Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/3/323630323a666531333a3266303a3a2f34342d3438203d3e203534313333.roa
File:                     323630323a666531333a3266303a3a2f34342d3438203d3e203534313333.roa (raw, json)
Hash identifier:          gVgZOKLHiqDWmDK0omfGCNX+47TcE2klf6fkkS6vz/M=
Subject key identifier:   EE:50:52:7A:AC:CF:CF:38:CD:E9:65:97:1E:A2:77:9C:48:75:D8:8F
Certificate issuer:       /CN=9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef
Certificate serial:       5855C5C75795085C166A70BB9EAE696FE5E60FAF
Authority key identifier: A0:DF:8E:B2:8D:12:F9:CD:F7:A6:8B:3D:C7:A5:65:76:74:8B:2E:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/323630323a666531333a3266303a3a2f34342d3438203d3e203534313333.roa
Signing time:             Wed 22 Jul 2026 03:29:54 +0000
ROA not before:           Wed 22 Jul 2026 03:24:54 +0000
ROA not after:            Wed 21 Jul 2027 03:29:54 +0000
asID:                     54133
IP address blocks:        2602:fe13:2f0::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/A0DF8EB28D12F9CDF7A68B3DC7A56576748B2E54.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/A0DF8EB28D12F9CDF7A68B3DC7A56576748B2E54.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/8bb7e416-db1b-4221-a6c0-947074a20f8f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/8bb7e416-db1b-4221-a6c0-947074a20f8f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:55:c5:c7:57:95:08:5c:16:6a:70:bb:9e:ae:69:6f:e5:e6:0f:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef
        Validity
            Not Before: Jul 22 03:24:54 2026 GMT
            Not After : Jul 21 03:29:54 2027 GMT
        Subject: CN=EE50527AACCFCF38CDE965971EA2779C4875D88F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:dd:a6:e1:fe:57:1e:b3:12:80:5c:a0:51:ba:
                    72:70:fd:4f:6c:fd:59:b3:74:e7:bf:a7:a4:5c:82:
                    e1:06:b7:e4:e6:a2:7a:17:28:0b:cb:73:fa:12:ce:
                    09:4a:6b:92:6f:55:c1:69:7e:8c:0e:8d:0b:12:24:
                    bd:8a:26:d0:4f:f2:f5:af:cb:32:98:9b:b4:28:72:
                    f2:7d:67:94:af:78:47:72:28:d6:bc:10:04:eb:29:
                    60:33:21:f1:a4:61:63:46:23:8a:49:f0:f6:94:57:
                    ab:60:62:06:a3:5a:4d:28:34:db:5c:72:61:8f:57:
                    b2:df:be:0e:ed:9d:45:4b:a9:e0:b0:0e:0b:a7:1f:
                    83:df:42:a2:48:94:29:8e:99:90:3c:58:6a:06:8f:
                    0c:6e:f9:88:70:2a:bc:77:05:fb:67:75:8a:f2:5c:
                    08:ac:9f:12:5b:4d:13:21:08:e8:8e:04:28:19:55:
                    ac:67:4e:95:d0:cb:f9:f9:ff:7a:ae:fc:60:bb:26:
                    17:60:64:7f:dc:1f:9a:ad:27:92:46:1d:a1:2d:80:
                    41:7b:19:8f:f1:40:36:e1:1d:b3:8e:42:99:f9:b6:
                    59:ef:a9:cd:a8:3c:a7:c5:a7:c9:e4:ff:70:2e:08:
                    2d:28:eb:91:45:3e:51:a5:71:f4:5e:0c:2a:b8:f3:
                    e9:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:50:52:7A:AC:CF:CF:38:CD:E9:65:97:1E:A2:77:9C:48:75:D8:8F
            X509v3 Authority Key Identifier:
                keyid:A0:DF:8E:B2:8D:12:F9:CD:F7:A6:8B:3D:C7:A5:65:76:74:8B:2E:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/A0DF8EB28D12F9CDF7A68B3DC7A56576748B2E54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/323630323a666531333a3266303a3a2f34342d3438203d3e203534313333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fe13:2f0::/44

    Signature Algorithm: sha256WithRSAEncryption
         3c:06:d7:8a:5f:31:b4:f4:05:94:f6:a7:96:18:64:60:6e:b2:
         bb:de:25:a9:c8:3a:96:34:93:32:b8:bd:a2:c2:62:23:97:43:
         89:46:ba:81:0c:82:80:20:b5:fd:ef:48:7e:92:a1:8f:13:f6:
         99:03:92:e7:70:b5:52:59:18:6f:d6:c0:ef:0c:99:5c:84:74:
         47:0a:b8:c5:64:02:f9:40:dd:c6:e7:8d:61:10:28:2d:de:5c:
         00:c5:b3:af:c0:0d:85:d2:87:d2:d7:da:4b:54:9e:15:de:a5:
         93:33:c9:91:32:c5:77:d2:6e:a9:8d:ff:7d:2f:83:e1:33:5e:
         94:28:7f:c2:da:50:c9:e2:a7:1d:f9:5f:18:c4:f3:8d:11:44:
         fa:8b:c5:f2:44:ee:aa:ab:6b:3c:b5:5f:4a:28:db:f5:54:09:
         bd:72:16:07:40:0c:88:f2:3f:ed:24:8b:7d:30:93:50:c0:40:
         a8:13:02:32:8b:29:6a:b2:da:9d:2f:ce:c8:66:a8:c2:49:3f:
         01:8c:26:5f:cf:4c:d8:d8:bf:e6:9a:fe:e9:fe:6b:3a:b4:cb:
         79:bc:62:2a:c4:5b:2b:a1:8b:df:c0:5e:d3:59:56:6c:99:68:
         12:6e:f2:34:b8:6a:26:7f:34:24:be:49:35:55:62:6a:0d:de:
         46:5e:f0:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:16:26 2026 by rpki-client