Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/3/323630323a666531333a3830363a3a2f34382d3438203d3e203236303432.roa
File:                     323630323a666531333a3830363a3a2f34382d3438203d3e203236303432.roa (raw, json)
Hash identifier:          Wbtf7RiwUqTP8aNJeyfvH72AX92grqRzeHcnAkGhhmE=
Subject key identifier:   45:EC:24:4D:53:67:F1:0A:C3:8B:C8:8C:08:AE:8E:64:A9:C3:E7:93
Certificate issuer:       /CN=9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef
Certificate serial:       15A8556D98B2F2473755CE85B3DF6AF92FA23C96
Authority key identifier: A0:DF:8E:B2:8D:12:F9:CD:F7:A6:8B:3D:C7:A5:65:76:74:8B:2E:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/323630323a666531333a3830363a3a2f34382d3438203d3e203236303432.roa
Signing time:             Sun 17 Aug 2025 00:40:41 +0000
ROA not before:           Sun 17 Aug 2025 00:35:41 +0000
ROA not after:            Sun 16 Aug 2026 00:40:41 +0000
asID:                     26042
IP address blocks:        2602:fe13:806::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/A0DF8EB28D12F9CDF7A68B3DC7A56576748B2E54.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/A0DF8EB28D12F9CDF7A68B3DC7A56576748B2E54.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/8bb7e416-db1b-4221-a6c0-947074a20f8f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/8bb7e416-db1b-4221-a6c0-947074a20f8f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 20:46:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:a8:55:6d:98:b2:f2:47:37:55:ce:85:b3:df:6a:f9:2f:a2:3c:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef
        Validity
            Not Before: Aug 17 00:35:41 2025 GMT
            Not After : Aug 16 00:40:41 2026 GMT
        Subject: CN=45EC244D5367F10AC38BC88C08AE8E64A9C3E793
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:83:c2:53:9e:c7:4e:80:50:8d:65:f1:b0:c8:
                    f5:c4:6c:a6:76:59:c3:98:92:70:8d:b3:0b:55:59:
                    c5:84:71:cf:bd:e5:d6:59:5d:e8:1d:a5:16:01:20:
                    db:5b:77:bf:dc:6c:30:cb:dc:75:db:2b:07:db:22:
                    c0:5b:e1:bb:11:a7:b4:69:65:eb:c2:c6:2d:23:7a:
                    00:3a:ab:cb:a4:1a:57:ef:cf:50:0e:93:0e:7d:57:
                    93:40:0e:b0:ba:fc:32:2e:8a:81:81:a1:80:bd:a8:
                    b9:83:9c:32:4e:50:f9:b4:21:84:e7:fe:22:4a:59:
                    97:14:86:a2:81:b1:2f:c7:c5:52:95:11:0f:7f:a9:
                    91:ae:14:52:4f:bd:58:9a:a0:66:d9:19:da:a9:c9:
                    7c:14:28:4d:66:ab:bd:05:67:a8:13:34:99:f5:a9:
                    61:13:f5:18:cf:58:e7:6f:45:11:93:b4:22:ae:f3:
                    6f:ff:35:a5:b8:91:72:91:b9:ed:97:1a:fa:8f:0e:
                    73:81:24:65:4f:56:01:86:cb:ab:67:95:61:6a:97:
                    8e:2b:20:fd:70:f6:2d:ca:3a:3f:36:11:21:36:4f:
                    f4:7e:12:93:2b:d5:64:16:13:6f:da:8c:1f:4b:70:
                    18:91:8f:fd:e9:b3:38:7e:4b:86:e0:9a:39:f6:e8:
                    41:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:EC:24:4D:53:67:F1:0A:C3:8B:C8:8C:08:AE:8E:64:A9:C3:E7:93
            X509v3 Authority Key Identifier:
