Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/3/32332e3136392e3232352e302f32342d3234203d3e203334383732.roa
File:                     32332e3136392e3232352e302f32342d3234203d3e203334383732.roa (raw, json)
Hash identifier:          cyTXoxMHEVRLHyDfFx7k/UvwIeHy1boNbhD+UwDi3iU=
Subject key identifier:   85:B3:56:71:77:E1:F3:26:67:9B:10:3B:AD:BB:A1:2B:CC:9A:22:C2
Certificate issuer:       /CN=9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef
Certificate serial:       64C6716B79DFAE9C704E98DE7CFE6B5212C94B71
Authority key identifier: A0:DF:8E:B2:8D:12:F9:CD:F7:A6:8B:3D:C7:A5:65:76:74:8B:2E:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/32332e3136392e3232352e302f32342d3234203d3e203334383732.roa
Signing time:             Wed 15 Jan 2025 20:04:44 +0000
ROA not before:           Wed 15 Jan 2025 19:59:44 +0000
ROA not after:            Wed 14 Jan 2026 20:04:44 +0000
asID:                     34872
IP address blocks:        23.169.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/A0DF8EB28D12F9CDF7A68B3DC7A56576748B2E54.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/A0DF8EB28D12F9CDF7A68B3DC7A56576748B2E54.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/8bb7e416-db1b-4221-a6c0-947074a20f8f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/8bb7e416-db1b-4221-a6c0-947074a20f8f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 16:09:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:c6:71:6b:79:df:ae:9c:70:4e:98:de:7c:fe:6b:52:12:c9:4b:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef
        Validity
            Not Before: Jan 15 19:59:44 2025 GMT
            Not After : Jan 14 20:04:44 2026 GMT
        Subject: CN=85B3567177E1F326679B103BADBBA12BCC9A22C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:e4:2a:57:e2:87:f5:5b:4b:12:3e:89:7e:50:
                    53:9b:3c:d4:0c:82:3b:03:23:46:84:02:dd:80:3e:
                    f2:b3:7d:c4:80:ee:c0:f8:f6:e7:13:1e:95:69:44:
                    a2:f3:80:03:93:a0:58:26:95:f0:0f:32:f4:66:22:
                    aa:49:15:f2:08:f5:da:e3:85:e5:60:4c:a9:a2:6e:
                    d1:18:88:9b:4e:7e:86:a9:cb:97:1f:6f:6e:30:b6:
                    d9:05:d1:95:19:9e:5e:5a:a6:8f:b7:d3:80:9d:50:
                    c2:ca:d0:46:aa:e9:0e:7d:d9:68:2d:b9:77:69:cf:
                    c3:42:76:83:a3:c6:2a:f2:5a:53:5a:da:5e:cd:7f:
                    a4:64:2f:e9:f9:3f:a6:40:e7:a6:25:96:89:d8:42:
                    82:31:4e:d7:4a:5a:b1:88:18:f3:af:aa:5f:da:05:
                    c0:fa:e1:b4:26:37:0f:7f:b7:33:59:58:0f:65:f3:
                    33:8d:91:01:ab:a3:b3:24:90:58:89:84:9a:ff:32:
                    34:bc:1e:64:87:03:61:73:97:57:b9:71:99:24:46:
                    38:ba:8e:b7:de:f6:db:2b:59:47:c9:a8:5d:8c:74:
                    70:2f:96:22:d0:a8:95:e9:0b:28:de:13:d1:8e:00:
                    a4:28:3c:b9:26:37:fc:bf:bd:07:8c:61:cf:69:56:
                    17:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:B3:56:71:77:E1:F3:26:67:9B:10:3B:AD:BB:A1:2B:CC:9A:22:C2
            X509v3 Authority Key Identifier:
                keyid:A0:DF:8E:B2:8D:12:F9:CD:F7:A6:8B:3D:C7:A5:65:76:74:8B:2E:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/A0DF8EB28D12F9CDF7A68B3DC7A56576748B2E54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/32332e3136392e3232352e302f32342d3234203d3e203334383732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.169.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:f3:94:a3:32:23:d4:7e:0b:25:32:e3:32:69:b3:a9:35:df:
         e3:c2:fb:c1:b0:34:94:79:88:83:47:f0:b3:93:61:66:ff:a3:
         2c:cc:bc:a3:ac:33:89:b1:e1:82:08:fa:49:00:4e:db:51:b6:
         42:79:a8:11:1c:fa:1d:5e:d1:35:45:48:ff:f5:82:73:ce:8f:
         04:ad:01:73:fb:fd:23:dd:77:66:24:ac:57:9a:67:25:cb:db:
         2e:ea:02:22:2c:02:71:a5:24:99:7d:5f:fd:c4:47:66:c7:24:
         0a:c8:b9:68:87:17:23:e7:45:81:40:79:cb:52:05:e9:39:2b:
         0f:57:a8:bc:89:a7:93:7f:44:3e:e6:02:4b:39:48:65:a0:3f:
         2a:5c:12:fe:b1:f8:16:62:c9:f2:7e:34:f6:69:9d:69:15:d0:
         09:b9:16:ae:57:d9:c1:41:07:0d:f1:94:74:03:f1:e3:bb:9b:
         82:42:3b:b3:09:ef:42:99:c1:6e:db:de:58:dd:aa:1c:3d:29:
         a7:4d:29:fa:d4:fd:9f:50:5c:c3:b3:0e:be:ac:39:fc:a4:5c:
         01:0a:73:aa:c8:79:af:1c:9a:7e:ee:7d:32:2b:86:22:f6:57:
         d8:6b:37:89:92:f8:a1:a4:13:a5:bf:f6:d5:24:8f:af:51:9a:
         ea:1b:b6:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:41:55 2025 by rpki-client