Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/3/323630323a666531333a3261623a3a2f34382d3438203d3e203533333536.roa
File:                     323630323a666531333a3261623a3a2f34382d3438203d3e203533333536.roa (raw, json)
Hash identifier:          P8tSBQhqLy5gNofT3ioK2Of3ZyceBnReV1N9CA23++w=
Subject key identifier:   68:42:7C:E1:99:1F:B4:54:DB:64:7E:66:D7:01:E9:14:8D:E4:F9:4A
Certificate issuer:       /CN=9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef
Certificate serial:       2E9C35B8D39D717FA1F392C6BDFE9A4815BCCBAB
Authority key identifier: A0:DF:8E:B2:8D:12:F9:CD:F7:A6:8B:3D:C7:A5:65:76:74:8B:2E:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/323630323a666531333a3261623a3a2f34382d3438203d3e203533333536.roa
Signing time:             Fri 05 Jun 2026 02:29:01 +0000
ROA not before:           Fri 05 Jun 2026 02:24:01 +0000
ROA not after:            Fri 04 Jun 2027 02:29:01 +0000
asID:                     53356
IP address blocks:        2602:fe13:2ab::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/A0DF8EB28D12F9CDF7A68B3DC7A56576748B2E54.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/A0DF8EB28D12F9CDF7A68B3DC7A56576748B2E54.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/8bb7e416-db1b-4221-a6c0-947074a20f8f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/8bb7e416-db1b-4221-a6c0-947074a20f8f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:9c:35:b8:d3:9d:71:7f:a1:f3:92:c6:bd:fe:9a:48:15:bc:cb:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef
        Validity
            Not Before: Jun  5 02:24:01 2026 GMT
            Not After : Jun  4 02:29:01 2027 GMT
        Subject: CN=68427CE1991FB454DB647E66D701E9148DE4F94A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:23:6b:a6:16:52:f2:d4:df:01:f2:53:10:ce:
                    33:80:8b:e0:a7:b8:91:58:8d:86:1b:2d:48:72:ae:
                    11:e1:7b:f1:26:6d:c8:1e:6f:3c:03:4b:c6:a5:e4:
                    ed:aa:ed:d2:0d:a3:45:20:e8:5b:37:3f:90:ca:1e:
                    66:7f:68:41:32:b5:f7:89:d0:f9:8f:15:c6:90:c1:
                    dd:de:b4:d2:00:9c:7a:02:6b:ec:a6:ba:4a:47:07:
                    d3:f1:69:fe:e9:70:c1:04:bc:6f:38:b6:38:2c:00:
                    94:ee:c1:84:7b:8e:d3:d9:9f:62:50:dc:dc:6f:75:
                    06:9b:cb:ae:4e:78:8f:59:e5:ed:02:9c:13:e2:46:
                    aa:51:e1:a8:be:b8:14:36:03:2e:fc:8c:d3:82:26:
                    e7:52:f8:a0:12:1f:55:2b:d6:76:aa:fd:1d:86:d8:
                    d1:1f:e2:08:e6:78:87:50:dc:e2:64:fd:4e:20:be:
                    05:b9:ce:0a:6b:72:98:01:ac:61:44:6a:85:08:f9:
                    f5:bd:d2:ef:62:04:a7:15:5c:99:81:c6:84:e8:7c:
                    ff:53:64:be:1c:a7:44:e7:f2:14:18:42:12:1b:28:
                    ce:65:5b:8f:91:38:bf:a0:cd:b7:6d:21:f3:3f:b0:
                    be:87:61:9f:e5:cd:33:a4:6e:f3:80:fc:af:01:74:
                    59:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:42:7C:E1:99:1F:B4:54:DB:64:7E:66:D7:01:E9:14:8D:E4:F9:4A
            X509v3 Authority Key Identifier:
                keyid:A0:DF:8E:B2:8D:12:F9:CD:F7:A6:8B:3D:C7:A5:65:76:74:8B:2E:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/A0DF8EB28D12F9CDF7A68B3DC7A56576748B2E54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/323630323a666531333a3261623a3a2f34382d3438203d3e203533333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fe13:2ab::/48

    Signature Algorithm: sha256WithRSAEncryption
         4f:4e:69:06:50:b6:d1:f3:2c:0b:6d:59:ff:a5:5b:00:74:26:
         5a:96:2c:9b:a4:24:de:70:2c:8a:a8:3f:d1:e7:ce:29:da:d3:
         85:c9:71:93:a6:26:d9:7e:10:56:33:b5:63:f1:5a:a4:44:92:
         13:70:44:c4:1e:de:7c:8c:b4:4a:1f:0f:65:c0:1e:a4:34:ca:
         d4:16:54:b9:72:e3:56:4c:0c:e1:24:d2:24:24:b2:dc:f1:49:
         88:d6:f2:a8:ba:57:c3:e5:84:ff:9f:a9:44:75:3d:4c:61:5f:
         42:6b:19:a4:13:70:6c:94:07:a6:71:16:6c:e2:e8:4a:bf:59:
         ce:f8:c5:1c:f4:41:73:67:50:15:65:b6:2a:fa:1c:b8:07:b6:
         ad:1e:02:49:46:25:54:c9:2f:d8:01:7d:a2:0a:94:65:0f:78:
         e3:c9:95:da:73:38:4a:85:b5:aa:ad:61:b2:57:a8:b8:f1:a8:
         1d:b9:2e:8d:70:d8:67:0c:d0:57:ce:9b:4d:6d:68:2c:7b:2b:
         2a:7e:25:a5:5a:51:bf:5d:52:a0:ed:67:89:73:2a:b3:49:41:
         0a:03:9d:8f:20:53:cd:fa:9c:92:96:c5:3a:b7:c0:85:40:46:
         e4:52:31:74:ef:da:f8:6c:18:c2:cd:bc:39:d3:d8:a7:64:a4:
         ed:3d:99:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:26:48 2026 by rpki-client