Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/6/323632303a3133613a633030303a3a2f34302d3438203d3e203533333536.roa
File:                     323632303a3133613a633030303a3a2f34302d3438203d3e203533333536.roa (raw, json)
Hash identifier:          vae0uwrgkjN2P2BYYXtx6eiCuoL/mqG8zTr85krS+Kc=
Subject key identifier:   1B:CD:F9:B2:7B:03:3F:77:E7:8C:EF:F9:FF:0C:02:AF:9A:A1:4A:AA
Certificate issuer:       /CN=a928fd66fc0487f5bba93f4ce32eee8bebaefff5aea95e8454
Certificate serial:       595BBA17886C309B0CA4EB9DE09F2A5C6D6479C9
Authority key identifier: 75:E8:A0:27:E9:2C:15:B9:41:4A:59:AC:09:6B:D4:63:4B:90:69:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9aeaefa1-9009-4d41-9090-b27ec04ef7ef/a928fd66fc0487f5bba93f4ce32eee8bebaefff5aea95e8454.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/6/323632303a3133613a633030303a3a2f34302d3438203d3e203533333536.roa
Signing time:             Tue 19 May 2026 04:03:18 +0000
ROA not before:           Tue 19 May 2026 03:58:18 +0000
ROA not after:            Tue 18 May 2027 04:03:18 +0000
asID:                     53356
IP address blocks:        2620:13a:c000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/6/75E8A027E92C15B9414A59AC096BD4634B906914.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/6/75E8A027E92C15B9414A59AC096BD4634B906914.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9aeaefa1-9009-4d41-9090-b27ec04ef7ef/a928fd66fc0487f5bba93f4ce32eee8bebaefff5aea95e8454.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9aeaefa1-9009-4d41-9090-b27ec04ef7ef/9aeaefa1-9009-4d41-9090-b27ec04ef7ef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9aeaefa1-9009-4d41-9090-b27ec04ef7ef/9aeaefa1-9009-4d41-9090-b27ec04ef7ef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9aeaefa1-9009-4d41-9090-b27ec04ef7ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 05 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:5b:ba:17:88:6c:30:9b:0c:a4:eb:9d:e0:9f:2a:5c:6d:64:79:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a928fd66fc0487f5bba93f4ce32eee8bebaefff5aea95e8454
        Validity
            Not Before: May 19 03:58:18 2026 GMT
            Not After : May 18 04:03:18 2027 GMT
        Subject: CN=1BCDF9B27B033F77E78CEFF9FF0C02AF9AA14AAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ee:d9:71:0c:34:3e:d9:ef:9c:98:95:be:f2:
                    ec:98:79:4a:d0:e1:04:f9:dc:b0:55:c6:d3:a5:7f:
                    03:47:03:8e:1e:67:a7:17:fb:cd:44:6c:c0:90:9f:
                    29:1f:9e:9a:3b:dc:18:3f:e7:ba:c8:62:1f:98:58:
                    22:36:93:8c:83:5c:3c:c8:fd:8b:0c:c6:51:6c:ff:
                    51:c9:b4:a6:ba:d9:06:e0:5e:56:cd:97:2f:01:cf:
                    cf:28:a2:3a:77:55:00:19:1c:73:d4:6b:b1:ec:97:
                    24:c1:59:0a:d3:4a:57:91:45:17:22:c1:77:69:f9:
                    5b:81:91:8f:cb:34:d1:11:83:56:53:0b:2f:78:ba:
                    8c:a6:49:6a:fa:b8:0d:77:89:56:2a:e2:96:0d:94:
                    f4:16:57:c3:2f:06:5e:af:cd:fd:31:78:2f:4d:2d:
                    9b:30:42:a5:5b:21:6e:10:1b:09:30:96:72:27:25:
                    ef:fc:82:bb:76:be:91:d0:96:fc:d2:35:72:45:68:
                    4b:17:6f:f0:e5:07:4a:32:30:89:ac:ea:2d:b0:6b:
                    01:df:42:bb:e8:00:e7:00:51:25:f7:25:c4:fd:20:
                    75:23:c3:83:a9:a1:82:77:85:1a:c3:3a:92:66:9a:
                    ab:c1:56:ce:7d:83:47:3d:38:16:03:44:d0:a6:85:
                    fe:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:CD:F9:B2:7B:03:3F:77:E7:8C:EF:F9:FF:0C:02:AF:9A:A1:4A:AA
