Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/3/32332e3136392e3232352e302f32342d3234203d3e20313332333335.roa
File:                     32332e3136392e3232352e302f32342d3234203d3e20313332333335.roa (raw, json)
Hash identifier:          XEtV7EAyzi6XM4bnKayKlkKE0r6V37pvtGuVQAKRKbo=
Subject key identifier:   33:15:A2:F5:CD:DE:A1:B6:E6:79:E6:83:79:F3:46:09:04:D5:87:E4
Certificate issuer:       /CN=9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef
Certificate serial:       0951B28483059E0BF976FC2232A652232FE03C85
Authority key identifier: A0:DF:8E:B2:8D:12:F9:CD:F7:A6:8B:3D:C7:A5:65:76:74:8B:2E:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/32332e3136392e3232352e302f32342d3234203d3e20313332333335.roa
Signing time:             Sun 05 Jan 2025 00:17:02 +0000
ROA not before:           Sun 05 Jan 2025 00:12:02 +0000
ROA not after:            Sun 04 Jan 2026 00:17:02 +0000
asID:                     132335
IP address blocks:        23.169.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/A0DF8EB28D12F9CDF7A68B3DC7A56576748B2E54.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/A0DF8EB28D12F9CDF7A68B3DC7A56576748B2E54.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/8bb7e416-db1b-4221-a6c0-947074a20f8f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/8bb7e416-db1b-4221-a6c0-947074a20f8f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 22:48:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:51:b2:84:83:05:9e:0b:f9:76:fc:22:32:a6:52:23:2f:e0:3c:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef
        Validity
            Not Before: Jan  5 00:12:02 2025 GMT
            Not After : Jan  4 00:17:02 2026 GMT
        Subject: CN=3315A2F5CDDEA1B6E679E68379F3460904D587E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:cd:29:85:13:16:b8:82:d7:4d:23:af:24:20:
                    99:68:14:ff:49:d5:0e:97:ea:ee:76:27:39:c9:d3:
                    d0:34:fa:b1:2b:3b:b7:da:6b:bf:de:df:a8:df:7c:
                    5a:fc:45:43:b4:c6:d0:6e:cc:93:68:29:96:37:8e:
                    01:41:e1:6e:7d:5a:d5:d7:ca:ba:c7:1c:e1:cd:11:
                    be:4f:8a:d3:14:59:00:e8:95:2e:a9:25:b5:4b:b2:
                    01:34:be:73:f4:aa:71:9a:61:3a:ce:dc:3f:54:e5:
                    1b:ee:d5:f0:ac:ae:43:91:87:8c:52:a1:ad:c3:ba:
                    49:af:c6:9d:50:fc:5f:78:a2:14:2b:6a:bb:24:2d:
                    4c:36:65:59:12:ad:f3:32:68:f0:38:3c:77:32:2c:
                    74:c1:53:34:0a:15:8c:23:a4:09:dc:59:9b:b8:24:
                    e4:c7:cd:61:14:1f:b4:f2:07:38:40:1c:7c:fe:13:
                    e1:eb:8b:f8:1f:23:54:ee:f9:2a:e3:15:8f:c4:bd:
                    5c:9c:9a:2c:c1:c9:f2:f9:a2:ee:4d:38:55:fc:13:
                    6a:de:95:cd:b8:78:30:66:05:ba:6c:25:6e:bc:bd:
                    29:7c:b3:81:35:05:3d:24:b5:d0:5f:64:43:f4:4a:
                    d0:9c:fe:bd:18:2f:fe:e0:4e:e7:cc:d6:04:60:cc:
                    19:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:15:A2:F5:CD:DE:A1:B6:E6:79:E6:83:79:F3:46:09:04:D5:87:E4
            X509v3 Authority Key Identifier:
                keyid:A0:DF:8E:B2:8D:12:F9:CD:F7:A6:8B:3D:C7:A5:65:76:74:8B:2E:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/A0DF8EB28D12F9CDF7A68B3DC7A56576748B2E54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/32332e3136392e3232352e302f32342d3234203d3e20313332333335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.169.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:ae:29:06:b4:c5:04:3f:4f:bc:a7:c9:5e:be:24:37:8d:61:
         69:6c:38:39:c4:69:77:78:3a:47:ba:47:f3:37:48:5a:ab:71:
         c7:38:3c:35:fe:02:63:ed:ce:f9:9c:bd:4f:62:39:99:6a:15:
         23:68:67:eb:cb:af:b4:6a:38:a5:e2:44:72:c4:e3:2c:c7:b1:
         7f:cc:25:f4:ad:23:ff:41:94:13:14:d3:9f:69:45:e6:55:be:
         d4:20:78:b3:15:7f:b7:dc:59:68:1f:79:64:46:67:27:c4:03:
         38:65:70:e7:8f:7c:06:53:22:6f:a0:0e:51:c2:ab:0c:53:3e:
         08:44:d8:0f:6c:d5:72:f9:b0:d3:c5:03:97:89:d5:22:5e:7a:
         80:21:0a:b1:bc:25:05:3a:7d:06:78:ed:f6:0d:bf:65:6c:f8:
         2b:21:7a:e7:1c:12:8e:1a:09:ee:4b:41:5f:ab:d7:76:3a:73:
         d0:d5:84:71:54:5a:3b:ca:c0:d8:bb:b1:ba:5e:61:9a:fc:7e:
         02:a2:f4:5a:03:bd:e3:ee:cd:a8:b0:32:91:f6:e6:72:15:27:
         1e:42:ac:94:92:09:56:6c:17:56:6c:1a:db:61:eb:c2:1d:21:
         58:9c:bb:31:bb:30:93:5e:88:f0:94:86:40:7b:1d:98:69:a1:
         4c:a9:27:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:35:35 2025 by rpki-client