                keyid:A0:DF:8E:B2:8D:12:F9:CD:F7:A6:8B:3D:C7:A5:65:76:74:8B:2E:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/A0DF8EB28D12F9CDF7A68B3DC7A56576748B2E54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/323630323a666531333a3830363a3a2f34382d3438203d3e203236303432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fe13:806::/48

    Signature Algorithm: sha256WithRSAEncryption
         2c:bf:d5:b8:a0:ab:5e:c8:a4:39:bc:10:9c:78:2d:7c:ee:f9:
         05:47:5c:60:e3:d8:3a:a2:9f:e6:c9:ca:99:98:17:ab:87:2a:
         65:a1:69:61:3e:76:cf:d1:28:7e:38:20:f4:00:06:3b:50:d3:
         80:90:56:b8:87:73:46:04:7f:96:99:eb:27:7c:1c:9b:6c:9d:
         14:50:74:bf:52:07:74:a8:f8:35:af:f1:94:30:19:ff:5c:1f:
         b8:88:bb:a5:a3:3d:99:01:b3:82:54:15:e8:92:51:52:bc:20:
         24:a8:bc:73:7c:54:41:ee:0f:60:b1:d3:6d:df:99:39:ef:2b:
         b1:30:0c:1f:53:d8:5e:f5:27:9e:77:c8:5c:70:d7:2d:ad:f1:
         bb:6c:e9:4c:a8:8a:bc:a1:6f:10:c3:cd:49:db:75:d1:ac:42:
         f2:2d:5a:f3:9a:f9:f1:84:4d:3a:ea:7a:93:b5:d8:6c:cd:6c:
         e2:22:b3:72:1a:36:e5:a5:84:ff:46:f7:38:12:3b:9e:c4:a9:
         cb:e5:3a:bd:88:70:c6:bb:e4:e9:f5:e3:07:8f:37:79:d7:27:
         e4:11:d5:9d:ca:06:e7:06:77:61:07:32:c0:68:be:12:11:5d:
         b5:de:d1:5b:b8:5b:6c:79:40:ec:71:4d:8c:3e:6d:8e:4f:92:
         f9:3f:ba:e9
-----BEGIN CERTIFICATE-----
MIIFkTCCBHmgAwIBAgIUFahVbZiy8kc3Vc6Fs99q+S+iPJYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOWFiMjhmYmM4YzA4NGQzNmNkMjZkMzA4YjE2NzAyZTU5
ZTAxZmNiYTY4MWJmZWM5ZWYwHhcNMjUwODE3MDAzNTQxWhcNMjYwODE2MDA0MDQx
WjAzMTEwLwYDVQQDEyg0NUVDMjQ0RDUzNjdGMTBBQzM4QkM4OEMwOEFFOEU2NEE5
QzNFNzkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4PCU57HToBQ
jWXxsMj1xGymdlnDmJJwjbMLVVnFhHHPveXWWV3oHaUWASDbW3e/3Gwwy9x12ysH
2yLAW+G7Eae0aWXrwsYtI3oAOqvLpBpX789QDpMOfVeTQA6wuvwyLoqBgaGAvai5
g5wyTlD5tCGE5/4iSlmXFIaigbEvx8VSlREPf6mRrhRST71YmqBm2Rnaqcl8FChN
Zqu9BWeoEzSZ9alhE/UYz1jnb0URk7QirvNv/zWluJFykbntlxr6jw5zgSRlT1YB
hsurZ5VhapeOKyD9cPYtyjo/NhEhNk/0fhKTK9VkFhNv2owfS3AYkY/96bM4fkuG
4Jo59uhBQwIDAQABo4ICkTCCAo0wHQYDVR0OBBYEFEXsJE1TZ/EKw4vIjAiujmSp
w+eTMB8GA1UdIwQYMBaAFKDfjrKNEvnN96aLPcelZXZ0iy5UMA4GA1UdDwEB/wQE
AwIHgDBxBgNVHR8EajBoMGagZKBihmByc3luYzovL3Jwa2kuYWRtaW4uZnJlZXJh
bmdlY2xvdWQuY29tL3JlcG8vRlJDLUNBLzMvQTBERjhFQjI4RDEyRjlDREY3QTY4
QjNEQzdBNTY1NzY3NDhCMkU1NC5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZm
ZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzhiYjdlNDE2LWRiMWIt
NDIyMS1hNmMwLTk0NzA3NGEyMGY4Zi85YWIyOGZiYzhjMDg0ZDM2Y2QyNmQzMDhi
MTY3MDJlNTllMDFmY2JhNjgxYmZlYzllZi5jZXIwgZMGCCsGAQUFBwELBIGGMIGD
MIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLmFkbWluLmZyZWVyYW5nZWNsb3Vk
LmNvbS9yZXBvL0ZSQy1DQS8zLzMyMzYzMDMyM2E2NjY1MzEzMzNhMzgzMDM2M2Ez
YTJmMzQzODJkMzQzODIwM2QzZTIwMzIzNjMwMzQzMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACYC/hMI
BjANBgkqhkiG9w0BAQsFAAOCAQEALL/VuKCrXsikObwQnHgtfO75BUdcYOPYOqKf
5snKmZgXq4cqZaFpYT52z9Eofjgg9AAGO1DTgJBWuIdzRgR/lpnrJ3wcm2ydFFB0
v1IHdKj4Na/xlDAZ/1wfuIi7paM9mQGzglQV6JJRUrwgJKi8c3xUQe4PYLHTbd+Z
Oe8rsTAMH1PYXvUnnnfIXHDXLa3xu2zpTKiKvKFvEMPNSdt10axC8i1a85r58YRN
Oup6k7XYbM1s4iKzcho25aWE/0b3OBI7nsSpy+U6vYhwxrvk6fXjB483edcn5BHV
ncoG5wZ3YQcywGi+EhFdtd7RW7hbbHlA7HFNjD5tjk+S+T+66Q==
-----END CERTIFICATE-----
Generated at Sat Aug 23 22:07:27 2025 by rpki-client