Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/3/323630323a666531333a3830353a3a2f34382d3438203d3e203533333536.roa
File:                     323630323a666531333a3830353a3a2f34382d3438203d3e203533333536.roa (raw, json)
Hash identifier:          xCJyzawYL9uWD409X+T0bygKbK+Bi6ZuTekSvAtgd2w=
Subject key identifier:   3D:21:8B:D3:9F:CE:FB:60:A9:C3:AA:3F:1F:67:08:08:1B:D5:E7:E6
Certificate issuer:       /CN=9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef
Certificate serial:       3F921553C6DE856E41CCFF98C3608B734937D92E
Authority key identifier: A0:DF:8E:B2:8D:12:F9:CD:F7:A6:8B:3D:C7:A5:65:76:74:8B:2E:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/323630323a666531333a3830353a3a2f34382d3438203d3e203533333536.roa
Signing time:             Fri 25 Apr 2025 15:53:09 +0000
ROA not before:           Fri 25 Apr 2025 15:48:09 +0000
ROA not after:            Fri 24 Apr 2026 15:53:09 +0000
asID:                     53356
IP address blocks:        2602:fe13:805::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/A0DF8EB28D12F9CDF7A68B3DC7A56576748B2E54.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/A0DF8EB28D12F9CDF7A68B3DC7A56576748B2E54.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/8bb7e416-db1b-4221-a6c0-947074a20f8f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/8bb7e416-db1b-4221-a6c0-947074a20f8f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 10:22:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:92:15:53:c6:de:85:6e:41:cc:ff:98:c3:60:8b:73:49:37:d9:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef
        Validity
            Not Before: Apr 25 15:48:09 2025 GMT
            Not After : Apr 24 15:53:09 2026 GMT
        Subject: CN=3D218BD39FCEFB60A9C3AA3F1F6708081BD5E7E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:42:32:e5:17:51:e5:45:78:9d:94:30:aa:1f:
                    96:c3:26:5d:01:87:7d:8c:25:23:3f:82:4d:1b:1b:
                    00:76:cf:d7:15:dc:59:0b:d8:8b:7b:28:15:04:09:
                    c0:4f:50:9b:95:16:35:b0:73:48:c9:9d:be:df:0f:
                    53:9b:57:3b:28:58:ac:53:3f:69:57:51:26:c1:73:
                    49:da:50:e7:3a:f2:19:e8:6f:c0:db:58:f3:d1:01:
                    4c:7e:49:9d:f9:92:b8:36:cc:71:b2:52:4c:71:46:
                    0f:b6:38:af:68:f7:3e:a7:c3:cc:e6:49:48:f5:07:
                    eb:79:61:c8:91:5b:35:49:8c:3b:92:2e:c7:2c:be:
                    4b:45:43:ec:c7:70:1a:fc:e5:b6:a3:6b:14:40:a6:
                    d4:60:2e:f7:28:01:5e:dd:c1:66:a5:f5:e2:c5:37:
                    e1:2b:59:a8:a2:57:1d:2c:82:f4:28:18:95:45:04:
                    72:94:84:78:f8:09:aa:ec:3f:8b:b9:5b:bf:98:b4:
                    fb:9e:1e:77:44:87:19:a8:8f:a6:c2:02:80:77:e2:
                    4a:d6:3e:cd:9f:36:e8:aa:b7:5b:07:05:31:b4:81:
                    98:5a:9d:b1:9c:f3:ac:9e:ed:43:67:4c:ae:45:57:
                    22:14:fb:a7:62:58:cc:56:ee:95:60:b0:f0:cc:94:
                    23:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:21:8B:D3:9F:CE:FB:60:A9:C3:AA:3F:1F:67:08:08:1B:D5:E7:E6
            X509v3 Authority Key Identifier:
                keyid:A0:DF:8E:B2:8D:12:F9:CD:F7:A6:8B:3D:C7:A5:65:76:74:8B:2E:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/A0DF8EB28D12F9CDF7A68B3DC7A56576748B2E54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/323630323a666531333a3830353a3a2f34382d3438203d3e203533333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fe13:805::/48

    Signature Algorithm: sha256WithRSAEncryption
         51:49:4b:fd:38:db:d3:a9:45:42:40:ec:7b:4d:e7:bf:48:dc:
         c1:42:68:11:38:c4:27:ce:c5:52:4e:59:5e:08:88:b3:2e:75:
         48:a0:75:c2:cc:3d:fe:16:73:90:58:32:9e:9d:98:12:11:e4:
         36:6f:b3:4d:e5:59:bb:f8:33:8d:41:93:55:3c:ae:d7:00:94:
         ab:79:69:f7:6e:ab:bd:1c:f1:eb:b6:42:e3:b5:e6:38:a0:66:
         bd:79:8c:5e:c2:db:55:9d:6c:64:28:07:11:57:47:7e:00:2f:
         5c:44:75:f7:bd:11:ca:b9:0b:8b:23:1e:f5:20:36:f3:78:ef:
         c9:e5:6b:05:14:00:d4:df:50:5e:6d:bc:a4:62:f7:2d:12:bc:
         e0:25:f8:43:b5:a7:b4:3c:9e:6e:8f:84:6c:9d:8e:1f:e4:78:
         a5:f3:24:62:10:0c:ed:6f:6c:02:f0:6b:91:1e:ea:f2:61:76:
         6b:2e:1f:31:cb:d4:74:c2:d6:28:40:d1:91:2a:13:91:82:82:
         bb:be:e4:60:07:10:20:98:7e:fb:17:ee:1b:23:53:85:c5:da:
         6f:f6:25:3e:bb:b1:c1:0a:68:d3:60:1c:8d:ea:bd:f1:4a:6a:
         bb:7e:c3:d3:71:36:2f:59:e5:31:2a:2d:7e:ed:84:57:58:85:
         f3:62:c4:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:56:04 2025 by rpki-client