Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/3/32332e3136392e3232352e302f32342d3234203d3e20323133353530.roa
File:                     32332e3136392e3232352e302f32342d3234203d3e20323133353530.roa (raw, json)
Hash identifier:          lm4Sv/t6QfnCT0/X59Z+TWZSCEtDRPjiOJqSzkNpQpc=
Subject key identifier:   0C:27:D7:D0:48:CD:49:0C:60:7D:9D:CC:B0:E0:FA:AF:42:AA:56:9C
Certificate issuer:       /CN=9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef
Certificate serial:       342FDD5D9819C9DF25D085DB8A211D31FB1694C5
Authority key identifier: A0:DF:8E:B2:8D:12:F9:CD:F7:A6:8B:3D:C7:A5:65:76:74:8B:2E:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/32332e3136392e3232352e302f32342d3234203d3e20323133353530.roa
Signing time:             Tue 21 Jan 2025 15:41:47 +0000
ROA not before:           Tue 21 Jan 2025 15:36:47 +0000
ROA not after:            Tue 20 Jan 2026 15:41:47 +0000
asID:                     213550
IP address blocks:        23.169.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/A0DF8EB28D12F9CDF7A68B3DC7A56576748B2E54.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/A0DF8EB28D12F9CDF7A68B3DC7A56576748B2E54.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/8bb7e416-db1b-4221-a6c0-947074a20f8f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/8bb7e416-db1b-4221-a6c0-947074a20f8f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 14 Mar 2025 04:57:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:2f:dd:5d:98:19:c9:df:25:d0:85:db:8a:21:1d:31:fb:16:94:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef
        Validity
            Not Before: Jan 21 15:36:47 2025 GMT
            Not After : Jan 20 15:41:47 2026 GMT
        Subject: CN=0C27D7D048CD490C607D9DCCB0E0FAAF42AA569C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ce:f7:55:c7:b8:9a:a0:0c:17:77:40:20:56:
                    ee:08:7c:35:6b:89:a5:07:28:a1:25:10:b1:09:76:
                    82:ff:9d:2a:98:98:d2:fe:c0:c9:7f:f8:b7:99:d3:
                    10:cc:66:08:11:a7:63:58:a3:51:da:dd:66:6c:d6:
                    2a:33:e5:06:f3:0f:00:70:f3:fd:5d:f5:18:27:15:
                    7b:85:49:6e:23:45:36:aa:a0:e8:1a:71:2e:5c:10:
                    d3:f4:17:9f:c8:71:34:e9:d2:ab:7b:e8:1d:fc:9e:
                    d0:76:37:43:97:8c:c5:10:24:f0:31:38:10:41:d3:
                    43:37:62:e3:4f:81:72:c4:c2:d8:d3:6f:f9:28:a5:
                    e3:f9:fe:db:3a:17:8e:ee:9f:3e:86:89:af:fe:c5:
                    e8:41:02:9f:55:ad:cc:f2:d5:98:35:a0:c9:6d:84:
                    47:7a:fc:1c:bf:41:9c:91:61:2e:c7:8a:3b:4a:6b:
                    4d:ea:29:ed:d2:87:b5:a2:d5:eb:61:e5:b3:22:db:
                    f4:ea:82:2d:ba:99:fc:f2:c1:79:9c:35:72:12:1c:
                    a7:00:ea:05:18:93:0d:2b:f8:da:d8:85:67:70:2a:
                    5c:65:fe:b5:48:b3:83:17:71:f0:56:c2:91:17:5b:
                    b9:63:bd:75:e9:e8:01:4c:18:35:d4:61:e9:72:63:
                    b8:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:27:D7:D0:48:CD:49:0C:60:7D:9D:CC:B0:E0:FA:AF:42:AA:56:9C
            X509v3 Authority Key Identifier:
                keyid:A0:DF:8E:B2:8D:12:F9:CD:F7:A6:8B:3D:C7:A5:65:76:74:8B:2E:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/A0DF8EB28D12F9CDF7A68B3DC7A56576748B2E54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/32332e3136392e3232352e302f32342d3234203d3e20323133353530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.169.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:eb:13:e3:00:f8:35:18:53:da:bc:72:be:95:9f:b3:eb:4d:
         c8:b7:7e:2a:bc:2a:1b:ab:3a:2f:81:82:d9:01:8d:90:36:59:
         70:ab:d4:91:a1:bf:6e:7f:59:1d:3c:78:44:20:e1:b3:60:42:
         40:75:b2:44:01:d9:cf:d4:79:94:f6:30:4c:69:89:ca:59:17:
         14:60:ac:5d:df:4a:b6:85:91:7b:35:d8:e0:c7:17:08:34:2a:
         e7:aa:1a:42:db:cd:7b:b4:7a:96:34:a1:26:ac:b4:c1:01:fa:
         45:24:87:af:16:63:f2:8f:0b:de:09:06:b8:d6:29:37:a7:13:
         81:57:40:0d:48:ce:a7:ac:9f:69:72:83:3d:e8:fb:09:df:97:
         9f:aa:cf:87:15:3b:f2:ac:65:a5:03:11:9f:90:98:2a:7e:50:
         2a:18:13:eb:68:a2:b0:71:35:5d:a5:32:9f:0c:84:d2:9a:72:
         00:db:1f:80:bf:05:7d:9b:cd:9b:5c:ba:89:7f:a4:89:97:c7:
         0d:d6:cf:2d:6b:b7:f7:ff:99:fe:64:ca:5f:8f:05:50:92:ec:
         17:27:bb:72:ea:b6:b4:01:4b:fa:d2:61:bb:8e:71:1d:63:22:
         d1:9f:07:c7:4c:1b:c8:fa:e6:c5:42:1c:8e:02:7c:99:f6:75:
         b5:cc:24:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 05:57:38 2025 by rpki-client