Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/3/323630323a666531333a3263373a3a2f34382d3438203d3e203534313333.roa
File:                     323630323a666531333a3263373a3a2f34382d3438203d3e203534313333.roa (raw, json)
Hash identifier:          E1f+w/L+Y4QmOObS5v+R5zJMWBLGXb0lfRTev6VJIeg=
Subject key identifier:   F9:49:95:63:6F:C4:AD:7D:2E:77:F0:87:13:A0:4B:CD:0B:E2:41:0B
Certificate issuer:       /CN=9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef
Certificate serial:       16B1A5CF494A8B9CC78A0905196A312AC9897B36
Authority key identifier: A0:DF:8E:B2:8D:12:F9:CD:F7:A6:8B:3D:C7:A5:65:76:74:8B:2E:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/323630323a666531333a3263373a3a2f34382d3438203d3e203534313333.roa
Signing time:             Thu 08 May 2025 03:58:24 +0000
ROA not before:           Thu 08 May 2025 03:53:24 +0000
ROA not after:            Thu 07 May 2026 03:58:24 +0000
asID:                     54133
IP address blocks:        2602:fe13:2c7::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/A0DF8EB28D12F9CDF7A68B3DC7A56576748B2E54.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/A0DF8EB28D12F9CDF7A68B3DC7A56576748B2E54.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/8bb7e416-db1b-4221-a6c0-947074a20f8f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/8bb7e416-db1b-4221-a6c0-947074a20f8f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 02:56:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:b1:a5:cf:49:4a:8b:9c:c7:8a:09:05:19:6a:31:2a:c9:89:7b:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef
        Validity
            Not Before: May  8 03:53:24 2025 GMT
            Not After : May  7 03:58:24 2026 GMT
        Subject: CN=F94995636FC4AD7D2E77F08713A04BCD0BE2410B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:3d:ac:35:ba:d3:4f:96:ae:ec:79:9e:47:92:
                    f3:1b:55:f5:27:8b:f3:28:6d:34:16:da:b3:d0:c2:
                    f6:b3:fa:07:51:96:05:49:9a:a7:40:b3:44:1f:94:
                    20:95:cd:64:8d:a9:28:5e:ca:b7:11:fa:00:5b:17:
                    1b:2d:3a:d8:4e:d5:11:f8:0f:2f:c5:1b:13:91:b3:
                    52:56:5b:20:04:96:9e:2b:94:75:4c:98:9b:7e:8c:
                    d2:d0:47:76:2b:50:c8:5c:6b:ec:5a:d1:10:20:4a:
                    97:ba:36:89:14:55:46:8e:b7:47:d1:1c:b4:d6:ac:
                    4d:fb:72:87:ae:c7:1f:da:40:42:33:d6:0b:86:36:
                    b0:13:ff:30:62:5a:c9:71:44:a1:2b:d8:35:dd:cc:
                    31:cb:cf:1e:72:b2:d7:f4:84:f1:86:2f:dd:d6:0f:
                    a7:9c:ab:a9:3e:41:5f:42:98:0b:31:32:8a:fc:77:
                    40:9e:f1:f7:1b:b2:b0:85:8c:e5:f3:4b:0f:8b:86:
                    6f:74:c2:b1:10:b3:b4:ab:d4:09:6d:94:50:f2:64:
                    e3:0b:25:3b:44:bb:21:11:c0:4f:bf:b0:97:b5:d7:
                    fb:7a:12:1d:fb:17:6e:b8:07:35:cb:69:ea:f5:11:
                    01:d6:52:17:79:34:3f:ed:53:64:e5:89:dc:5d:14:
                    79:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:49:95:63:6F:C4:AD:7D:2E:77:F0:87:13:A0:4B:CD:0B:E2:41:0B
            X509v3 Authority Key Identifier:
                keyid:A0:DF:8E:B2:8D:12:F9:CD:F7:A6:8B:3D:C7:A5:65:76:74:8B:2E:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/A0DF8EB28D12F9CDF7A68B3DC7A56576748B2E54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/323630323a666531333a3263373a3a2f34382d3438203d3e203534313333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fe13:2c7::/48

    Signature Algorithm: sha256WithRSAEncryption
         0d:10:79:a6:db:f3:96:df:cd:ca:37:fb:9c:8e:ed:b4:14:b2:
         09:ec:75:82:9a:02:2e:8d:c1:ab:69:12:37:34:84:b2:05:d2:
         22:78:bf:4e:aa:55:56:10:99:bb:d7:53:8c:7f:c8:02:ac:35:
         86:b4:29:08:a6:af:80:00:7e:7d:4f:d5:03:25:2b:8c:be:10:
         34:e1:30:57:46:d0:fc:9e:8d:a9:fa:b7:d1:63:fd:36:d7:e9:
         2c:42:54:af:b8:6f:d4:92:de:34:8b:6e:a8:d6:5f:24:4a:50:
         a3:da:51:b2:a5:e9:9b:a2:cc:14:79:c5:98:09:97:68:e8:2e:
         b5:f8:35:2a:c0:2a:fc:3c:cb:09:37:b2:12:81:8c:e6:6d:e8:
         17:60:90:8d:17:2e:4d:3c:d7:67:0e:50:86:6c:c7:26:2f:ad:
         80:5b:ec:c1:14:b0:cd:62:fe:a1:7a:1a:bb:f5:0a:b7:5c:c3:
         d9:cf:53:c8:9c:9b:7d:4c:52:2f:e0:ab:f1:ad:5b:07:d5:35:
         b9:8b:cc:b9:06:22:31:2d:f8:c5:13:a4:dd:10:33:e2:48:d8:
         9b:a4:fa:ec:0b:31:48:ed:ad:c3:f2:8f:01:a8:1a:8c:c5:7d:
         0f:e0:0f:41:03:47:c9:e2:49:3c:4f:1f:19:22:0e:04:d8:bf:
         12:2b:ff:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:18:31 2025 by rpki-client