Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/3/323630323a666531333a3265303a3a2f34342d3434203d3e203236303432.roa
File:                     323630323a666531333a3265303a3a2f34342d3434203d3e203236303432.roa (raw, json)
Hash identifier:          GoDAUkuiE5yFmCJas3tsPgOoWIS1MftOJV0jA5ov80M=
Subject key identifier:   28:11:FC:D2:A1:92:54:6A:E6:D0:2C:78:50:E1:7A:AF:47:13:2A:AC
Certificate issuer:       /CN=9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef
Certificate serial:       02AD2297D57E562914A2AC956477161F1DE9F75E
Authority key identifier: A0:DF:8E:B2:8D:12:F9:CD:F7:A6:8B:3D:C7:A5:65:76:74:8B:2E:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/323630323a666531333a3265303a3a2f34342d3434203d3e203236303432.roa
Signing time:             Fri 22 Aug 2025 01:42:50 +0000
ROA not before:           Fri 22 Aug 2025 01:37:50 +0000
ROA not after:            Fri 21 Aug 2026 01:42:50 +0000
asID:                     26042
IP address blocks:        2602:fe13:2e0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/A0DF8EB28D12F9CDF7A68B3DC7A56576748B2E54.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/A0DF8EB28D12F9CDF7A68B3DC7A56576748B2E54.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/8bb7e416-db1b-4221-a6c0-947074a20f8f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/8bb7e416-db1b-4221-a6c0-947074a20f8f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 20:46:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:ad:22:97:d5:7e:56:29:14:a2:ac:95:64:77:16:1f:1d:e9:f7:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef
        Validity
            Not Before: Aug 22 01:37:50 2025 GMT
            Not After : Aug 21 01:42:50 2026 GMT
        Subject: CN=2811FCD2A192546AE6D02C7850E17AAF47132AAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:41:52:ac:c7:19:25:cf:bc:3a:0d:81:52:8c:
                    78:2a:e3:90:f3:fd:de:4e:3b:2c:ca:27:96:ce:1f:
                    95:22:af:e4:a4:30:75:7e:17:29:d4:c5:04:23:1e:
                    79:68:ec:12:dc:f9:15:fa:ca:47:dc:98:37:af:b5:
                    06:02:5e:9b:d9:43:c9:c3:46:84:62:fa:94:15:89:
                    cd:5b:05:4e:cb:94:0f:6e:9d:7d:08:2c:c3:88:c9:
                    a4:c3:2f:f9:ad:4b:12:b5:ad:62:0b:b2:9f:70:8c:
                    f6:27:9f:a3:99:cc:eb:9a:b7:06:db:9d:30:1b:1a:
                    91:4e:56:0b:3f:ce:eb:8e:36:aa:ba:27:d4:80:b4:
                    20:09:ff:d7:ae:1b:d4:a8:64:67:2b:9f:82:9e:9d:
                    c4:0b:4a:e6:81:5d:66:c3:fd:92:24:79:9f:5c:42:
                    21:06:67:ef:6b:96:e2:ed:29:73:0f:eb:f2:a6:32:
                    46:5f:38:86:7f:47:1a:0c:7a:bd:f9:e9:db:46:2b:
                    73:c3:0b:4c:aa:e8:88:f8:31:b7:8c:55:01:54:d5:
                    1c:ae:23:71:0a:27:79:cc:22:bb:07:4e:d5:96:87:
                    46:f3:e5:8e:f8:ce:64:4e:40:13:c6:b8:8b:fb:b8:
                    0a:a6:c3:a1:d3:60:14:c2:00:32:27:8f:ef:16:87:
                    86:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:11:FC:D2:A1:92:54:6A:E6:D0:2C:78:50:E1:7A:AF:47:13:2A:AC
            X509v3 Authority Key Identifier:
                keyid:A0:DF:8E:B2:8D:12:F9:CD:F7:A6:8B:3D:C7:A5:65:76:74:8B:2E:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/A0DF8EB28D12F9CDF7A68B3DC7A56576748B2E54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/323630323a666531333a3265303a3a2f34342d3434203d3e203236303432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fe13:2e0::/44

    Signature Algorithm: sha256WithRSAEncryption
         32:5f:55:a6:47:78:6b:f5:be:76:92:ef:0d:d0:fc:97:89:8b:
         05:7f:20:d1:4d:c1:fc:45:ff:3d:5c:cc:ec:51:63:c0:57:aa:
         27:ed:47:6c:dd:52:d6:b7:00:4f:ad:4b:96:d2:e6:b4:03:90:
         04:09:b4:48:91:db:78:9b:d7:3b:5a:a5:e0:ff:d9:f1:1e:17:
         ce:f5:3b:05:4d:67:70:f2:8c:18:96:7b:75:1f:0c:10:c1:12:
         06:19:f6:e3:8b:e3:97:bd:ee:60:1d:f3:2b:d6:8b:49:3d:b2:
         be:b3:c6:51:d9:b4:70:15:6b:6a:b4:69:dc:3a:11:5c:ab:fc:
         65:03:01:c5:fc:9b:d3:c0:06:53:c3:ec:d7:c3:64:55:9f:a5:
         c6:f7:53:8f:ae:45:72:4e:0b:e5:6a:0d:fb:2f:04:a1:fd:b4:
         b1:8a:27:50:cd:87:83:a1:83:f4:0d:64:8d:52:21:65:5e:f0:
         ce:1b:9b:06:28:9e:39:16:cc:1b:60:5e:d1:33:48:2f:22:25:
         e4:5e:15:01:46:11:66:b5:67:70:ac:1b:fd:05:f3:c9:67:0f:
         b0:a7:c6:4b:0f:4c:23:4d:d7:39:39:28:51:b8:86:70:40:c4:
         d9:78:e3:96:69:76:6c:62:70:8e:ce:ad:b3:f6:f7:51:8c:b1:
         b9:3a:0c:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:52:01 2025 by rpki-client