Route Origin Authorization

$ rpki-client -vvvf rpki.admin.freerangecloud.com/repo/FRC-CA/3/323630323a666531333a6666303a3a2f34342d3435203d3e203533333536.roa
File:                     323630323a666531333a6666303a3a2f34342d3435203d3e203533333536.roa (raw, json)
Hash identifier:          +hoBfizcEMjY/+jZwKLuYBfUm389qdegXub/uN0hryU=
Subject key identifier:   D1:18:76:00:18:35:3D:43:75:23:B5:B7:A1:2E:05:8A:47:B7:B3:34
Certificate issuer:       /CN=9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef
Certificate serial:       488E3C5F47EF4766DA2629B732104F969CB8C247
Authority key identifier: A0:DF:8E:B2:8D:12:F9:CD:F7:A6:8B:3D:C7:A5:65:76:74:8B:2E:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/323630323a666531333a6666303a3a2f34342d3435203d3e203533333536.roa
Signing time:             Mon 07 Sep 2026 01:31:22 +0000
ROA not before:           Mon 07 Sep 2026 01:26:22 +0000
ROA not after:            Mon 06 Sep 2027 01:31:22 +0000
asID:                     53356
IP address blocks:        2602:fe13:ff0::/44 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/A0DF8EB28D12F9CDF7A68B3DC7A56576748B2E54.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/A0DF8EB28D12F9CDF7A68B3DC7A56576748B2E54.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/8bb7e416-db1b-4221-a6c0-947074a20f8f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/8bb7e416-db1b-4221-a6c0-947074a20f8f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:8e:3c:5f:47:ef:47:66:da:26:29:b7:32:10:4f:96:9c:b8:c2:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef
        Validity
            Not Before: Sep  7 01:26:22 2026 GMT
            Not After : Sep  6 01:31:22 2027 GMT
        Subject: CN=D118760018353D437523B5B7A12E058A47B7B334
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:22:60:d3:9c:fa:1c:d8:b9:3c:e8:3a:2a:3e:
                    b1:ee:04:9f:10:c6:ed:62:b2:f0:7d:d2:3d:06:0b:
                    54:cf:73:a4:81:cb:1f:76:e9:81:1f:ba:3e:8b:68:
                    18:db:a9:e9:93:0f:6e:52:7c:78:a5:ec:6b:8d:eb:
                    d9:e9:6a:07:fd:6a:23:b9:56:93:04:71:22:c7:10:
                    df:d0:82:1a:c4:f9:ba:f9:ac:3e:8a:7b:51:5d:f3:
                    25:97:0c:13:cd:9f:8d:74:c8:69:c8:47:cb:3b:2a:
                    ed:01:64:4e:d4:65:52:bd:49:a4:72:0d:b1:31:c3:
                    c2:3e:7e:08:9f:5f:27:3e:ed:08:16:5e:18:d3:d8:
                    c1:f2:0f:a7:4b:70:02:71:19:df:80:28:9c:57:bb:
                    b0:1d:68:aa:ef:6d:ac:1b:87:81:7e:0f:e6:c6:a5:
                    d1:b6:14:51:92:5d:7e:85:0c:17:bb:23:fc:39:93:
                    9e:7d:35:1d:3f:93:87:dc:e0:e1:6c:17:62:c3:04:
                    62:d9:25:1a:45:36:4a:d8:6e:c2:06:62:a7:d8:2b:
                    5e:47:eb:80:ec:66:fe:a4:75:6a:26:e1:b4:62:23:
                    2c:2c:26:88:60:b6:0a:bb:4d:03:d9:1f:c2:49:23:
                    39:22:71:b9:09:6c:7c:08:3f:fd:b4:6d:81:60:e6:
                    7d:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:18:76:00:18:35:3D:43:75:23:B5:B7:A1:2E:05:8A:47:B7:B3:34
            X509v3 Authority Key Identifier:
