Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/3/323630323a666531333a3263373a3a2f34382d3438203d3e203534313333.roa
File:                     323630323a666531333a3263373a3a2f34382d3438203d3e203534313333.roa (raw, json)
Hash identifier:          J38kEEQkE6nxTqujWpv/kACt9O5wa6mFdp5k5pqytiA=
Subject key identifier:   66:8B:D1:3A:CE:3C:F6:02:54:A9:2F:06:A4:6A:C1:1C:32:22:0C:7B
Certificate issuer:       /CN=9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef
Certificate serial:       695013E023873C30105395C72C3C12141831C2DD
Authority key identifier: A0:DF:8E:B2:8D:12:F9:CD:F7:A6:8B:3D:C7:A5:65:76:74:8B:2E:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/323630323a666531333a3263373a3a2f34382d3438203d3e203534313333.roa
Signing time:             Thu 09 Apr 2026 04:22:38 +0000
ROA not before:           Thu 09 Apr 2026 04:17:38 +0000
ROA not after:            Thu 08 Apr 2027 04:22:38 +0000
asID:                     54133
IP address blocks:        2602:fe13:2c7::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/A0DF8EB28D12F9CDF7A68B3DC7A56576748B2E54.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/A0DF8EB28D12F9CDF7A68B3DC7A56576748B2E54.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/8bb7e416-db1b-4221-a6c0-947074a20f8f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/8bb7e416-db1b-4221-a6c0-947074a20f8f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 05:19:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:50:13:e0:23:87:3c:30:10:53:95:c7:2c:3c:12:14:18:31:c2:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef
        Validity
            Not Before: Apr  9 04:17:38 2026 GMT
            Not After : Apr  8 04:22:38 2027 GMT
        Subject: CN=668BD13ACE3CF60254A92F06A46AC11C32220C7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:42:d4:c0:38:3b:61:8a:c9:ac:7c:28:3f:38:
                    55:22:05:ba:c6:36:51:69:5f:ed:89:08:12:29:83:
                    6f:fe:80:c2:14:e4:82:15:d8:43:ab:44:5f:5b:d9:
                    fe:98:6b:ab:db:a0:8b:0d:e8:7e:4d:2f:72:37:4e:
                    ef:06:29:65:13:47:4c:97:87:1d:00:d8:22:49:41:
                    f9:0e:ea:42:62:6f:31:d0:48:a2:02:93:25:31:44:
                    77:28:2c:59:d7:15:31:88:5e:26:81:fe:dc:91:a6:
                    a7:57:d5:e4:64:9f:4f:b5:e4:3f:3d:aa:51:d9:cf:
                    af:c9:86:2e:d9:7a:45:03:ed:2b:be:65:5d:41:76:
                    10:95:24:a6:4e:6f:12:46:a1:1d:39:32:79:eb:02:
                    4f:e7:09:49:2f:4e:50:a6:fb:98:05:62:07:46:40:
                    75:8b:f9:b6:6c:22:dd:d2:ee:d6:6a:5b:a3:7f:a7:
                    e2:93:59:bf:d4:93:32:27:0a:58:0f:62:8b:dc:70:
                    6b:00:c0:c5:6e:9d:a8:27:52:c9:12:7a:75:b5:9d:
                    0d:56:fe:cc:e0:db:df:cc:60:2b:5a:a0:52:13:fb:
                    84:be:be:77:7b:df:4d:11:d6:0a:7f:eb:3f:be:8d:
                    c5:2f:86:c8:88:f5:00:8f:6d:fd:d5:82:52:09:8e:
                    c2:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:8B:D1:3A:CE:3C:F6:02:54:A9:2F:06:A4:6A:C1:1C:32:22:0C:7B
            X509v3 Authority Key Identifier:
