Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/3/323630323a666531333a3830343a3a2f34382d3438203d3e20333936353033.roa
File:                     323630323a666531333a3830343a3a2f34382d3438203d3e20333936353033.roa (raw, json)
Hash identifier:          Z/jOcWKwL7onqe0HTf8hwGnvEPvUfIf+BgfJQcUPsuo=
Subject key identifier:   0B:19:1F:7A:A3:A6:0E:9D:6D:B6:5E:18:87:50:DD:F1:32:12:16:BB
Certificate issuer:       /CN=9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef
Certificate serial:       4CC7FF988F73D0B398D8F697698ACC31761B1C06
Authority key identifier: A0:DF:8E:B2:8D:12:F9:CD:F7:A6:8B:3D:C7:A5:65:76:74:8B:2E:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/323630323a666531333a3830343a3a2f34382d3438203d3e20333936353033.roa
Signing time:             Fri 22 Nov 2024 18:37:32 +0000
ROA not before:           Fri 22 Nov 2024 18:32:32 +0000
ROA not after:            Fri 21 Nov 2025 18:37:32 +0000
asID:                     396503
IP address blocks:        2602:fe13:804::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/A0DF8EB28D12F9CDF7A68B3DC7A56576748B2E54.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/A0DF8EB28D12F9CDF7A68B3DC7A56576748B2E54.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/8bb7e416-db1b-4221-a6c0-947074a20f8f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/8bb7e416-db1b-4221-a6c0-947074a20f8f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 16:09:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:c7:ff:98:8f:73:d0:b3:98:d8:f6:97:69:8a:cc:31:76:1b:1c:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef
        Validity
            Not Before: Nov 22 18:32:32 2024 GMT
            Not After : Nov 21 18:37:32 2025 GMT
        Subject: CN=0B191F7AA3A60E9D6DB65E188750DDF1321216BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:cf:85:ec:b5:77:fc:70:66:40:d5:ff:9c:df:
                    86:68:aa:f5:0f:c8:ce:eb:1d:e1:a0:57:9e:57:d9:
                    f3:e7:00:c8:f5:03:5e:a9:03:e5:f3:7a:2e:25:c7:
                    e6:d9:42:6d:69:c7:49:82:4b:86:17:c5:e0:8d:78:
                    bc:ee:21:17:cc:86:9d:a1:b5:24:cf:e8:ec:da:a3:
                    51:70:f6:0e:41:58:50:44:44:c0:59:e8:f1:00:4f:
                    73:66:54:82:7e:c8:79:1a:2f:d2:3b:44:fb:22:87:
                    83:57:e3:07:e1:ed:f0:79:9a:ac:c1:e9:71:92:e2:
                    a0:d7:83:ac:2d:fb:01:16:0b:e2:ba:17:0b:bb:f8:
                    b5:72:88:8e:bf:99:82:a8:dc:3c:68:a5:5f:15:b7:
                    a5:1d:71:dd:9c:e6:ea:12:16:88:f7:40:cd:46:a2:
                    03:97:0d:fa:50:8b:ad:86:f8:b9:83:68:33:0b:42:
                    99:6a:25:d8:0d:d6:07:7a:2e:22:0f:a4:e7:1e:d8:
                    7b:b5:cc:ec:6d:76:88:71:31:af:13:db:ae:f1:35:
                    f1:16:e7:44:15:76:68:ba:d6:0a:4b:9d:1f:d4:b9:
                    ef:a3:09:77:17:f7:7e:2d:bb:9a:be:d2:05:c4:58:
                    87:4f:9b:07:30:6f:da:ea:d7:e0:30:63:2e:6d:eb:
                    01:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:19:1F:7A:A3:A6:0E:9D:6D:B6:5E:18:87:50:DD:F1:32:12:16:BB
            X509v3 Authority Key Identifier:
                keyid:A0:DF:8E:B2:8D:12:F9:CD:F7:A6:8B:3D:C7:A5:65:76:74:8B:2E:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/A0DF8EB28D12F9CDF7A68B3DC7A56576748B2E54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/323630323a666531333a3830343a3a2f34382d3438203d3e20333936353033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fe13:804::/48

    Signature Algorithm: sha256WithRSAEncryption
         0a:10:01:83:dc:49:ee:aa:d1:96:82:6a:61:86:f4:4d:2f:64:
         00:60:0a:4f:17:88:f2:e9:c1:e1:53:92:ed:ad:d4:23:90:3a:
         d6:d0:81:55:b9:64:ab:39:d1:53:83:d9:d4:39:37:78:bf:e1:
         1b:30:18:75:24:66:8c:05:73:4d:06:2f:62:dc:d6:22:37:f7:
         ea:df:a6:39:4b:3d:fb:7d:ef:e3:b8:68:8b:1a:63:58:99:4b:
         ca:0f:d7:63:7f:af:ed:8e:bd:af:e9:db:ab:a1:c8:32:ee:8e:
         19:8f:9a:ea:a9:cf:d9:35:23:47:92:38:cd:4a:e1:ad:72:6f:
         ac:6f:1e:7d:ce:05:38:7c:9f:3e:dc:6c:62:54:89:54:0d:84:
         7d:57:d1:cd:65:2c:fc:dc:3e:98:2a:66:94:88:b5:5a:84:3c:
         8a:a6:49:a6:87:64:6e:3b:91:01:09:b5:27:79:40:21:51:04:
         fd:3c:79:34:ae:04:66:0a:1d:71:d7:79:28:a9:21:ba:52:61:
         85:b6:83:d5:76:25:a5:c6:e8:9b:3e:23:a0:87:00:da:ca:fb:
         ef:f5:38:b5:8a:f1:7f:93:b0:fb:2d:4f:dc:26:97:50:6d:fd:
         a2:ff:2d:dc:90:fb:08:13:8d:63:bd:1b:4b:f0:40:e5:66:f7:
         fe:1f:e7:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:03:06 2025 by rpki-client