Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/3/323630323a666531333a6663353a3a2f34382d3438203d3e203533333536.roa
File:                     323630323a666531333a6663353a3a2f34382d3438203d3e203533333536.roa (raw, json)
Hash identifier:          bmTfUm/bdPR4HtNEJegttB8t0hlQFgvKt4AfOqTzOHE=
Subject key identifier:   D6:CD:18:B3:F5:AF:25:9F:22:2C:70:E7:02:25:07:E4:B4:74:5D:4E
Certificate issuer:       /CN=9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef
Certificate serial:       449D9F1CE593DF21E6C162FE605DB0040BA9B598
Authority key identifier: A0:DF:8E:B2:8D:12:F9:CD:F7:A6:8B:3D:C7:A5:65:76:74:8B:2E:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/323630323a666531333a6663353a3a2f34382d3438203d3e203533333536.roa
Signing time:             Tue 22 Jul 2025 20:29:48 +0000
ROA not before:           Tue 22 Jul 2025 20:24:48 +0000
ROA not after:            Tue 21 Jul 2026 20:29:48 +0000
asID:                     53356
IP address blocks:        2602:fe13:fc5::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/A0DF8EB28D12F9CDF7A68B3DC7A56576748B2E54.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/A0DF8EB28D12F9CDF7A68B3DC7A56576748B2E54.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/8bb7e416-db1b-4221-a6c0-947074a20f8f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/8bb7e416-db1b-4221-a6c0-947074a20f8f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Jul 2025 08:38:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:9d:9f:1c:e5:93:df:21:e6:c1:62:fe:60:5d:b0:04:0b:a9:b5:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef
        Validity
            Not Before: Jul 22 20:24:48 2025 GMT
            Not After : Jul 21 20:29:48 2026 GMT
        Subject: CN=D6CD18B3F5AF259F222C70E7022507E4B4745D4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:bb:27:03:ca:7c:e3:31:24:1b:a3:03:ea:1a:
                    e7:bb:d6:b0:93:71:49:2d:18:cf:ed:b1:47:fb:bb:
                    03:ea:df:7a:fa:79:b4:2b:f8:00:12:3d:3b:c5:50:
                    84:41:97:71:c3:27:c6:c2:3d:da:90:bc:e2:da:80:
                    e9:83:38:b8:0b:07:3d:7c:d0:f0:7f:5f:3a:85:43:
                    b1:f5:e5:56:2d:dc:27:39:79:64:e1:18:44:ee:06:
                    b7:97:7c:b1:45:62:76:5d:1d:86:c2:c4:54:37:a7:
                    33:91:9f:00:66:6e:c4:46:4f:13:04:78:f2:9b:54:
                    1e:c8:ca:4e:2a:81:cb:f4:ac:d9:f2:d7:89:b1:5f:
                    d8:c0:bc:a0:12:6d:db:b2:b5:33:26:17:b0:84:18:
                    f5:6a:cd:61:77:9f:98:c7:92:2b:79:af:e7:b2:52:
                    a5:c6:d6:b5:bf:1a:f2:a9:ba:18:d4:bf:f2:8c:30:
                    85:a8:ec:cb:77:5c:a7:ce:21:34:8f:c0:66:2a:75:
                    75:21:ee:5f:66:1a:b8:37:a7:0d:bf:54:a2:a2:a0:
                    3a:54:20:47:ce:a9:e8:dd:99:98:c1:18:66:6c:f5:
                    50:11:ec:23:18:0e:b4:5a:3d:92:14:f2:12:24:b9:
                    65:cb:3b:5d:81:2f:c2:db:a6:18:3e:d7:21:48:95:
                    25:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:CD:18:B3:F5:AF:25:9F:22:2C:70:E7:02:25:07:E4:B4:74:5D:4E
            X509v3 Authority Key Identifier:
