Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/3/323630323a666531333a3263363a3a2f34382d3438203d3e203534313333.roa
File:                     323630323a666531333a3263363a3a2f34382d3438203d3e203534313333.roa (raw, json)
Hash identifier:          eOinL0SpHMFqP4k1RlMolVJy4l6JdOnWssHiv0K/HU4=
Subject key identifier:   A9:6C:AF:B0:24:93:06:FE:24:84:CA:10:55:64:E4:96:C6:F9:D6:92
Certificate issuer:       /CN=9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef
Certificate serial:       7F3E7529FE56D1194CE6196F8F67C5B91F25A912
Authority key identifier: A0:DF:8E:B2:8D:12:F9:CD:F7:A6:8B:3D:C7:A5:65:76:74:8B:2E:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/323630323a666531333a3263363a3a2f34382d3438203d3e203534313333.roa
Signing time:             Thu 08 May 2025 03:58:24 +0000
ROA not before:           Thu 08 May 2025 03:53:24 +0000
ROA not after:            Thu 07 May 2026 03:58:24 +0000
asID:                     54133
IP address blocks:        2602:fe13:2c6::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/A0DF8EB28D12F9CDF7A68B3DC7A56576748B2E54.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/A0DF8EB28D12F9CDF7A68B3DC7A56576748B2E54.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/8bb7e416-db1b-4221-a6c0-947074a20f8f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/8bb7e416-db1b-4221-a6c0-947074a20f8f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 02:56:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:3e:75:29:fe:56:d1:19:4c:e6:19:6f:8f:67:c5:b9:1f:25:a9:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef
        Validity
            Not Before: May  8 03:53:24 2025 GMT
            Not After : May  7 03:58:24 2026 GMT
        Subject: CN=A96CAFB0249306FE2484CA105564E496C6F9D692
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:02:f2:2e:3e:07:f2:4c:77:57:33:df:42:78:
                    c6:38:34:19:db:d8:c2:f3:2c:ed:f4:2f:9a:fa:74:
                    c2:ca:ad:f3:53:a5:64:c3:25:91:bb:c3:f9:a1:f4:
                    55:68:e6:5d:a8:1a:c5:fc:ef:9a:73:e7:f6:b7:e4:
                    61:19:73:a5:80:8d:75:30:28:06:a1:ea:ed:82:50:
                    89:bf:d9:9b:2b:18:43:2b:af:8d:e0:01:da:23:5c:
                    03:12:60:6c:38:34:5a:57:1c:30:52:a4:58:26:18:
                    aa:a1:be:83:33:b1:2a:5e:0e:3d:d4:0b:5a:a0:0b:
                    c7:a7:10:ae:76:f7:db:65:03:6b:dc:ec:8c:29:8b:
                    40:15:89:6f:05:7e:0e:64:7f:c3:05:3c:38:81:3d:
                    33:3c:3b:d2:30:dd:d6:db:3b:49:6f:ad:66:bb:66:
                    a3:6d:fe:b0:a0:af:3b:f7:5a:6a:69:22:b3:8e:58:
                    b5:0a:2e:d9:c7:dd:43:a2:1c:81:91:94:0c:af:a1:
                    6b:b1:59:f7:3c:ed:99:04:8f:f1:5e:79:73:68:db:
                    4e:57:42:be:31:7c:9e:a9:e6:33:30:0a:33:c3:03:
                    54:40:6e:84:54:77:3b:42:56:c4:78:b9:39:43:94:
                    cf:04:f0:f2:ff:c6:e8:4a:de:7d:b1:5b:0a:a7:d8:
                    22:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:6C:AF:B0:24:93:06:FE:24:84:CA:10:55:64:E4:96:C6:F9:D6:92
            X509v3 Authority Key Identifier:
                keyid:A0:DF:8E:B2:8D:12:F9:CD:F7:A6:8B:3D:C7:A5:65:76:74:8B:2E:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/A0DF8EB28D12F9CDF7A68B3DC7A56576748B2E54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/323630323a666531333a3263363a3a2f34382d3438203d3e203534313333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fe13:2c6::/48

    Signature Algorithm: sha256WithRSAEncryption
         a7:cd:d0:4c:cb:93:42:0d:73:9e:be:63:9d:7a:f5:d0:c2:75:
         76:50:ea:de:ea:b3:ae:d4:a9:31:9f:c2:19:67:be:1f:ce:3c:
         38:f0:e9:e4:9c:58:cf:ff:7c:b3:09:a3:b7:e0:af:7a:33:da:
         b1:80:45:62:20:4e:e3:88:f6:1b:a5:b0:04:27:a2:4c:7d:60:
         15:3f:f0:06:cf:d9:04:53:48:9c:ab:c2:53:9d:3e:66:4d:82:
         5d:a1:2c:46:a9:c5:2f:f3:2d:df:99:26:9b:c2:68:f6:5d:35:
         8c:71:8a:ef:ca:d6:56:23:7f:fd:32:48:a7:67:ba:26:99:8a:
         4f:2e:ff:7e:10:9b:95:47:f9:a7:d9:1a:c7:96:50:8e:43:db:
         3f:48:63:35:3c:9a:21:60:1f:11:87:00:4d:16:65:80:af:1b:
         c4:bd:a2:a4:b2:f6:59:36:55:d6:82:e7:85:7e:c2:6a:87:cd:
         ea:81:80:40:d1:39:25:48:4b:af:33:32:d9:6b:cc:4f:02:5c:
         35:73:0c:d2:66:98:3f:09:51:98:61:92:2b:2a:dd:92:0e:4c:
         1f:37:f8:c9:82:ce:39:20:58:2f:17:fa:51:f4:89:d7:df:27:
         e6:6c:c3:53:30:94:6b:f8:4e:bb:a9:94:e6:ae:0e:36:bc:8a:
         07:69:29:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:08:08 2025 by rpki-client