Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/7/323630323a666331633a6661303a3a2f34342d3438203d3e203533333536.roa
File:                     323630323a666331633a6661303a3a2f34342d3438203d3e203533333536.roa (raw, json)
Hash identifier:          drO8k/5OfV9GQUUKH5Pc81skv4Ix1D0ajVcr4jykma8=
Subject key identifier:   40:6C:D0:70:5E:5E:11:9A:0C:DC:57:8E:1C:BC:B2:64:AF:17:B2:B8
Certificate issuer:       /CN=46abb15c5b3d343c97c09f99907da1dccd4c3a215af59e8233
Certificate serial:       13F587E542FF05C293FF9A98C7ECC9C1E0BDF0BA
Authority key identifier: FA:04:8A:F3:EA:62:E5:57:5B:46:98:C5:CC:24:03:98:28:93:F0:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a4f730e-74f5-4c41-9c06-be5d40c9917d/46abb15c5b3d343c97c09f99907da1dccd4c3a215af59e8233.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/7/323630323a666331633a6661303a3a2f34342d3438203d3e203533333536.roa
Signing time:             Tue 17 Jun 2025 03:15:02 +0000
ROA not before:           Tue 17 Jun 2025 03:10:02 +0000
ROA not after:            Tue 16 Jun 2026 03:15:02 +0000
asID:                     53356
IP address blocks:        2602:fc1c:fa0::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/7/FA048AF3EA62E5575B4698C5CC2403982893F0C5.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/7/FA048AF3EA62E5575B4698C5CC2403982893F0C5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a4f730e-74f5-4c41-9c06-be5d40c9917d/46abb15c5b3d343c97c09f99907da1dccd4c3a215af59e8233.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a4f730e-74f5-4c41-9c06-be5d40c9917d/0a4f730e-74f5-4c41-9c06-be5d40c9917d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a4f730e-74f5-4c41-9c06-be5d40c9917d/0a4f730e-74f5-4c41-9c06-be5d40c9917d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a4f730e-74f5-4c41-9c06-be5d40c9917d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 02:32:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:f5:87:e5:42:ff:05:c2:93:ff:9a:98:c7:ec:c9:c1:e0:bd:f0:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46abb15c5b3d343c97c09f99907da1dccd4c3a215af59e8233
        Validity
            Not Before: Jun 17 03:10:02 2025 GMT
            Not After : Jun 16 03:15:02 2026 GMT
        Subject: CN=406CD0705E5E119A0CDC578E1CBCB264AF17B2B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:0b:91:cf:5b:df:bb:37:bc:b9:cc:ef:63:ce:
                    7c:fe:61:45:46:3c:81:7d:0a:84:b9:b5:af:72:71:
                    3e:2f:b3:0f:a6:a8:e7:67:ba:bf:28:ef:18:28:39:
                    7a:e8:f0:61:cc:45:c9:0d:52:f9:68:85:11:1d:85:
                    e7:84:6f:1c:b0:f8:e4:b4:4b:88:cb:e2:07:b7:03:
                    cc:b1:eb:93:f1:3a:3d:2c:89:4d:da:be:7f:e2:64:
                    cd:45:05:d2:96:75:05:f8:7c:19:ea:ae:d2:03:47:
                    3e:cd:23:42:a1:e4:c5:8a:3f:59:a5:95:b0:ce:cf:
                    91:5a:95:57:ee:b4:fc:b9:f5:ed:e0:22:36:72:88:
                    a7:7e:8c:0b:72:ea:ef:c3:d6:3e:70:30:27:1e:e5:
                    20:81:c3:d2:85:ba:d5:4d:da:a2:8b:95:8a:5a:19:
                    01:00:e8:30:c1:a5:f1:46:f6:65:91:d8:70:09:7a:
                    5b:fd:d9:b7:a5:3d:79:ff:69:a2:21:95:54:58:8d:
                    a5:14:24:dc:9f:52:c8:5b:6d:49:c4:62:eb:34:d8:
                    07:9b:55:8d:c5:a5:b8:70:65:6d:97:e3:4b:95:a8:
                    08:52:dc:3d:ad:5a:10:d8:de:3e:de:04:25:dd:8f:
                    ef:7b:83:0e:3a:1b:7c:48:b8:fd:e1:7a:84:a6:81:
                    09:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:6C:D0:70:5E:5E:11:9A:0C:DC:57:8E:1C:BC:B2:64:AF:17:B2:B8