                keyid:A0:DF:8E:B2:8D:12:F9:CD:F7:A6:8B:3D:C7:A5:65:76:74:8B:2E:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/A0DF8EB28D12F9CDF7A68B3DC7A56576748B2E54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/323630323a666531333a6666303a3a2f34342d3435203d3e203533333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fe13:ff0::/44

    Signature Algorithm: sha256WithRSAEncryption
         86:de:5c:c2:94:47:9e:da:8c:e8:bd:84:f2:75:5e:f8:b0:49:
         ff:37:34:27:e7:f3:93:0e:57:96:c3:6d:31:9f:c5:a3:ca:37:
         b2:4a:2e:0f:5c:7c:ee:18:f0:51:3b:b6:36:e3:8a:3f:78:49:
         71:06:60:22:c8:8a:3c:88:d6:3d:98:6b:95:bd:53:1a:d1:57:
         4b:95:46:4d:da:75:e4:5c:42:ff:11:40:9f:18:f9:7e:d8:bd:
         c1:bf:a6:48:15:bd:22:ac:ca:53:c2:63:71:dd:3d:d4:d4:63:
         36:b9:e8:18:d8:fe:e2:5e:c4:45:05:8c:2d:55:bd:bd:1a:82:
         fe:ed:f0:35:9f:25:a6:9d:bb:f6:f9:58:fc:21:12:1b:5d:bb:
         95:16:42:4d:28:53:54:81:29:62:71:23:21:00:1d:fb:9b:61:
         28:1f:92:6f:b4:07:43:ff:07:16:3d:f4:30:ff:7e:8c:72:e0:
         60:17:ff:e9:da:84:0a:a0:f5:fd:4f:73:d1:e2:4a:b0:2f:79:
         20:82:72:ef:ae:d8:53:f8:f0:f2:27:ad:95:b5:aa:cc:f9:bb:
         db:07:a1:25:dc:97:b7:50:35:da:a0:b5:40:65:2c:0f:37:a3:
         3e:86:9d:50:85:a6:97:a2:80:a5:47:0e:c1:b8:a8:f2:d7:b5:
         df:ed:cd:4c
-----BEGIN CERTIFICATE-----
MIIFkTCCBHmgAwIBAgIUSI48X0fvR2baJim3MhBPlpy4wkcwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOWFiMjhmYmM4YzA4NGQzNmNkMjZkMzA4YjE2NzAyZTU5
ZTAxZmNiYTY4MWJmZWM5ZWYwHhcNMjYwOTA3MDEyNjIyWhcNMjcwOTA2MDEzMTIy
WjAzMTEwLwYDVQQDEyhEMTE4NzYwMDE4MzUzRDQzNzUyM0I1QjdBMTJFMDU4QTQ3
QjdCMzM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSJg05z6HNi5
POg6Kj6x7gSfEMbtYrLwfdI9BgtUz3OkgcsfdumBH7o+i2gY26npkw9uUnx4pexr
jevZ6WoH/WojuVaTBHEixxDf0IIaxPm6+aw+intRXfMllwwTzZ+NdMhpyEfLOyrt
AWRO1GVSvUmkcg2xMcPCPn4In18nPu0IFl4Y09jB8g+nS3ACcRnfgCicV7uwHWiq
722sG4eBfg/mxqXRthRRkl1+hQwXuyP8OZOefTUdP5OH3ODhbBdiwwRi2SUaRTZK
2G7CBmKn2CteR+uA7Gb+pHVqJuG0YiMsLCaIYLYKu00D2R/CSSM5InG5CWx8CD/9
tG2BYOZ9lwIDAQABo4ICkTCCAo0wHQYDVR0OBBYEFNEYdgAYNT1DdSO1t6EuBYpH
t7M0MB8GA1UdIwQYMBaAFKDfjrKNEvnN96aLPcelZXZ0iy5UMA4GA1UdDwEB/wQE
AwIHgDBxBgNVHR8EajBoMGagZKBihmByc3luYzovL3Jwa2kuYWRtaW4uZnJlZXJh
bmdlY2xvdWQuY29tL3JlcG8vRlJDLUNBLzMvQTBERjhFQjI4RDEyRjlDREY3QTY4
QjNEQzdBNTY1NzY3NDhCMkU1NC5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZm
ZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzhiYjdlNDE2LWRiMWIt
NDIyMS1hNmMwLTk0NzA3NGEyMGY4Zi85YWIyOGZiYzhjMDg0ZDM2Y2QyNmQzMDhi
MTY3MDJlNTllMDFmY2JhNjgxYmZlYzllZi5jZXIwgZMGCCsGAQUFBwELBIGGMIGD
MIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLmFkbWluLmZyZWVyYW5nZWNsb3Vk
LmNvbS9yZXBvL0ZSQy1DQS8zLzMyMzYzMDMyM2E2NjY1MzEzMzNhNjY2NjMwM2Ez
YTJmMzQzNDJkMzQzNTIwM2QzZTIwMzUzMzMzMzUzNi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCYC/hMP
8DANBgkqhkiG9w0BAQsFAAOCAQEAht5cwpRHntqM6L2E8nVe+LBJ/zc0J+fzkw5X
lsNtMZ/Fo8o3skouD1x87hjwUTu2NuOKP3hJcQZgIsiKPIjWPZhrlb1TGtFXS5VG
Tdp15FxC/xFAnxj5fti9wb+mSBW9IqzKU8Jjcd091NRjNrnoGNj+4l7ERQWMLVW9
vRqC/u3wNZ8lpp279vlY/CESG127lRZCTShTVIEpYnEjIQAd+5thKB+Sb7QHQ/8H
Fj30MP9+jHLgYBf/6dqECqD1/U9z0eJKsC95IIJy767YU/jw8ietlbWqzPm72weh
JdyXt1A12qC1QGUsDzejPoadUIWml6KApUcOwbio8te13+3NTA==
-----END CERTIFICATE-----
Generated at Sun Sep 20 16:21:04 2026 by rpki-client