Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/3/323630323a666531333a6663363a3a2f34382d3438203d3e203533333536.roa
File:                     323630323a666531333a6663363a3a2f34382d3438203d3e203533333536.roa (raw, json)
Hash identifier:          ZsC+5/DcFzC4A5mbI7rCEhdz+PubygU/arjL0OozCa0=
Subject key identifier:   43:3C:1C:33:8E:E8:B4:C3:17:F3:AD:E0:EF:D1:19:75:82:FB:2E:E3
Certificate issuer:       /CN=9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef
Certificate serial:       52EB9687CA01B599805F3554F55A589683285411
Authority key identifier: A0:DF:8E:B2:8D:12:F9:CD:F7:A6:8B:3D:C7:A5:65:76:74:8B:2E:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/323630323a666531333a6663363a3a2f34382d3438203d3e203533333536.roa
Signing time:             Tue 22 Jul 2025 20:29:49 +0000
ROA not before:           Tue 22 Jul 2025 20:24:49 +0000
ROA not after:            Tue 21 Jul 2026 20:29:49 +0000
asID:                     53356
IP address blocks:        2602:fe13:fc6::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/A0DF8EB28D12F9CDF7A68B3DC7A56576748B2E54.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/A0DF8EB28D12F9CDF7A68B3DC7A56576748B2E54.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/8bb7e416-db1b-4221-a6c0-947074a20f8f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/8bb7e416-db1b-4221-a6c0-947074a20f8f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Jul 2025 08:38:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:eb:96:87:ca:01:b5:99:80:5f:35:54:f5:5a:58:96:83:28:54:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef
        Validity
            Not Before: Jul 22 20:24:49 2025 GMT
            Not After : Jul 21 20:29:49 2026 GMT
        Subject: CN=433C1C338EE8B4C317F3ADE0EFD1197582FB2EE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:93:32:f9:03:62:ce:5e:3b:2e:d3:4b:d4:f6:
                    7e:0c:24:63:93:b9:4c:30:12:b0:bf:fa:d9:f0:7f:
                    df:64:60:4c:83:47:ce:86:71:97:d5:85:84:2e:00:
                    77:46:e3:e4:a3:ba:d5:26:2b:ba:04:fa:b3:1f:a0:
                    e3:32:f3:19:62:73:2f:b4:3a:35:82:7c:8e:34:b1:
                    e1:b4:e4:60:06:34:27:d5:67:7d:f6:09:f3:29:00:
                    3d:09:96:71:ad:b8:de:6c:25:2a:a4:64:2a:92:a6:
                    a5:74:35:50:8a:55:f9:99:56:98:43:18:91:bd:a6:
                    87:2e:bc:5b:df:3a:b2:93:17:f2:e0:70:dc:10:53:
                    9d:cd:79:36:82:65:28:53:11:d1:34:0d:70:f1:0c:
                    0b:b8:05:4f:90:69:23:c0:0c:48:a5:b5:95:93:91:
                    8f:4d:da:f8:ba:41:63:ef:4f:ac:f8:b7:3c:4c:05:
                    41:00:d7:3d:56:d7:70:42:84:d3:de:55:0a:8d:98:
                    2c:3c:c4:da:e6:77:0b:65:c0:38:3c:88:98:1d:27:
                    71:26:e4:a6:85:53:35:e8:d3:ef:a8:8a:c0:07:8b:
                    bc:ee:38:5a:eb:52:b1:e6:20:15:06:eb:8f:2e:ca:
                    a9:3f:af:1c:2a:03:66:19:a7:46:c6:28:79:04:f8:
                    f9:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:3C:1C:33:8E:E8:B4:C3:17:F3:AD:E0:EF:D1:19:75:82:FB:2E:E3
            X509v3 Authority Key Identifier:
                keyid:A0:DF:8E:B2:8D:12:F9:CD:F7:A6:8B:3D:C7:A5:65:76:74:8B:2E:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/A0DF8EB28D12F9CDF7A68B3DC7A56576748B2E54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/323630323a666531333a6663363a3a2f34382d3438203d3e203533333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fe13:fc6::/48

    Signature Algorithm: sha256WithRSAEncryption
         73:38:cc:43:b7:f2:ed:90:c8:a9:ee:d6:67:5c:a8:49:00:74:
         81:3e:ca:97:b8:95:ba:8f:c0:a6:0f:4e:ea:af:09:c4:20:c6:
         f8:b7:06:ea:bc:9a:49:c3:c3:e4:ab:35:c4:df:29:4a:97:b9:
         b4:5c:23:f1:ea:70:c3:91:df:6f:5b:32:c5:fa:75:3c:60:9c:
         e1:e4:b7:52:50:62:94:ac:9e:45:f9:58:53:e9:45:a6:63:fa:
         ae:26:ec:3f:b3:59:e5:2b:0f:be:e2:43:ec:8e:a4:0d:e2:ba:
         5e:26:d4:d4:72:50:67:2a:d7:a2:3e:7c:45:d8:10:b8:62:72:
         0d:35:62:da:19:e4:9c:7a:f9:2c:ad:0c:fb:fb:44:b3:9f:07:
         3d:08:06:15:04:25:9b:a4:e2:cf:a2:05:71:8c:3f:b7:58:a4:
         8f:d5:6f:33:74:2d:cc:c0:d7:22:6f:8d:98:dc:18:fd:39:19:
         c8:fa:82:8b:06:6b:be:8b:bc:9e:99:b8:ab:21:46:4e:54:6e:
         79:ac:33:b4:80:60:b1:7d:bf:d0:07:f0:4b:dd:29:66:c6:e2:
         db:5d:61:be:a8:ed:c0:cd:e7:2f:f4:97:1f:32:74:ee:f4:5b:
         ff:dc:d3:97:b1:12:4e:51:bc:4d:41:d7:32:aa:ad:83:62:55:
         08:82:ee:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 12:41:55 2025 by rpki-client