            X509v3 Authority Key Identifier:
                keyid:FA:04:8A:F3:EA:62:E5:57:5B:46:98:C5:CC:24:03:98:28:93:F0:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/7/FA048AF3EA62E5575B4698C5CC2403982893F0C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a4f730e-74f5-4c41-9c06-be5d40c9917d/46abb15c5b3d343c97c09f99907da1dccd4c3a215af59e8233.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/7/323630323a666331633a6661303a3a2f34342d3438203d3e203533333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc1c:fa0::/44

    Signature Algorithm: sha256WithRSAEncryption
         8a:84:aa:29:d4:a6:e6:a6:8b:a3:a2:05:39:9a:ab:ec:15:2e:
         fa:11:1b:a2:49:e2:88:81:81:0d:a7:94:0c:fe:e9:0e:5d:21:
         63:a9:f7:12:a2:c6:24:76:83:3f:05:43:fa:3a:52:eb:e9:32:
         d9:52:72:34:33:48:ce:d6:52:32:08:53:f9:e1:67:5c:40:09:
         7f:04:06:13:62:b6:98:8f:94:8b:63:26:95:3b:c7:4c:dd:db:
         4c:f4:bc:97:7a:94:80:e2:6f:eb:e6:76:60:5b:06:a0:b4:55:
         39:d5:01:b9:12:9e:e7:34:9e:0b:ca:f0:1d:bd:a3:26:41:c0:
         94:54:64:c3:3b:b9:6f:51:ae:1e:76:b5:57:84:bb:7f:fb:cb:
         55:2b:d2:eb:c7:e1:fa:16:5f:3d:5c:42:bb:db:a0:1b:3f:65:
         c3:04:11:0d:c7:55:db:94:9b:31:fd:7a:30:7f:04:80:8b:f3:
         49:dc:80:a8:d7:c7:fe:b0:3f:90:46:2e:67:67:72:db:f9:47:
         91:42:db:9a:cd:3c:cd:06:74:ba:1c:a5:36:52:db:8f:29:e0:
         b7:0f:ee:33:88:9f:40:71:2f:ad:45:41:c0:13:d8:d7:f5:ed:
         24:4b:a6:58:78:6d:39:0f:76:03:d3:b4:a1:65:5b:1b:1a:cb:
         b2:fb:4f:f1
-----BEGIN CERTIFICATE-----
MIIFkTCCBHmgAwIBAgIUE/WH5UL/BcKT/5qYx+zJweC98LowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNDZhYmIxNWM1YjNkMzQzYzk3YzA5Zjk5OTA3ZGExZGNj
ZDRjM2EyMTVhZjU5ZTgyMzMwHhcNMjUwNjE3MDMxMDAyWhcNMjYwNjE2MDMxNTAy
WjAzMTEwLwYDVQQDEyg0MDZDRDA3MDVFNUUxMTlBMENEQzU3OEUxQ0JDQjI2NEFG
MTdCMkI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxwuRz1vfuze8
uczvY858/mFFRjyBfQqEubWvcnE+L7MPpqjnZ7q/KO8YKDl66PBhzEXJDVL5aIUR
HYXnhG8csPjktEuIy+IHtwPMseuT8To9LIlN2r5/4mTNRQXSlnUF+HwZ6q7SA0c+
zSNCoeTFij9ZpZWwzs+RWpVX7rT8ufXt4CI2coinfowLcurvw9Y+cDAnHuUggcPS
hbrVTdqii5WKWhkBAOgwwaXxRvZlkdhwCXpb/dm3pT15/2miIZVUWI2lFCTcn1LI
W21JxGLrNNgHm1WNxaW4cGVtl+NLlagIUtw9rVoQ2N4+3gQl3Y/ve4MOOht8SLj9
4XqEpoEJSQIDAQABo4ICkTCCAo0wHQYDVR0OBBYEFEBs0HBeXhGaDNxXjhy8smSv
F7K4MB8GA1UdIwQYMBaAFPoEivPqYuVXW0aYxcwkA5gok/DFMA4GA1UdDwEB/wQE
AwIHgDBxBgNVHR8EajBoMGagZKBihmByc3luYzovL3Jwa2kuYWRtaW4uZnJlZXJh
bmdlY2xvdWQuY29tL3JlcG8vRlJDLUNBLzcvRkEwNDhBRjNFQTYyRTU1NzVCNDY5
OEM1Q0MyNDAzOTgyODkzRjBDNS5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIx
ZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzBhNGY3MzBlLTc0ZjUt
NGM0MS05YzA2LWJlNWQ0MGM5OTE3ZC80NmFiYjE1YzViM2QzNDNjOTdjMDlmOTk5
MDdkYTFkY2NkNGMzYTIxNWFmNTllODIzMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGD
MIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLmFkbWluLmZyZWVyYW5nZWNsb3Vk
LmNvbS9yZXBvL0ZSQy1DQS83LzMyMzYzMDMyM2E2NjYzMzE2MzNhNjY2MTMwM2Ez
YTJmMzQzNDJkMzQzODIwM2QzZTIwMzUzMzMzMzUzNi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCYC/BwP
oDANBgkqhkiG9w0BAQsFAAOCAQEAioSqKdSm5qaLo6IFOZqr7BUu+hEbokniiIGB
DaeUDP7pDl0hY6n3EqLGJHaDPwVD+jpS6+ky2VJyNDNIztZSMghT+eFnXEAJfwQG
E2K2mI+Ui2MmlTvHTN3bTPS8l3qUgOJv6+Z2YFsGoLRVOdUBuRKe5zSeC8rwHb2j
JkHAlFRkwzu5b1GuHna1V4S7f/vLVSvS68fh+hZfPVxCu9ugGz9lwwQRDcdV25Sb
Mf16MH8EgIvzSdyAqNfH/rA/kEYuZ2dy2/lHkULbms08zQZ0uhylNlLbjyngtw/u
M4ifQHEvrUVBwBPY1/XtJEumWHhtOQ92A9O0oWVbGxrLsvtP8Q==
-----END CERTIFICATE-----
Generated at Sun Jun 29 06:18:58 2025 by rpki-client