Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/3/323630323a666531333a6666303a3a2f34342d3435203d3e20333936353033.roa
File:                     323630323a666531333a6666303a3a2f34342d3435203d3e20333936353033.roa (raw, json)
Hash identifier:          xNhzWZ6D9bWw0QMUK4JNpAv7PXrbZbuYGTRV9SUzm/E=
Subject key identifier:   9D:FE:E0:C8:3A:DC:0D:AD:A1:E1:20:8C:D6:D2:5C:64:D8:7C:98:23
Certificate issuer:       /CN=9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef
Certificate serial:       20F28B5C4B97D73F19E855A8C70D87A0C860FF71
Authority key identifier: A0:DF:8E:B2:8D:12:F9:CD:F7:A6:8B:3D:C7:A5:65:76:74:8B:2E:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/323630323a666531333a6666303a3a2f34342d3435203d3e20333936353033.roa
Signing time:             Mon 06 Oct 2025 01:09:25 +0000
ROA not before:           Mon 06 Oct 2025 01:04:25 +0000
ROA not after:            Mon 05 Oct 2026 01:09:25 +0000
asID:                     396503
IP address blocks:        2602:fe13:ff0::/44 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/A0DF8EB28D12F9CDF7A68B3DC7A56576748B2E54.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/A0DF8EB28D12F9CDF7A68B3DC7A56576748B2E54.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/8bb7e416-db1b-4221-a6c0-947074a20f8f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/8bb7e416-db1b-4221-a6c0-947074a20f8f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 18:19:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:f2:8b:5c:4b:97:d7:3f:19:e8:55:a8:c7:0d:87:a0:c8:60:ff:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef
        Validity
            Not Before: Oct  6 01:04:25 2025 GMT
            Not After : Oct  5 01:09:25 2026 GMT
        Subject: CN=9DFEE0C83ADC0DADA1E1208CD6D25C64D87C9823
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:5e:97:16:93:be:2f:b6:fd:8f:73:f0:29:35:
                    1a:42:0e:a5:77:72:e9:79:1b:b7:60:d7:6c:8a:16:
                    87:44:dc:a0:2b:d3:e0:9e:d5:33:88:cc:67:d2:7a:
                    f8:e0:ab:75:13:97:d9:5e:8d:91:91:58:fc:7f:5c:
                    bc:e3:57:d3:70:21:57:b4:86:cd:d8:5b:35:28:5c:
                    78:68:e3:60:f4:aa:51:55:10:1c:a7:b6:5a:82:95:
                    50:54:a8:cd:42:80:7f:7b:e7:5d:41:5a:c9:2b:f8:
                    23:fb:f0:d1:59:0f:01:15:a8:90:1f:93:39:74:bc:
                    d2:fc:2e:d4:d4:bb:a8:e6:87:cb:e6:37:9a:63:9c:
                    72:b8:29:03:0e:13:48:8c:29:98:68:c1:b8:8c:f8:
                    29:65:c9:74:f7:c7:32:84:3c:12:d0:0b:02:a2:14:
                    fa:a4:ea:eb:6a:aa:fb:a8:8f:36:b5:63:cb:e2:3c:
                    d3:7b:11:95:f0:44:7a:70:ec:df:72:03:25:70:db:
                    d9:41:a4:68:8c:a8:b9:29:31:04:4d:f6:25:0d:c4:
                    4a:fa:d4:4b:0a:26:0d:4c:af:48:e5:31:a8:f2:65:
                    37:21:0a:60:6c:fc:1a:90:c7:21:3e:fb:0e:00:e4:
                    cd:50:a7:f4:40:88:48:78:81:92:cf:73:32:b2:c6:
                    d1:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:FE:E0:C8:3A:DC:0D:AD:A1:E1:20:8C:D6:D2:5C:64:D8:7C:98:23
            X509v3 Authority Key Identifier:
                keyid:A0:DF:8E:B2:8D:12:F9:CD:F7:A6:8B:3D:C7:A5:65:76:74:8B:2E:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/A0DF8EB28D12F9CDF7A68B3DC7A56576748B2E54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/323630323a666531333a6666303a3a2f34342d3435203d3e20333936353033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fe13:ff0::/44

    Signature Algorithm: sha256WithRSAEncryption
         84:40:44:b3:fc:db:f8:f7:b5:30:cc:92:96:3b:92:bb:d5:a4:
         86:c0:1a:a7:02:da:10:02:85:cb:39:9c:d3:07:87:45:45:38:
         80:b7:84:31:64:4e:df:43:c1:4e:54:a1:06:5b:6e:6b:b6:6d:
         93:66:44:f5:56:dc:d3:12:65:6c:fa:b4:6f:2e:3f:44:1b:bb:
         d5:56:e3:53:a5:dc:54:b3:da:2b:6e:b4:17:29:6b:e5:79:9d:
         b8:b4:b3:5c:a8:bf:c1:6f:77:db:95:54:32:6a:f9:a5:bb:63:
         19:72:f3:08:e8:3c:ad:77:19:4b:dd:98:b6:d9:18:20:7e:c3:
         f3:da:c5:62:26:d9:74:fe:fc:98:ac:a9:c6:2f:c4:7f:73:26:
         84:fb:1f:ec:cd:aa:ce:51:ab:70:f4:2b:6f:98:74:1f:8e:1d:
         17:3f:c7:24:01:83:6c:e9:66:c5:e7:45:4e:ee:e9:fc:38:69:
         48:cc:61:f1:b2:3f:24:9b:ba:64:a2:33:b2:77:93:0c:0c:40:
         ac:25:af:c5:68:1a:25:ac:99:fc:72:fa:4e:07:90:95:34:38:
         96:d4:ad:d5:59:0c:ae:46:b6:ff:7e:11:a4:b9:5a:e7:b1:11:
         cc:20:1e:fc:2e:3b:24:a5:b8:58:86:0a:89:73:3d:81:ba:c6:
         dc:5e:ab:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:34:31 2025 by rpki-client