Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/3/323630323a666531333a3263363a3a2f34382d3438203d3e203534313333.roa
File:                     323630323a666531333a3263363a3a2f34382d3438203d3e203534313333.roa (raw, json)
Hash identifier:          kA5PmLpvRL7S0ay2Y0iDwb1Un0ySq1wwIkxKPUsGzOk=
Subject key identifier:   9A:BF:52:9D:91:79:93:74:6D:AB:56:A4:3C:37:2A:B7:A1:92:0D:3F
Certificate issuer:       /CN=9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef
Certificate serial:       59FA93BFDB97A9A7C8EE2D6236AFBE9EE0703DF7
Authority key identifier: A0:DF:8E:B2:8D:12:F9:CD:F7:A6:8B:3D:C7:A5:65:76:74:8B:2E:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/323630323a666531333a3263363a3a2f34382d3438203d3e203534313333.roa
Signing time:             Thu 09 Apr 2026 04:22:38 +0000
ROA not before:           Thu 09 Apr 2026 04:17:38 +0000
ROA not after:            Thu 08 Apr 2027 04:22:38 +0000
asID:                     54133
IP address blocks:        2602:fe13:2c6::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/A0DF8EB28D12F9CDF7A68B3DC7A56576748B2E54.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/A0DF8EB28D12F9CDF7A68B3DC7A56576748B2E54.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/8bb7e416-db1b-4221-a6c0-947074a20f8f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/8bb7e416-db1b-4221-a6c0-947074a20f8f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 05:19:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:fa:93:bf:db:97:a9:a7:c8:ee:2d:62:36:af:be:9e:e0:70:3d:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef
        Validity
            Not Before: Apr  9 04:17:38 2026 GMT
            Not After : Apr  8 04:22:38 2027 GMT
        Subject: CN=9ABF529D917993746DAB56A43C372AB7A1920D3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:57:28:af:ab:d7:bf:0f:51:8f:f4:15:21:c9:
                    f0:8f:01:3b:85:2f:53:41:48:f5:17:ab:56:d4:4f:
                    19:5d:17:57:7c:3f:63:5c:1c:08:a3:22:de:d7:3d:
                    b8:41:13:f1:a3:fa:4d:29:90:50:d6:35:55:ca:f5:
                    81:6f:53:5a:54:06:d9:a1:19:0f:d4:dc:5e:07:58:
                    5b:08:e8:7a:b4:f1:f4:b4:61:ec:6e:fb:19:f4:00:
                    bd:44:04:35:f6:8c:ca:b2:23:13:65:e9:93:70:32:
                    1c:6f:d1:3d:ab:61:8f:19:14:7c:5a:a4:59:ba:f5:
                    f3:b3:39:85:35:4b:46:40:3f:62:9d:5d:b2:5d:6a:
                    76:41:1a:23:97:ba:6e:22:15:38:3c:6c:04:89:00:
                    8d:9b:96:84:69:b3:53:f8:5d:d0:5a:80:76:53:1d:
                    37:06:53:79:17:ae:7e:52:10:29:60:ff:c6:be:79:
                    33:9b:13:3f:15:87:cc:5d:6f:4c:a2:dc:a3:fe:8c:
                    e5:86:d0:55:f1:4e:37:a5:23:ef:37:fc:cb:38:0a:
                    9b:e5:44:10:1a:c2:7d:18:c7:da:8c:a5:d9:50:fc:
                    8b:b2:71:bd:b4:73:1b:dc:1a:b4:38:0c:78:47:cf:
                    4c:a3:1a:40:e7:8d:33:88:e0:ef:69:47:7f:6b:98:
                    60:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:BF:52:9D:91:79:93:74:6D:AB:56:A4:3C:37:2A:B7:A1:92:0D:3F
            X509v3 Authority Key Identifier:
                keyid:A0:DF:8E:B2:8D:12:F9:CD:F7:A6:8B:3D:C7:A5:65:76:74:8B:2E:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/A0DF8EB28D12F9CDF7A68B3DC7A56576748B2E54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/323630323a666531333a3263363a3a2f34382d3438203d3e203534313333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fe13:2c6::/48

    Signature Algorithm: sha256WithRSAEncryption
         0b:9d:6f:14:c8:be:cf:da:a7:ee:cd:16:86:75:fc:57:77:3e:
         98:da:63:7f:a7:cd:77:0f:20:b7:2a:fe:d5:02:bc:62:b3:c4:
         a7:7e:2a:2a:dc:ce:28:0f:cb:7a:fb:f3:1b:9b:27:90:63:08:
         f6:b8:d6:40:f2:65:b7:51:8d:85:8a:37:bc:fd:28:b1:9a:bf:
         b5:18:34:2d:cc:2d:1e:5c:b5:bc:1a:c1:4a:4f:f2:a8:7a:f1:
         9b:ce:2e:89:01:43:cd:13:1a:9d:21:a5:d5:5f:56:b0:40:8d:
         91:dc:db:7f:be:b5:c4:8e:2e:1a:fa:ef:e0:78:2a:ba:64:b4:
         99:14:dc:1b:d9:ef:97:7f:a7:93:a1:89:31:cc:54:54:47:80:
         b7:92:a6:c1:46:7b:75:54:29:56:51:b2:49:fe:89:2a:5e:09:
         da:77:5c:1f:ed:41:d2:bd:01:45:fa:b9:55:b0:91:9c:1e:54:
         c3:19:87:2b:84:47:13:0a:0c:e1:d6:f5:76:8a:a4:30:69:67:
         7f:75:ae:ee:63:a2:f3:5a:db:c1:4f:4c:90:00:18:e9:98:f6:
         56:af:5b:0d:c8:13:08:0a:9e:dd:cc:ac:ee:7c:99:80:04:b9:
         bd:19:55:06:31:ee:f7:b7:21:d0:9b:64:b8:69:7a:eb:82:74:
         0e:15:51:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:41:33 2026 by rpki-client