Route Origin Authorization

$ rpki-client -vvvf rpki.admin.freerangecloud.com/repo/FRC-CA/3/323630323a666531333a3830343a3a2f34382d3438203d3e20333936353033.roa
File:                     323630323a666531333a3830343a3a2f34382d3438203d3e20333936353033.roa (raw, json)
Hash identifier:          L6iv6uON9QUj7+8WIjFE2ZdfypMIBsxi2bKnCV4j1q4=
Subject key identifier:   11:3C:82:BA:CB:93:91:98:0F:85:7E:08:8A:E6:24:2D:35:CB:D3:BF
Certificate issuer:       /CN=9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef
Certificate serial:       40A4D11F51F2FFC582DC05F1AAAF109A425276EE
Authority key identifier: A0:DF:8E:B2:8D:12:F9:CD:F7:A6:8B:3D:C7:A5:65:76:74:8B:2E:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/323630323a666531333a3830343a3a2f34382d3438203d3e20333936353033.roa
Signing time:             Fri 25 Sep 2026 19:31:41 +0000
ROA not before:           Fri 25 Sep 2026 19:26:41 +0000
ROA not after:            Fri 24 Sep 2027 19:31:41 +0000
asID:                     396503
IP address blocks:        2602:fe13:804::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/A0DF8EB28D12F9CDF7A68B3DC7A56576748B2E54.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/A0DF8EB28D12F9CDF7A68B3DC7A56576748B2E54.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/8bb7e416-db1b-4221-a6c0-947074a20f8f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/8bb7e416-db1b-4221-a6c0-947074a20f8f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:a4:d1:1f:51:f2:ff:c5:82:dc:05:f1:aa:af:10:9a:42:52:76:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef
        Validity
            Not Before: Sep 25 19:26:41 2026 GMT
            Not After : Sep 24 19:31:41 2027 GMT
        Subject: CN=113C82BACB9391980F857E088AE6242D35CBD3BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c3:cf:b0:ab:3c:31:f6:9f:b8:45:7c:5a:ef:
                    99:29:8d:88:d7:48:c3:8c:ef:fa:2c:0b:8a:24:81:
                    1f:ee:81:63:b4:fa:14:96:48:d6:e4:83:29:dc:fb:
                    d1:2d:3b:91:00:07:1b:b9:03:a1:37:4d:02:ec:45:
                    89:3e:75:14:5f:ca:34:29:ad:88:28:d5:08:b2:5c:
                    8e:d7:ed:d7:78:4c:89:d3:36:f8:8f:6c:e5:e9:4f:
                    a4:21:67:b9:b6:10:e7:17:53:6c:8b:9d:61:b7:e6:
                    f3:6b:f9:f3:cc:c0:32:e0:37:a0:65:eb:f3:f4:85:
                    12:8e:87:97:92:65:cc:52:1f:1a:0e:5b:80:70:e1:
                    a6:e8:ab:26:2e:87:46:68:3d:79:86:2c:d9:39:c6:
                    a4:17:6e:1c:b0:0b:ad:cc:fa:3c:48:4e:bc:93:ea:
                    f5:95:a0:83:69:3e:ae:b6:e1:2d:60:a6:17:57:0a:
                    86:52:bb:a2:0c:8a:40:59:16:7c:6f:01:64:d1:c8:
                    c5:9e:c6:7a:9c:9a:92:c0:cb:28:27:08:91:a4:8c:
                    3d:35:6b:a5:fd:4a:32:92:5a:69:df:2d:9d:10:df:
                    20:61:27:6e:24:9e:64:fa:06:76:32:22:94:84:b7:
                    a2:4e:4a:95:eb:36:54:3b:b5:19:96:5e:61:36:54:
                    a1:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:3C:82:BA:CB:93:91:98:0F:85:7E:08:8A:E6:24:2D:35:CB:D3:BF
            X509v3 Authority Key Identifier:
                keyid:A0:DF:8E:B2:8D:12:F9:CD:F7:A6:8B:3D:C7:A5:65:76:74:8B:2E:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/A0DF8EB28D12F9CDF7A68B3DC7A56576748B2E54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/323630323a666531333a3830343a3a2f34382d3438203d3e20333936353033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fe13:804::/48

    Signature Algorithm: sha256WithRSAEncryption
         19:eb:5f:d8:88:ea:9d:05:7b:f6:24:60:74:5d:fc:ba:94:60:
         41:be:d5:bb:e7:ec:fe:cb:eb:ba:c6:51:df:ea:a8:c3:8e:b0:
         48:e6:0b:c5:a2:9b:24:0f:11:e7:b7:8a:e5:d1:13:68:ff:57:
         b8:a4:e0:12:2d:2b:97:ce:86:57:8b:e8:0d:c2:be:0f:b7:0c:
         f3:09:01:be:5f:0e:c4:10:c9:1b:5a:18:7b:87:2d:9a:0f:08:
         ba:b4:d4:d3:05:85:1c:d1:cc:45:94:1d:d1:96:95:12:cf:7c:
         11:55:8c:d1:b8:85:14:41:f8:78:34:15:55:28:d4:17:43:48:
         f2:ea:07:1a:04:77:7d:58:3b:74:62:1c:32:e2:12:9a:fe:5f:
         8f:72:f3:cd:27:a8:5c:ec:14:5b:d1:14:2e:47:cb:65:94:03:
         f9:fd:ca:4c:07:60:b1:14:c7:59:74:a7:b1:51:2c:e8:2e:79:
         05:fc:4f:78:d7:5e:40:a7:fe:9b:58:4d:e4:cf:9b:6a:9d:ad:
         22:0e:d8:13:fe:64:ea:5d:b0:ef:a7:5a:ca:89:44:ba:e1:d2:
         4a:25:b6:bd:65:34:c3:dc:82:4b:99:54:25:1b:e7:c5:84:f4:
         f9:0f:79:7e:41:b2:14:55:d1:90:0b:0f:d5:86:a8:18:e7:f3:
         ed:91:18:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 21:00:06 2026 by rpki-client