4e:eb:f8:1d:70:ba:c4:07:a8:d1:40:12:ed:ef:94:08:
         5d:ef:3a:3e:a3:9a:df:a4:ee:45:38:81:97:18:d7:51:5b:2f:
         ba:d9:89:a9:83:da:b3:08:b7:ca:ae:f0:f7:c5:c5:b4:31:33:
         1e:a7:ca:3c:e0:ca:3d:53:0a:60:08:db:d9:51:6d:d1:14:31:
         cc:f0:3b:8d:99:2b:1e:12:cb:ee:28:17:52:20:8b:04:b8:c7:
         36:90:29:36:81:87:f6:ec:71:be:d4:4e:cf:70:71:81:de:d9:
         c0:22:a0:61
-----BEGIN CERTIFICATE-----
MIIFVzCCBD+gAwIBAgIUEW35wKXVmM4eMvzFtEulIxhRVygwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZmQ3N2Y1NWVmZTNhOTNjNTNjYTNkYzhhNmY4Mzc0ZmU3
MGZlYzU1NjdkZDFlOGM4NTUwHhcNMjUwOTIyMDM1MzM1WhcNMjYwOTIxMDM1ODM1
WjAzMTEwLwYDVQQDEyhFNzNCMDVEMTBDNUU4RkE0QzIxMTk2RTc1N0U1MDAzNzYy
OUMxRkQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQxGDEtAmLO1
PaYjPCfaBBgIAdQIWiOHYQLkP/pG26TpmYj6cvSJFD5ve0H/CwU7prF6WPplwh3G
HuwKRXJ3E7d37l4S7Wy+dcVHgcKX2tW6G7iqzOcAso6JZNYDYZgc80rrgR9P7bVq
oI9iNkCn8rtOaXMJ2xD4qNpCx6R8lgV2N7FuYu6RghintzQ50Rbfkm8kRFTb+X7f
KDZX3akhOTPvitLJwRtjMviNkq0RByLvsbwgdsNni7JsQp4bGfsl3XBh34C+oVPi
tXj8cF2ZwIheiag7F9k+RHtNes3R7bmBdy1qTE40k7DFV3edehktl4IOQY1La3Da
Gq7385Pi7QIDAQABo4ICVzCCAlMwHQYDVR0OBBYEFOc7BdEMXo+kwhGW51flADdi
nB/VMB8GA1UdIwQYMBaAFMiTX9ylAoroIJ/sgq2K6M+3xud2MA4GA1UdDwEB/wQE
AwIHgDBxBgNVHR8EajBoMGagZKBihmByc3luYzovL3Jwa2kuYWRtaW4uZnJlZXJh
bmdlY2xvdWQuY29tL3JlcG8vRlJDLUNBLzAvQzg5MzVGRENBNTAyOEFFODIwOUZF
QzgyQUQ4QUU4Q0ZCN0M2RTc3Ni5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYw
YzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzZlNWQ5NjExLWZkMzMt
NDg4Yy05YWVjLWY0ZGYyYTI1MzUxZS9mZDc3ZjU1ZWZlM2E5M2M1M2NhM2RjOGE2
ZjgzNzRmZTcwZmVjNTU2N2RkMWU4Yzg1NS5jZXIwWgYIKwYBBQUHAQsETjBMMEoG
CCsGAQUFBzALhj5yc3luYzovL3Jwa2kuYWRtaW4uZnJlZXJhbmdlY2xvdWQuY29t
L3JlcG8vRlJDLUNBLzAvQVM4NzcyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgL+0nkQMA0GCSqGSIb3
DQEBCwUAA4IBAQC5ZxfRdL3t/ovf1coBiBXbzYn7X80QkPVErl/uCmKySWokCXE3
pKvsvRmx0pY1YeXVC/ANpYZW47CUg9vXBwl6tUUMcLed8gFnuqSCwR+eUnBwcSGw
if1eH6gNLzN7Sk6Pgf2fvpa71KbgHdmF/G39PM9393knYofAO18/TyLxJvNrTfB8
FNY1Kn0N8L5WtfF/MU7r+B1wusQHqNFAEu3vlAhd7zo+o5rfpO5FOIGXGNdRWy+6
2Ympg9qzCLfKrvD3xcW0MTMep8o84Mo9UwpgCNvZUW3RFDHM8DuNmSseEsvuKBdS
IIsEuMc2kCk2gYf27HG+1E7PcHGB3tnAIqBh
-----END CERTIFICATE-----
Generated at Mon Oct 20 07:38:42 2025 by rpki-client