Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/3/323630323a666531333a6662303a3a2f34342d3438203d3e203533333536.roa
File:                     323630323a666531333a6662303a3a2f34342d3438203d3e203533333536.roa (raw, json)
Hash identifier:          fy8PJ1d5h/D7ApX/xtPO6FKiEx/rI/ivLVC8mMxPZHk=
Subject key identifier:   2B:FC:FA:52:3E:22:00:5E:54:83:6A:77:51:23:CE:A4:FE:3F:92:19
Certificate issuer:       /CN=9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef
Certificate serial:       3D6ACC9770035D3EFA4A402F7C61D66986ED5AF3
Authority key identifier: A0:DF:8E:B2:8D:12:F9:CD:F7:A6:8B:3D:C7:A5:65:76:74:8B:2E:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/323630323a666531333a6662303a3a2f34342d3438203d3e203533333536.roa
Signing time:             Fri 01 Aug 2025 22:34:09 +0000
ROA not before:           Fri 01 Aug 2025 22:29:09 +0000
ROA not after:            Fri 31 Jul 2026 22:34:09 +0000
asID:                     53356
IP address blocks:        2602:fe13:fb0::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/A0DF8EB28D12F9CDF7A68B3DC7A56576748B2E54.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/A0DF8EB28D12F9CDF7A68B3DC7A56576748B2E54.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/8bb7e416-db1b-4221-a6c0-947074a20f8f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/8bb7e416-db1b-4221-a6c0-947074a20f8f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 17:10:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:6a:cc:97:70:03:5d:3e:fa:4a:40:2f:7c:61:d6:69:86:ed:5a:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef
        Validity
            Not Before: Aug  1 22:29:09 2025 GMT
            Not After : Jul 31 22:34:09 2026 GMT
        Subject: CN=2BFCFA523E22005E54836A775123CEA4FE3F9219
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:dc:f0:d5:73:d5:7c:cb:fc:79:d7:82:3d:50:
                    e1:0c:38:0d:5d:3e:2d:78:ed:f7:6c:53:98:ad:fb:
                    89:8e:93:e9:93:92:f4:20:e6:92:32:b0:c3:1a:20:
                    f9:b7:69:aa:e9:55:2f:87:ae:30:0d:27:e6:ef:c8:
                    c6:ab:3a:4a:ac:4f:de:92:04:a0:49:e3:bd:da:f1:
                    9e:65:81:ba:5a:c3:7a:90:84:29:40:cf:54:69:69:
                    22:6f:ad:51:1e:6b:a0:6e:49:f5:b7:87:53:66:1d:
                    39:57:5e:b9:61:c9:49:9f:87:91:e3:73:ce:52:05:
                    0f:6c:8e:a7:ec:e0:f9:c5:a3:85:c3:33:55:dc:e7:
                    e1:c5:15:6d:f1:81:dd:22:09:df:80:fc:6c:da:ee:
                    91:9b:29:94:86:cf:11:b8:e3:9b:47:e3:ad:16:f9:
                    52:2a:72:f8:8d:eb:cc:6a:4f:2a:57:d1:64:56:a3:
                    a8:0e:3e:69:fd:70:9e:ae:10:e9:99:5e:eb:52:b1:
                    eb:68:41:a4:5a:78:ae:47:d7:0b:38:d6:c2:77:93:
                    2e:83:77:8b:85:43:91:80:6e:c3:75:3a:f3:6d:50:
                    4f:cc:f7:88:e2:ce:a5:ac:a3:ad:e6:ce:61:6d:63:
                    d2:ed:b0:e7:7b:74:cd:e9:f7:4d:9f:8d:c2:8b:03:
                    05:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:FC:FA:52:3E:22:00:5E:54:83:6A:77:51:23:CE:A4:FE:3F:92:19
            X509v3 Authority Key Identifier:
