Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/3/323630323a666531333a6663333a3a2f34382d3438203d3e203533333536.roa
File:                     323630323a666531333a6663333a3a2f34382d3438203d3e203533333536.roa (raw, json)
Hash identifier:          0wxGI26pVbqHTfugW/XdMoY+zVU5VxIetuQ+/L9Bmoo=
Subject key identifier:   47:D5:0A:A7:5F:C0:25:3B:63:F8:DC:F7:D0:86:32:35:D2:F2:A3:8C
Certificate issuer:       /CN=9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef
Certificate serial:       1DF0E54806E66194DBECA5A6536DA1139B04CC86
Authority key identifier: A0:DF:8E:B2:8D:12:F9:CD:F7:A6:8B:3D:C7:A5:65:76:74:8B:2E:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/323630323a666531333a6663333a3a2f34382d3438203d3e203533333536.roa
Signing time:             Tue 22 Jul 2025 20:29:48 +0000
ROA not before:           Tue 22 Jul 2025 20:24:48 +0000
ROA not after:            Tue 21 Jul 2026 20:29:48 +0000
asID:                     53356
IP address blocks:        2602:fe13:fc3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/A0DF8EB28D12F9CDF7A68B3DC7A56576748B2E54.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/A0DF8EB28D12F9CDF7A68B3DC7A56576748B2E54.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/8bb7e416-db1b-4221-a6c0-947074a20f8f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/8bb7e416-db1b-4221-a6c0-947074a20f8f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Jul 2025 08:38:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:f0:e5:48:06:e6:61:94:db:ec:a5:a6:53:6d:a1:13:9b:04:cc:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef
        Validity
            Not Before: Jul 22 20:24:48 2025 GMT
            Not After : Jul 21 20:29:48 2026 GMT
        Subject: CN=47D50AA75FC0253B63F8DCF7D0863235D2F2A38C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:87:2d:06:11:73:be:c9:c0:05:5c:32:5d:b7:
                    ba:2f:15:a5:73:c1:79:fe:c8:6a:66:03:0e:19:f9:
                    90:00:53:90:79:5b:68:fa:be:66:52:6d:95:e7:a0:
                    fd:f7:99:f3:37:79:73:32:11:41:e6:5c:71:66:9d:
                    df:70:92:90:40:5d:47:d8:63:49:75:18:04:99:30:
                    c1:93:63:a6:be:e8:06:07:5c:61:b1:b5:c5:aa:58:
                    53:23:6c:cd:ad:9f:ba:98:4a:75:83:18:44:64:4f:
                    b0:99:4b:ef:e5:9b:87:36:0a:02:86:ca:6f:0e:ee:
                    28:95:28:b8:82:d0:e5:6b:e1:74:94:da:34:59:b8:
                    c9:fd:1d:be:5c:d2:08:18:22:65:07:03:76:cd:2d:
                    9f:41:fe:98:36:b2:c8:94:b0:87:e0:82:90:0a:b8:
                    78:91:4a:4c:61:16:8b:4f:93:2d:49:54:93:bf:19:
                    f0:c9:5d:3b:fc:7e:0c:a1:09:03:8f:1c:18:e5:a3:
                    6d:61:7d:bb:03:a9:a7:2c:5f:f1:4f:67:c5:6b:69:
                    ba:49:44:a5:39:3b:ca:ca:3e:5f:8f:77:08:b1:36:
                    03:c7:cc:4b:31:e0:41:a3:cb:ea:0a:24:4e:ee:91:
                    f0:9a:6b:04:b0:fa:bb:60:48:41:e4:8b:bd:d6:e2:
                    6e:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:D5:0A:A7:5F:C0:25:3B:63:F8:DC:F7:D0:86:32:35:D2:F2:A3:8C
            X509v3 Authority Key Identifier:
                keyid:A0:DF:8E:B2:8D:12:F9:CD:F7:A6:8B:3D:C7:A5:65:76:74:8B:2E:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/A0DF8EB28D12F9CDF7A68B3DC7A56576748B2E54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/323630323a666531333a6663333a3a2f34382d3438203d3e203533333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fe13:fc3::/48

    Signature Algorithm: sha256WithRSAEncryption
         9f:0e:6a:9d:68:b8:94:d0:a8:b4:d5:d0:eb:da:da:04:f6:c1:
         e5:cb:12:bc:76:b4:b3:12:0c:3e:66:e6:b7:9a:a9:58:c0:32:
         b9:62:ca:60:2d:c9:70:12:61:7b:0e:57:30:45:f4:59:e1:26:
         54:36:79:01:69:c2:aa:fe:d4:d4:2c:5d:29:57:82:ed:f3:b9:
         6b:5d:85:e7:88:36:5e:39:60:ad:26:90:6f:b5:aa:bc:8d:4c:
         cd:44:94:d9:aa:56:95:d4:8d:39:4e:b2:af:41:9d:62:86:ae:
         51:ef:bd:c4:7f:98:a8:23:85:e2:6d:da:ef:d8:99:d9:30:4a:
         b0:c0:db:e7:58:f9:e1:ef:b6:87:39:89:db:c0:cc:a2:93:cd:
         fb:ad:42:7e:17:f0:2f:da:01:a0:88:06:e0:cc:f2:50:b6:76:
         c5:da:6b:cc:46:d1:1d:a6:2c:ce:98:db:72:7d:5a:9f:73:e5:
         f6:e1:8a:2f:b2:64:ce:aa:f2:c1:43:00:76:0b:89:ea:4d:95:
         9e:30:29:8b:7f:81:31:97:d3:51:d7:10:8a:e3:2b:8b:ee:b0:
         99:f9:48:38:15:90:5b:f1:54:02:55:4c:a3:4d:3d:f5:e7:a2:
         8e:c4:1f:ee:b7:8e:24:2b:9b:05:58:0d:ae:d4:06:32:91:e1:
         3e:95:8a:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 12:43:43 2025 by rpki-client