                keyid:A0:DF:8E:B2:8D:12:F9:CD:F7:A6:8B:3D:C7:A5:65:76:74:8B:2E:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/A0DF8EB28D12F9CDF7A68B3DC7A56576748B2E54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/323630323a666531333a6663353a3a2f34382d3438203d3e203533333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fe13:fc5::/48

    Signature Algorithm: sha256WithRSAEncryption
         22:b6:49:20:d5:4f:dd:e9:0a:84:d3:d1:29:5c:59:c7:7b:07:
         d4:c2:d5:89:c9:4b:7e:cf:a1:01:07:6f:48:04:a3:08:8a:a3:
         9c:8e:f5:59:d2:a7:6e:41:f2:78:96:aa:eb:0e:09:8b:80:7c:
         24:12:e0:4d:bf:b9:aa:93:c4:4d:e2:ed:79:94:46:f8:ec:8d:
         7c:23:56:d3:78:3d:be:9a:6f:95:9a:9d:57:fe:cb:82:84:e0:
         29:eb:2c:c2:7a:d4:a1:42:1b:74:17:5b:78:17:30:e2:bf:24:
         b1:b1:c5:c6:51:a1:29:be:34:2a:a9:7e:b8:de:14:16:f1:69:
         49:e4:84:bd:0c:ef:df:19:80:10:53:23:cd:dd:fb:2a:d0:94:
         4f:23:5d:bd:83:b8:c5:b9:8e:0c:9f:09:6f:3c:d0:e2:82:fa:
         e4:02:50:c2:3e:35:ab:40:22:6e:7b:9e:7b:57:a4:12:82:d8:
         86:57:b5:47:b0:31:49:e6:c8:c1:e2:ee:79:40:04:51:7e:0f:
         7b:27:ab:6c:98:f2:76:34:23:98:9a:33:a6:66:77:01:bd:88:
         21:9e:df:34:ad:65:1b:46:f3:ab:3e:85:d1:f1:57:8d:26:5d:
         aa:3a:3a:ad:75:11:ca:81:9c:ec:53:c3:93:a7:a0:ed:02:b4:
         d1:f3:bf:58
-----BEGIN CERTIFICATE-----
MIIFkTCCBHmgAwIBAgIURJ2fHOWT3yHmwWL+YF2wBAuptZgwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOWFiMjhmYmM4YzA4NGQzNmNkMjZkMzA4YjE2NzAyZTU5
ZTAxZmNiYTY4MWJmZWM5ZWYwHhcNMjUwNzIyMjAyNDQ4WhcNMjYwNzIxMjAyOTQ4
WjAzMTEwLwYDVQQDEyhENkNEMThCM0Y1QUYyNTlGMjIyQzcwRTcwMjI1MDdFNEI0
NzQ1RDRFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyLsnA8p84zEk
G6MD6hrnu9awk3FJLRjP7bFH+7sD6t96+nm0K/gAEj07xVCEQZdxwyfGwj3akLzi
2oDpgzi4Cwc9fNDwf186hUOx9eVWLdwnOXlk4RhE7ga3l3yxRWJ2XR2GwsRUN6cz
kZ8AZm7ERk8TBHjym1QeyMpOKoHL9KzZ8teJsV/YwLygEm3bsrUzJhewhBj1as1h
d5+Yx5Irea/nslKlxta1vxryqboY1L/yjDCFqOzLd1ynziE0j8BmKnV1Ie5fZhq4
N6cNv1SioqA6VCBHzqno3ZmYwRhmbPVQEewjGA60Wj2SFPISJLllyztdgS/C26YY
PtchSJUllwIDAQABo4ICkTCCAo0wHQYDVR0OBBYEFNbNGLP1ryWfIixw5wIlB+S0
dF1OMB8GA1UdIwQYMBaAFKDfjrKNEvnN96aLPcelZXZ0iy5UMA4GA1UdDwEB/wQE
AwIHgDBxBgNVHR8EajBoMGagZKBihmByc3luYzovL3Jwa2kuYWRtaW4uZnJlZXJh
bmdlY2xvdWQuY29tL3JlcG8vRlJDLUNBLzMvQTBERjhFQjI4RDEyRjlDREY3QTY4
QjNEQzdBNTY1NzY3NDhCMkU1NC5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZm
ZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzhiYjdlNDE2LWRiMWIt
NDIyMS1hNmMwLTk0NzA3NGEyMGY4Zi85YWIyOGZiYzhjMDg0ZDM2Y2QyNmQzMDhi
MTY3MDJlNTllMDFmY2JhNjgxYmZlYzllZi5jZXIwgZMGCCsGAQUFBwELBIGGMIGD
MIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLmFkbWluLmZyZWVyYW5nZWNsb3Vk
LmNvbS9yZXBvL0ZSQy1DQS8zLzMyMzYzMDMyM2E2NjY1MzEzMzNhNjY2MzM1M2Ez
YTJmMzQzODJkMzQzODIwM2QzZTIwMzUzMzMzMzUzNi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACYC/hMP
xTANBgkqhkiG9w0BAQsFAAOCAQEAIrZJINVP3ekKhNPRKVxZx3sH1MLViclLfs+h
AQdvSASjCIqjnI71WdKnbkHyeJaq6w4Ji4B8JBLgTb+5qpPETeLteZRG+OyNfCNW
03g9vppvlZqdV/7LgoTgKesswnrUoUIbdBdbeBcw4r8ksbHFxlGhKb40Kql+uN4U
FvFpSeSEvQzv3xmAEFMjzd37KtCUTyNdvYO4xbmODJ8JbzzQ4oL65AJQwj41q0Ai
bnuee1ekEoLYhle1R7AxSebIweLueUAEUX4PeyerbJjydjQjmJozpmZ3Ab2IIZ7f
NK1lG0bzqz6F0fFXjSZdqjo6rXURyoGc7FPDk6eg7QK00fO/WA==
-----END CERTIFICATE-----
Generated at Fri Jul 25 12:43:02 2025 by rpki-client