Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/3/323630323a666531333a3830303a3a2f34382d3438203d3e203533333536.roa
File:                     323630323a666531333a3830303a3a2f34382d3438203d3e203533333536.roa (raw, json)
Hash identifier:          Xv55ZJ3QpEC+9xg6hfk5devBx+xfiQSBRuPCC6iZmWA=
Subject key identifier:   42:ED:02:F3:CE:90:83:FA:EA:CA:83:4A:0D:62:A7:FA:1E:26:86:BB
Certificate issuer:       /CN=9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef
Certificate serial:       1BB8153517B87CEBC35CE5A50E1E9E9BA9FEDF75
Authority key identifier: A0:DF:8E:B2:8D:12:F9:CD:F7:A6:8B:3D:C7:A5:65:76:74:8B:2E:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/323630323a666531333a3830303a3a2f34382d3438203d3e203533333536.roa
Signing time:             Tue 18 Feb 2025 17:17:43 +0000
ROA not before:           Tue 18 Feb 2025 17:12:43 +0000
ROA not after:            Tue 17 Feb 2026 17:17:43 +0000
asID:                     53356
IP address blocks:        2602:fe13:800::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/A0DF8EB28D12F9CDF7A68B3DC7A56576748B2E54.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/A0DF8EB28D12F9CDF7A68B3DC7A56576748B2E54.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/8bb7e416-db1b-4221-a6c0-947074a20f8f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/8bb7e416-db1b-4221-a6c0-947074a20f8f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 16:09:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:b8:15:35:17:b8:7c:eb:c3:5c:e5:a5:0e:1e:9e:9b:a9:fe:df:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef
        Validity
            Not Before: Feb 18 17:12:43 2025 GMT
            Not After : Feb 17 17:17:43 2026 GMT
        Subject: CN=42ED02F3CE9083FAEACA834A0D62A7FA1E2686BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:9b:08:90:eb:34:b1:7e:49:01:de:fd:f8:93:
                    b6:ab:a1:7c:23:f9:ec:ce:5c:78:21:64:e6:dc:5b:
                    41:56:90:0f:4b:be:8e:c8:04:e7:44:fd:f8:c1:55:
                    4c:13:cb:91:c3:a5:1e:f7:ae:38:4b:0a:eb:b5:9d:
                    09:a7:72:15:7f:92:f1:ec:d7:a0:41:15:29:fc:20:
                    f9:68:93:27:32:6b:85:ac:5f:69:b1:e5:63:35:3f:
                    fe:67:46:95:7c:12:a4:7b:80:98:08:8a:c5:34:ec:
                    91:af:a4:0b:73:cf:8f:38:86:db:6e:a7:66:5e:e6:
                    86:73:b4:31:87:d9:53:1e:56:fd:b5:92:dc:29:cf:
                    81:b7:c1:5e:1b:9e:7f:26:db:0d:8e:ed:ad:d8:c4:
                    7e:3f:dc:3a:37:8a:be:64:7a:d0:62:99:1c:45:18:
                    75:dd:4f:b9:b4:5b:78:8f:21:b0:d6:57:4f:9d:aa:
                    c7:12:ab:96:44:2a:fb:6f:8c:2f:ad:56:b1:70:b3:
                    3a:d7:ec:16:08:61:df:56:a6:74:fe:fc:4b:7f:8b:
                    2c:0e:46:53:b4:34:4b:35:6d:26:0a:0f:07:e3:35:
                    63:4e:18:40:71:a4:2a:25:5f:c0:74:24:99:60:e6:
                    a1:89:13:17:93:28:9d:5b:e1:4e:88:db:4e:13:e3:
                    9e:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:ED:02:F3:CE:90:83:FA:EA:CA:83:4A:0D:62:A7:FA:1E:26:86:BB
            X509v3 Authority Key Identifier:
                keyid:A0:DF:8E:B2:8D:12:F9:CD:F7:A6:8B:3D:C7:A5:65:76:74:8B:2E:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/A0DF8EB28D12F9CDF7A68B3DC7A56576748B2E54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/323630323a666531333a3830303a3a2f34382d3438203d3e203533333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fe13:800::/48

    Signature Algorithm: sha256WithRSAEncryption
         04:8d:c6:de:ce:f3:47:92:ff:17:9c:4e:e9:ac:0a:da:20:68:
         09:21:52:53:60:c2:1e:d5:70:71:59:bd:37:91:24:c9:32:9f:
         9f:41:8e:78:53:2a:d5:1f:a2:ff:73:50:b2:10:83:e6:88:fc:
         24:18:9e:56:56:03:47:38:d7:85:7f:03:0c:9c:fc:76:e1:82:
         ea:a3:f4:11:80:0a:62:49:f8:ba:d8:29:45:7b:52:2a:99:8f:
         c2:c2:ef:fb:c9:cd:c0:e3:37:ab:7e:80:ff:83:20:15:01:27:
         1a:12:fd:d0:6f:48:72:9f:fb:62:78:00:00:99:b7:90:ba:3b:
         52:73:c2:7a:9e:40:02:b7:8d:37:1a:02:ba:0a:c9:13:f3:58:
         61:24:ca:e1:72:6a:65:60:a7:9d:ed:31:dc:e6:c2:0b:d7:5f:
         14:ae:9b:e9:59:d5:38:e5:6c:c9:42:7a:70:f2:be:fb:5a:dd:
         d2:87:39:cb:32:3e:fb:2e:fc:f1:20:b6:0d:53:59:f4:82:ce:
         50:74:7a:26:b9:bb:7e:45:9e:b2:34:f7:5c:6e:f2:09:af:52:
         76:02:f2:bd:0e:5e:29:6e:84:32:9e:0c:70:34:c8:5c:16:9d:
         08:3d:02:30:90:ca:a0:ec:4a:c2:f0:f2:41:ee:26:b8:c3:f8:
         1c:83:c6:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:00:29 2025 by rpki-client