Route Origin Authorization

$ rpki-client -vvvf rpki.admin.freerangecloud.com/repo/FRC-CA/3/323630323a666531333a3330303a3a2f34302d3430203d3e203533333536.roa
File:                     323630323a666531333a3330303a3a2f34302d3430203d3e203533333536.roa (raw, json)
Hash identifier:          r7HGEh/pkapC12uIn5vjPcDMK93DtbMMiAf6BCyph8g=
Subject key identifier:   97:D7:17:36:19:37:C6:C9:21:A9:16:D8:CB:E1:B4:89:25:94:1E:17
Certificate issuer:       /CN=9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef
Certificate serial:       42E49E9B84DA798E33DDB1986BAEA6EB62384DBC
Authority key identifier: A0:DF:8E:B2:8D:12:F9:CD:F7:A6:8B:3D:C7:A5:65:76:74:8B:2E:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/323630323a666531333a3330303a3a2f34302d3430203d3e203533333536.roa
Signing time:             Sun 20 Sep 2026 18:31:36 +0000
ROA not before:           Sun 20 Sep 2026 18:26:36 +0000
ROA not after:            Sun 19 Sep 2027 18:31:36 +0000
asID:                     53356
IP address blocks:        2602:fe13:300::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/A0DF8EB28D12F9CDF7A68B3DC7A56576748B2E54.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/A0DF8EB28D12F9CDF7A68B3DC7A56576748B2E54.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/8bb7e416-db1b-4221-a6c0-947074a20f8f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/8bb7e416-db1b-4221-a6c0-947074a20f8f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:e4:9e:9b:84:da:79:8e:33:dd:b1:98:6b:ae:a6:eb:62:38:4d:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef
        Validity
            Not Before: Sep 20 18:26:36 2026 GMT
            Not After : Sep 19 18:31:36 2027 GMT
        Subject: CN=97D717361937C6C921A916D8CBE1B48925941E17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:b0:3b:0d:77:11:9e:8c:ce:94:ab:a0:b1:10:
                    02:b9:83:92:1d:10:d9:0b:ed:c0:e3:6f:ef:7f:2e:
                    49:50:99:70:5f:9d:69:be:61:aa:98:22:07:25:02:
                    76:06:be:3e:6f:bf:0b:8d:a1:30:7e:20:88:da:48:
                    06:2e:4c:33:81:10:7c:8c:78:b0:df:aa:79:48:7f:
                    ae:52:88:f1:4f:e7:51:a7:2c:ae:9c:b2:ee:38:d6:
                    95:24:96:5c:37:27:9b:a4:34:e0:e9:62:de:13:74:
                    c8:3c:25:2e:de:6f:95:b7:9c:51:ea:ff:a9:46:1f:
                    18:9e:16:a2:db:f2:0d:c2:a7:7e:bd:10:96:90:f3:
                    fb:ee:46:46:da:d0:21:e0:f5:01:7f:3f:a3:b8:39:
                    5a:8d:22:1e:0b:55:ac:db:ae:41:9a:05:bd:87:27:
                    ea:9d:7d:92:d1:e4:34:e6:72:07:7b:c1:28:c6:96:
                    74:3f:c6:6d:73:78:de:97:d0:90:e9:da:77:ca:d7:
                    5a:83:ab:1b:9d:d0:0e:28:7f:a7:e5:a2:cb:e6:65:
                    01:66:95:dd:fb:ef:4b:df:47:b2:b9:61:93:ad:68:
                    42:43:9f:f7:2b:cd:92:f1:7c:8b:b5:59:a8:3e:20:
                    35:42:fb:01:1d:f7:b9:50:4a:65:a6:04:c0:1d:c1:
                    83:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:D7:17:36:19:37:C6:C9:21:A9:16:D8:CB:E1:B4:89:25:94:1E:17
            X509v3 Authority Key Identifier:
                keyid:A0:DF:8E:B2:8D:12:F9:CD:F7:A6:8B:3D:C7:A5:65:76:74:8B:2E:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/A0DF8EB28D12F9CDF7A68B3DC7A56576748B2E54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/323630323a666531333a3330303a3a2f34302d3430203d3e203533333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fe13:300::/40

    Signature Algorithm: sha256WithRSAEncryption
         7e:49:10:4e:36:2f:b6:d6:71:d7:dc:a5:6c:43:5b:b2:32:d1:
         85:21:a7:1e:59:21:04:dd:a1:2c:b4:25:5f:4f:0c:b8:86:26:
         ae:a1:34:50:55:2e:90:4a:1d:c9:25:82:5a:df:6f:05:17:fd:
         d2:79:c4:32:a9:d2:15:89:2f:fd:45:7d:2b:d6:ac:50:e7:dc:
         94:b6:fa:2c:1f:ad:ea:3a:5e:61:ca:be:24:36:cb:ad:9b:98:
         23:b6:f0:5f:a6:5c:93:74:0d:14:8b:72:e2:a8:49:5f:71:71:
         d0:7c:67:13:e4:88:f9:37:d5:0d:ab:e3:55:9c:88:c0:36:2f:
         57:9d:f2:5f:10:3d:87:43:e7:3e:f4:77:a4:26:6b:7f:ec:d0:
         c0:10:9f:27:e6:40:48:44:73:63:a3:d0:d9:4a:17:21:3b:ef:
         46:f8:d7:8e:77:29:ca:2f:03:c0:ca:b2:2e:42:be:8a:61:62:
         c9:c7:54:d7:2b:5d:78:ff:e9:8b:f9:b1:fa:73:78:50:a7:f6:
         25:8e:47:44:ec:fe:70:9a:2f:11:f4:43:85:f7:b0:4f:f5:0b:
         54:45:48:1f:68:50:22:b7:bc:b7:ff:a0:62:5f:b1:ae:38:39:
         5c:67:c6:86:69:87:72:66:ae:e0:5d:a1:f4:d7:57:89:dc:f9:
         d6:e6:43:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 07:10:46 2026 by rpki-client