            X509v3 Authority Key Identifier:
                keyid:75:E8:A0:27:E9:2C:15:B9:41:4A:59:AC:09:6B:D4:63:4B:90:69:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/6/75E8A027E92C15B9414A59AC096BD4634B906914.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9aeaefa1-9009-4d41-9090-b27ec04ef7ef/a928fd66fc0487f5bba93f4ce32eee8bebaefff5aea95e8454.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/6/323632303a3133613a633030303a3a2f34302d3438203d3e203533333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:13a:c000::/40

    Signature Algorithm: sha256WithRSAEncryption
         73:de:fb:43:d6:06:2d:91:60:ca:11:6e:70:9e:9f:05:c3:42:
         2f:a1:5a:1d:f9:34:e1:71:4e:06:77:f0:ee:4b:72:3a:68:4d:
         b1:f6:46:74:c4:6e:29:68:e7:2c:6b:04:77:bb:84:0d:19:0d:
         14:43:b4:21:6d:52:05:a3:03:13:41:43:40:11:ba:29:d3:73:
         77:d2:b8:20:93:0d:09:b5:64:20:0e:9e:0e:55:f4:2a:04:e7:
         ce:cc:5d:ec:ab:ca:ba:da:a9:e8:85:f1:ef:83:3f:99:94:28:
         7d:40:07:7a:bc:5b:b5:ae:0a:c4:1c:b4:24:fb:b9:99:b9:37:
         13:97:91:af:d1:e4:76:05:16:25:4c:d1:88:2a:2e:fa:88:60:
         ef:1a:48:c1:a8:d3:9c:f2:93:a8:59:9f:9b:53:7d:86:6d:45:
         35:fa:2f:12:25:b1:90:7a:75:f9:b9:69:f1:b2:cc:b3:10:d2:
         f2:fa:59:eb:81:83:c9:3a:54:06:fe:dc:40:93:ce:f7:08:19:
         16:f7:58:0c:03:a9:fd:f6:a7:fa:cf:4e:c4:f8:62:1e:d5:62:
         28:83:01:d9:77:8c:e8:b3:8f:7a:f5:98:3c:d1:ee:7a:f8:71:
         0e:28:ff:47:ec:74:72:a4:81:f5:e3:eb:38:60:ee:fd:d2:3f:
         de:69:af:0f
-----BEGIN CERTIFICATE-----
MIIFkDCCBHigAwIBAgIUWVu6F4hsMJsMpOud4J8qXG1keckwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYTkyOGZkNjZmYzA0ODdmNWJiYTkzZjRjZTMyZWVlOGJl
YmFlZmZmNWFlYTk1ZTg0NTQwHhcNMjYwNTE5MDM1ODE4WhcNMjcwNTE4MDQwMzE4
WjAzMTEwLwYDVQQDEygxQkNERjlCMjdCMDMzRjc3RTc4Q0VGRjlGRjBDMDJBRjlB
QTE0QUFBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvu7ZcQw0Ptnv
nJiVvvLsmHlK0OEE+dywVcbTpX8DRwOOHmenF/vNRGzAkJ8pH56aO9wYP+e6yGIf
mFgiNpOMg1w8yP2LDMZRbP9RybSmutkG4F5WzZcvAc/PKKI6d1UAGRxz1Gux7Jck
wVkK00pXkUUXIsF3aflbgZGPyzTREYNWUwsveLqMpklq+rgNd4lWKuKWDZT0FlfD
LwZer839MXgvTS2bMEKlWyFuEBsJMJZyJyXv/IK7dr6R0Jb80jVyRWhLF2/w5QdK
MjCJrOotsGsB30K76ADnAFEl9yXE/SB1I8ODqaGCd4UawzqSZpqrwVbOfYNHPTgW
A0TQpoX+iwIDAQABo4ICkDCCAowwHQYDVR0OBBYEFBvN+bJ7Az9354zv+f8MAq+a
oUqqMB8GA1UdIwQYMBaAFHXooCfpLBW5QUpZrAlr1GNLkGkUMA4GA1UdDwEB/wQE
AwIHgDBxBgNVHR8EajBoMGagZKBihmByc3luYzovL3Jwa2kuYWRtaW4uZnJlZXJh
bmdlY2xvdWQuY29tL3JlcG8vRlJDLUNBLzYvNzVFOEEwMjdFOTJDMTVCOTQxNEE1
OUFDMDk2QkQ0NjM0QjkwNjkxNC5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZm
ZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzlhZWFlZmExLTkwMDkt
NGQ0MS05MDkwLWIyN2VjMDRlZjdlZi9hOTI4ZmQ2NmZjMDQ4N2Y1YmJhOTNmNGNl
MzJlZWU4YmViYWVmZmY1YWVhOTVlODQ1NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGD
MIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLmFkbWluLmZyZWVyYW5nZWNsb3Vk
LmNvbS9yZXBvL0ZSQy1DQS82LzMyMzYzMjMwM2EzMTMzNjEzYTYzMzAzMDMwM2Ez
YTJmMzQzMDJkMzQzODIwM2QzZTIwMzUzMzMzMzUzNi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACYgATrA
MA0GCSqGSIb3DQEBCwUAA4IBAQBz3vtD1gYtkWDKEW5wnp8Fw0IvoVod+TThcU4G
d/DuS3I6aE2x9kZ0xG4paOcsawR3u4QNGQ0UQ7QhbVIFowMTQUNAEbop03N30rgg
kw0JtWQgDp4OVfQqBOfOzF3sq8q62qnohfHvgz+ZlCh9QAd6vFu1rgrEHLQk+7mZ
uTcTl5Gv0eR2BRYlTNGIKi76iGDvGkjBqNOc8pOoWZ+bU32GbUU1+i8SJbGQenX5
uWnxssyzENLy+lnrgYPJOlQG/txAk873CBkW91gMA6n99qf6z07E+GIe1WIogwHZ
d4zos4969Zg80e56+HEOKP9H7HRypIH14+s4YO790j/eaa8P
-----END CERTIFICATE-----
Generated at Thu Jun 4 11:08:51 2026 by rpki-client