Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/3/323630323a666531333a3263303a3a2f34342d3438203d3e203534313333.roa
File:                     323630323a666531333a3263303a3a2f34342d3438203d3e203534313333.roa (raw, json)
Hash identifier:          fXbFC0UpKQrAIKFj5BQIk2iIUsJuVc/+6YG79H7LPsk=
Subject key identifier:   F7:D6:EA:A2:89:AA:DB:1A:DB:B8:AB:C6:1C:0D:FC:84:7A:B1:49:3B
Certificate issuer:       /CN=9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef
Certificate serial:       186AB2288A968A6F7E7896A2E8D4F4CE9B409AF0
Authority key identifier: A0:DF:8E:B2:8D:12:F9:CD:F7:A6:8B:3D:C7:A5:65:76:74:8B:2E:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/323630323a666531333a3263303a3a2f34342d3438203d3e203534313333.roa
Signing time:             Tue 24 Feb 2026 17:17:48 +0000
ROA not before:           Tue 24 Feb 2026 17:12:48 +0000
ROA not after:            Tue 23 Feb 2027 17:17:48 +0000
asID:                     54133
IP address blocks:        2602:fe13:2c0::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/A0DF8EB28D12F9CDF7A68B3DC7A56576748B2E54.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/A0DF8EB28D12F9CDF7A68B3DC7A56576748B2E54.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/8bb7e416-db1b-4221-a6c0-947074a20f8f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/8bb7e416-db1b-4221-a6c0-947074a20f8f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 02:59:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:6a:b2:28:8a:96:8a:6f:7e:78:96:a2:e8:d4:f4:ce:9b:40:9a:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef
        Validity
            Not Before: Feb 24 17:12:48 2026 GMT
            Not After : Feb 23 17:17:48 2027 GMT
        Subject: CN=F7D6EAA289AADB1ADBB8ABC61C0DFC847AB1493B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:71:37:58:e8:30:0e:7a:5b:b0:8a:60:29:59:
                    4d:fa:35:0f:80:a1:f2:83:83:fb:10:0d:49:b1:ce:
                    1c:c9:36:d8:a0:25:c9:e4:74:cd:a9:c5:74:86:bf:
                    0b:ac:7b:77:26:84:7d:1b:e3:d0:11:74:c4:26:54:
                    75:ed:75:d0:bb:e7:c0:da:fb:89:c9:1e:ec:b5:f9:
                    18:77:c6:b2:f9:98:8b:39:16:00:ed:33:af:19:fe:
                    92:70:78:b7:08:45:df:e4:e0:88:49:5f:24:50:fa:
                    83:ef:a9:8b:9e:fd:19:6a:b5:33:f3:c2:14:70:bc:
                    0f:d3:1f:4e:67:d8:4c:ac:1f:62:48:7f:a3:65:e2:
                    ee:89:c5:95:64:39:83:31:c7:cb:d1:5c:b3:ac:ce:
                    13:57:e6:11:50:e4:4a:91:a9:90:56:64:a3:c7:9d:
                    f9:28:a4:81:b5:31:0b:68:ea:a8:63:a3:d8:74:f1:
                    90:75:88:e6:b8:2b:0a:9b:e9:f3:ae:af:f4:d6:3d:
                    21:17:a0:08:b7:55:97:cf:b6:bb:09:1b:8c:bc:94:
                    a0:1d:b2:e0:26:a0:6f:08:72:55:a9:35:84:8a:96:
                    02:14:e0:f0:67:4f:7b:9f:a7:e2:3b:a3:33:54:d1:
                    c0:56:e6:d7:65:aa:e4:97:62:ad:2c:7e:b8:fe:c2:
                    ce:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:D6:EA:A2:89:AA:DB:1A:DB:B8:AB:C6:1C:0D:FC:84:7A:B1:49:3B
            X509v3 Authority Key Identifier:
                keyid:A0:DF:8E:B2:8D:12:F9:CD:F7:A6:8B:3D:C7:A5:65:76:74:8B:2E:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/A0DF8EB28D12F9CDF7A68B3DC7A56576748B2E54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/323630323a666531333a3263303a3a2f34342d3438203d3e203534313333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fe13:2c0::/44

    Signature Algorithm: sha256WithRSAEncryption
         74:42:6b:43:0e:1d:85:c2:1a:16:e2:47:5e:96:13:a2:93:c7:
         37:91:0f:35:eb:da:73:ad:e4:b8:bf:24:a2:a6:ae:72:0b:c6:
         05:83:c3:c0:0f:f0:8f:47:50:54:8b:ff:8f:96:25:2c:a2:2d:
         43:ff:17:69:ce:69:26:c0:5a:4e:f1:d0:fa:4e:97:73:9d:be:
         56:a8:a8:11:a0:95:5e:e0:81:51:f1:3b:12:ac:9f:54:73:67:
         e9:f5:55:97:fe:e6:74:0d:b5:61:29:5e:70:e7:32:3d:62:30:
         b7:c0:af:7b:5f:f4:35:bd:3c:54:92:f5:73:24:28:e3:af:fb:
         d2:45:6c:7a:c3:9d:76:90:3f:a1:8b:a5:74:95:d0:c6:8b:a5:
         89:93:45:ee:de:82:86:57:16:6d:b3:80:ab:b4:73:a3:45:9f:
         83:08:70:bc:dd:3e:96:ba:66:e3:0e:80:9e:2f:1f:23:fe:74:
         41:7b:fb:50:cc:bd:b8:98:38:6e:79:6b:fe:73:f0:dd:10:8c:
         c2:22:d2:de:5b:b5:a2:49:2e:ca:1a:e1:ab:eb:5d:b8:97:a9:
         ba:d3:9f:df:a0:bb:57:de:f2:ff:6f:e4:b4:8c:66:7a:cf:18:
         37:8a:58:2d:95:df:57:a2:c2:22:84:1d:03:94:a8:7b:4c:e6:
         e5:eb:29:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:47:58 2026 by rpki-client