Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/3/32332e3136392e3232352e302f32342d3234203d3e203539383933.roa
File:                     32332e3136392e3232352e302f32342d3234203d3e203539383933.roa (raw, json)
Hash identifier:          uS5We7Td2/HxNytrkKyo61nIMaR3103588uLSqbN9hY=
Subject key identifier:   F1:A8:3F:4F:53:D3:92:9D:DC:84:2D:9D:9F:01:4B:6A:D0:F3:77:CD
Certificate issuer:       /CN=9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef
Certificate serial:       657CD39EBE51692E7CEE2F4C9DD5989DFDD4F229
Authority key identifier: A0:DF:8E:B2:8D:12:F9:CD:F7:A6:8B:3D:C7:A5:65:76:74:8B:2E:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/32332e3136392e3232352e302f32342d3234203d3e203539383933.roa
Signing time:             Tue 16 Jul 2024 02:42:28 +0000
ROA not before:           Tue 16 Jul 2024 02:37:28 +0000
ROA not after:            Tue 15 Jul 2025 02:42:28 +0000
asID:                     59893
IP address blocks:        23.169.225.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/A0DF8EB28D12F9CDF7A68B3DC7A56576748B2E54.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/A0DF8EB28D12F9CDF7A68B3DC7A56576748B2E54.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/8bb7e416-db1b-4221-a6c0-947074a20f8f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/8bb7e416-db1b-4221-a6c0-947074a20f8f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 03:09:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:7c:d3:9e:be:51:69:2e:7c:ee:2f:4c:9d:d5:98:9d:fd:d4:f2:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef
        Validity
            Not Before: Jul 16 02:37:28 2024 GMT
            Not After : Jul 15 02:42:28 2025 GMT
        Subject: CN=F1A83F4F53D3929DDC842D9D9F014B6AD0F377CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:5e:ce:00:7b:99:03:81:18:72:7b:f2:5d:81:
                    bb:85:33:b6:80:5c:b9:2b:c3:f8:e6:60:06:5e:d9:
                    1a:63:0b:ca:f0:2b:1f:4a:0a:2f:63:b7:81:3e:80:
                    46:7f:7f:68:73:09:11:89:7c:46:ac:85:bd:e2:7b:
                    ea:d2:b7:e5:4e:d4:e4:bc:db:12:9a:84:de:c0:b9:
                    a9:f7:df:bb:66:ee:85:58:30:26:f7:04:1f:74:ac:
                    31:05:22:a6:1e:9a:62:bb:e9:52:75:84:50:21:0f:
                    06:6d:53:c1:07:04:46:97:65:17:0d:19:c7:a6:ab:
                    08:4e:d9:ee:d5:45:77:2e:ac:00:57:ae:3b:65:e1:
                    57:20:fc:07:36:df:be:b6:28:c1:5e:d3:b4:d0:57:
                    30:d8:e8:f2:83:78:41:cf:22:13:01:14:ba:8a:fb:
                    06:6f:bc:6c:d8:b9:36:a7:e3:2c:be:3d:0b:c2:1e:
                    8f:cb:2f:9a:77:d3:98:43:f0:4e:60:a7:bb:ac:0e:
                    df:be:45:65:4b:29:f6:41:0e:f5:19:d4:a4:cc:86:
                    9a:6d:ba:9d:54:cf:3a:57:4d:c1:e8:c6:e1:d7:82:
                    17:b1:f0:29:59:a6:15:f7:4d:29:20:a9:0b:0d:2c:
                    b9:a8:3c:cb:77:12:84:a5:33:0c:ae:02:51:55:38:
                    dc:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:A8:3F:4F:53:D3:92:9D:DC:84:2D:9D:9F:01:4B:6A:D0:F3:77:CD
            X509v3 Authority Key Identifier:
                keyid:A0:DF:8E:B2:8D:12:F9:CD:F7:A6:8B:3D:C7:A5:65:76:74:8B:2E:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/A0DF8EB28D12F9CDF7A68B3DC7A56576748B2E54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/32332e3136392e3232352e302f32342d3234203d3e203539383933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.169.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:ca:b1:84:67:9f:ba:8b:b4:af:c2:ab:fb:a6:b2:0c:17:20:
         15:15:9a:ff:04:7e:35:1d:9d:6a:22:18:5b:f1:c7:38:c7:29:
         3a:fb:58:2b:9a:cc:8e:9a:7d:51:86:e6:58:e9:c3:5f:5f:4c:
         f8:35:f6:33:a3:2a:92:b3:e3:00:7d:10:f6:03:31:01:38:09:
         03:dd:d9:b0:b6:f5:1d:75:18:43:e3:d9:74:e7:2b:dc:9f:ab:
         bc:a9:6d:5e:e6:37:a2:d5:08:f2:6d:e1:26:ec:70:b4:98:c6:
         70:7b:b2:8e:ef:80:51:39:0b:e0:5c:ce:c7:80:cf:70:bb:af:
         7b:46:bd:5a:06:d8:fc:99:a8:44:cd:66:9b:ea:11:a4:11:8a:
         07:e9:bc:e9:f3:a6:ba:66:28:64:ae:57:e4:7c:06:e8:0e:eb:
         f6:e2:6a:2f:d1:9f:8c:9e:86:ec:7e:2d:8a:3e:78:da:1d:ef:
         54:f5:2f:cf:5b:58:bf:c9:ee:b3:e8:04:cd:fe:51:89:b3:3a:
         84:a0:63:87:c2:59:4e:12:2b:8d:3b:ae:c3:da:69:4b:1f:f6:
         5c:46:46:32:c6:79:03:5d:76:ca:01:b5:60:28:31:d6:07:03:
         bd:2d:8b:67:16:28:b5:dd:ab:4e:a1:5c:01:27:6d:38:e6:9f:
         cb:54:15:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 04:54:21 2024 by rpki-client on console-fra.rpki-client.org