                keyid:A0:DF:8E:B2:8D:12:F9:CD:F7:A6:8B:3D:C7:A5:65:76:74:8B:2E:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/A0DF8EB28D12F9CDF7A68B3DC7A56576748B2E54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/323630323a666531333a6662303a3a2f34342d3438203d3e203533333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fe13:fb0::/44

    Signature Algorithm: sha256WithRSAEncryption
         74:84:8b:2c:43:2d:a1:e7:2b:2e:88:f1:f1:7b:c5:73:4f:34:
         63:2e:90:bd:84:94:16:8f:30:bc:7f:ec:02:96:c8:5e:aa:07:
         d3:b9:76:28:ba:53:31:11:2f:99:55:fd:81:35:cb:b7:d1:92:
         f4:51:c0:d0:cb:3f:c8:31:6f:57:95:de:87:cd:46:d0:ff:ad:
         c5:a5:cb:63:71:e2:82:16:54:c0:8b:e2:47:0a:2e:8d:50:da:
         46:c8:46:29:b2:e1:de:66:59:31:4e:d7:d2:b0:43:30:38:af:
         e7:35:a7:bc:a7:79:4a:46:e2:d1:11:59:5d:2d:2e:1e:58:1b:
         24:88:17:53:22:3f:a6:e7:6f:a7:77:ab:d0:f6:c3:17:07:2f:
         92:95:3a:57:c5:4d:5d:37:70:a6:b4:d6:8b:40:08:30:c1:e5:
         3b:18:b4:de:18:4c:2e:0e:97:a6:0a:2e:07:6b:6e:f2:8d:1d:
         1e:09:b5:1b:17:db:57:f9:34:1d:07:f8:66:c2:7a:e0:ab:c9:
         bc:fd:ac:7b:7c:37:8b:9f:38:72:4b:a8:d9:88:8d:a2:9c:ed:
         e3:a2:e2:e9:34:0d:6f:7c:4b:ca:4c:c2:fd:6f:87:a5:54:66:
         ce:04:07:04:d9:d6:aa:3b:0e:80:e3:e8:e9:f9:09:0a:17:90:
         13:04:1c:82
-----BEGIN CERTIFICATE-----
MIIFkTCCBHmgAwIBAgIUPWrMl3ADXT76SkAvfGHWaYbtWvMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOWFiMjhmYmM4YzA4NGQzNmNkMjZkMzA4YjE2NzAyZTU5
ZTAxZmNiYTY4MWJmZWM5ZWYwHhcNMjUwODAxMjIyOTA5WhcNMjYwNzMxMjIzNDA5
WjAzMTEwLwYDVQQDEygyQkZDRkE1MjNFMjIwMDVFNTQ4MzZBNzc1MTIzQ0VBNEZF
M0Y5MjE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArdzw1XPVfMv8
edeCPVDhDDgNXT4teO33bFOYrfuJjpPpk5L0IOaSMrDDGiD5t2mq6VUvh64wDSfm
78jGqzpKrE/ekgSgSeO92vGeZYG6WsN6kIQpQM9UaWkib61RHmugbkn1t4dTZh05
V165YclJn4eR43POUgUPbI6n7OD5xaOFwzNV3OfhxRVt8YHdIgnfgPxs2u6RmymU
hs8RuOObR+OtFvlSKnL4jevMak8qV9FkVqOoDj5p/XCerhDpmV7rUrHraEGkWniu
R9cLONbCd5Mug3eLhUORgG7DdTrzbVBPzPeI4s6lrKOt5s5hbWPS7bDne3TN6fdN
n43CiwMFMQIDAQABo4ICkTCCAo0wHQYDVR0OBBYEFCv8+lI+IgBeVINqd1EjzqT+
P5IZMB8GA1UdIwQYMBaAFKDfjrKNEvnN96aLPcelZXZ0iy5UMA4GA1UdDwEB/wQE
AwIHgDBxBgNVHR8EajBoMGagZKBihmByc3luYzovL3Jwa2kuYWRtaW4uZnJlZXJh
bmdlY2xvdWQuY29tL3JlcG8vRlJDLUNBLzMvQTBERjhFQjI4RDEyRjlDREY3QTY4
QjNEQzdBNTY1NzY3NDhCMkU1NC5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZm
ZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzhiYjdlNDE2LWRiMWIt
NDIyMS1hNmMwLTk0NzA3NGEyMGY4Zi85YWIyOGZiYzhjMDg0ZDM2Y2QyNmQzMDhi
MTY3MDJlNTllMDFmY2JhNjgxYmZlYzllZi5jZXIwgZMGCCsGAQUFBwELBIGGMIGD
MIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLmFkbWluLmZyZWVyYW5nZWNsb3Vk
LmNvbS9yZXBvL0ZSQy1DQS8zLzMyMzYzMDMyM2E2NjY1MzEzMzNhNjY2MjMwM2Ez
YTJmMzQzNDJkMzQzODIwM2QzZTIwMzUzMzMzMzUzNi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCYC/hMP
sDANBgkqhkiG9w0BAQsFAAOCAQEAdISLLEMtoecrLojx8XvFc080Yy6QvYSUFo8w
vH/sApbIXqoH07l2KLpTMREvmVX9gTXLt9GS9FHA0Ms/yDFvV5Xeh81G0P+txaXL
Y3HighZUwIviRwoujVDaRshGKbLh3mZZMU7X0rBDMDiv5zWnvKd5Skbi0RFZXS0u
HlgbJIgXUyI/pudvp3er0PbDFwcvkpU6V8VNXTdwprTWi0AIMMHlOxi03hhMLg6X
pgouB2tu8o0dHgm1GxfbV/k0HQf4ZsJ64KvJvP2se3w3i584ckuo2YiNopzt46Li
6TQNb3xLykzC/W+HpVRmzgQHBNnWqjsOgOPo6fkJCheQEwQcgg==
-----END CERTIFICATE-----
Generated at Mon Aug 4 19:10:30 2025 by rpki-client