                keyid:A0:DF:8E:B2:8D:12:F9:CD:F7:A6:8B:3D:C7:A5:65:76:74:8B:2E:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/A0DF8EB28D12F9CDF7A68B3DC7A56576748B2E54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/323630323a666531333a3263373a3a2f34382d3438203d3e203534313333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fe13:2c7::/48

    Signature Algorithm: sha256WithRSAEncryption
         28:31:b8:fb:5a:c3:f4:81:90:fc:16:21:86:6b:e3:88:a5:84:
         9a:38:27:96:ce:43:31:12:d7:9b:da:ea:15:b1:cd:10:30:0c:
         77:4a:98:e5:57:4f:58:29:5c:c6:7f:d3:2f:9a:d8:f9:89:da:
         0a:e4:b3:39:e4:5a:b4:86:52:de:5e:d6:e7:25:ee:83:5e:48:
         78:b2:74:23:2d:bd:ad:bb:f7:61:2c:3d:ae:d9:0e:0f:c4:a6:
         66:1b:14:c8:4a:ea:44:b3:7d:23:53:86:ed:f6:0a:9f:6e:26:
         6e:1e:82:c0:04:6e:98:30:4b:34:7f:14:1e:59:7c:b3:c4:48:
         a5:27:79:92:5d:ea:86:1a:a2:19:05:3a:2c:9d:d8:e2:ea:bb:
         ac:44:79:f0:1d:91:2b:cf:db:30:56:97:d9:6b:f3:1e:97:00:
         93:cb:e9:3e:c9:eb:6c:f3:88:52:ee:5b:e8:18:28:76:ee:f4:
         40:e0:b8:bb:4c:8a:b5:03:d6:7c:08:84:00:4b:1f:d6:c9:4a:
         c2:31:91:a4:ab:a5:41:7d:43:cd:1c:9f:43:35:f1:c5:c0:5b:
         59:6a:fc:ba:c3:58:01:1e:fc:52:95:8a:e6:d3:57:91:b3:83:
         11:9b:f9:6e:dd:f8:46:af:0d:37:13:28:6e:17:9f:88:c4:47:
         cc:86:fc:dc
-----BEGIN CERTIFICATE-----
MIIFkTCCBHmgAwIBAgIUaVAT4COHPDAQU5XHLDwSFBgxwt0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOWFiMjhmYmM4YzA4NGQzNmNkMjZkMzA4YjE2NzAyZTU5
ZTAxZmNiYTY4MWJmZWM5ZWYwHhcNMjYwNDA5MDQxNzM4WhcNMjcwNDA4MDQyMjM4
WjAzMTEwLwYDVQQDEyg2NjhCRDEzQUNFM0NGNjAyNTRBOTJGMDZBNDZBQzExQzMy
MjIwQzdCMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuULUwDg7YYrJ
rHwoPzhVIgW6xjZRaV/tiQgSKYNv/oDCFOSCFdhDq0RfW9n+mGur26CLDeh+TS9y
N07vBillE0dMl4cdANgiSUH5DupCYm8x0EiiApMlMUR3KCxZ1xUxiF4mgf7ckaan
V9XkZJ9PteQ/PapR2c+vyYYu2XpFA+0rvmVdQXYQlSSmTm8SRqEdOTJ56wJP5wlJ
L05QpvuYBWIHRkB1i/m2bCLd0u7Walujf6fik1m/1JMyJwpYD2KL3HBrAMDFbp2o
J1LJEnp1tZ0NVv7M4NvfzGArWqBSE/uEvr53e99NEdYKf+s/vo3FL4bIiPUAj239
1YJSCY7CrwIDAQABo4ICkTCCAo0wHQYDVR0OBBYEFGaL0TrOPPYCVKkvBqRqwRwy
Igx7MB8GA1UdIwQYMBaAFKDfjrKNEvnN96aLPcelZXZ0iy5UMA4GA1UdDwEB/wQE
AwIHgDBxBgNVHR8EajBoMGagZKBihmByc3luYzovL3Jwa2kuYWRtaW4uZnJlZXJh
bmdlY2xvdWQuY29tL3JlcG8vRlJDLUNBLzMvQTBERjhFQjI4RDEyRjlDREY3QTY4
QjNEQzdBNTY1NzY3NDhCMkU1NC5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZm
ZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzhiYjdlNDE2LWRiMWIt
NDIyMS1hNmMwLTk0NzA3NGEyMGY4Zi85YWIyOGZiYzhjMDg0ZDM2Y2QyNmQzMDhi
MTY3MDJlNTllMDFmY2JhNjgxYmZlYzllZi5jZXIwgZMGCCsGAQUFBwELBIGGMIGD
MIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLmFkbWluLmZyZWVyYW5nZWNsb3Vk
LmNvbS9yZXBvL0ZSQy1DQS8zLzMyMzYzMDMyM2E2NjY1MzEzMzNhMzI2MzM3M2Ez
YTJmMzQzODJkMzQzODIwM2QzZTIwMzUzNDMxMzMzMy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACYC/hMC
xzANBgkqhkiG9w0BAQsFAAOCAQEAKDG4+1rD9IGQ/BYhhmvjiKWEmjgnls5DMRLX
m9rqFbHNEDAMd0qY5VdPWClcxn/TL5rY+YnaCuSzOeRatIZS3l7W5yXug15IeLJ0
Iy29rbv3YSw9rtkOD8SmZhsUyErqRLN9I1OG7fYKn24mbh6CwARumDBLNH8UHll8
s8RIpSd5kl3qhhqiGQU6LJ3Y4uq7rER58B2RK8/bMFaX2WvzHpcAk8vpPsnrbPOI
Uu5b6Bgodu70QOC4u0yKtQPWfAiEAEsf1slKwjGRpKulQX1DzRyfQzXxxcBbWWr8
usNYAR78UpWK5tNXkbODEZv5bt34Rq8NNxMobhefiMRHzIb83A==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:42:19 2026 by rpki-client