Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/6/32332e3135322e3232342e302f32342d3234203d3e203533333536.roa
File:                     32332e3135322e3232342e302f32342d3234203d3e203533333536.roa (raw, json)
Hash identifier:          fn6S0gzmsJASNqaP7sMcK2FraYdjEqkwZeKzY30CKnM=
Subject key identifier:   F6:D5:F8:9B:DC:FE:9F:27:7B:47:E0:3D:0B:C2:A0:6F:49:23:42:88
Certificate issuer:       /CN=a928fd66fc0487f5bba93f4ce32eee8bebaefff5aea95e8454
Certificate serial:       45EF7D3625091662A439B605F0B6AC13C6C226DC
Authority key identifier: 75:E8:A0:27:E9:2C:15:B9:41:4A:59:AC:09:6B:D4:63:4B:90:69:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9aeaefa1-9009-4d41-9090-b27ec04ef7ef/a928fd66fc0487f5bba93f4ce32eee8bebaefff5aea95e8454.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/6/32332e3135322e3232342e302f32342d3234203d3e203533333536.roa
Signing time:             Tue 16 Jul 2024 02:42:29 +0000
ROA not before:           Tue 16 Jul 2024 02:37:29 +0000
ROA not after:            Tue 15 Jul 2025 02:42:29 +0000
asID:                     53356
IP address blocks:        23.152.224.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/6/75E8A027E92C15B9414A59AC096BD4634B906914.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/6/75E8A027E92C15B9414A59AC096BD4634B906914.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9aeaefa1-9009-4d41-9090-b27ec04ef7ef/a928fd66fc0487f5bba93f4ce32eee8bebaefff5aea95e8454.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9aeaefa1-9009-4d41-9090-b27ec04ef7ef/9aeaefa1-9009-4d41-9090-b27ec04ef7ef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9aeaefa1-9009-4d41-9090-b27ec04ef7ef/9aeaefa1-9009-4d41-9090-b27ec04ef7ef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9aeaefa1-9009-4d41-9090-b27ec04ef7ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 21:43:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:ef:7d:36:25:09:16:62:a4:39:b6:05:f0:b6:ac:13:c6:c2:26:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a928fd66fc0487f5bba93f4ce32eee8bebaefff5aea95e8454
        Validity
            Not Before: Jul 16 02:37:29 2024 GMT
            Not After : Jul 15 02:42:29 2025 GMT
        Subject: CN=F6D5F89BDCFE9F277B47E03D0BC2A06F49234288
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:46:79:c7:bf:7d:06:90:00:41:ab:7f:45:b4:
                    a4:13:d1:89:39:ab:3c:67:a4:47:e0:74:b0:98:a2:
                    70:68:70:7b:83:c3:e1:e3:15:7e:88:02:67:f2:15:
                    66:5f:df:0e:44:67:f2:49:04:a7:30:ea:a8:af:8d:
                    4f:62:c8:5d:8b:f1:85:19:7f:d5:09:b4:af:f5:9b:
                    bd:82:87:ae:d9:72:e9:82:82:ce:60:ce:bb:12:34:
                    f8:18:2e:e4:19:b0:8e:40:ab:72:d1:e6:4d:86:1d:
                    d2:cc:42:33:fc:b5:98:de:a5:1c:c1:0d:04:81:0f:
                    b0:6b:60:91:16:5a:35:39:5a:c0:37:9e:1f:04:d8:
                    8c:ab:07:37:86:cd:ea:12:58:d4:f3:5b:ed:d2:a6:
                    c1:d5:99:4f:16:0f:f2:98:aa:e0:eb:b8:f8:24:81:
                    a0:cf:f6:3a:01:8a:c6:4e:22:86:73:ac:a1:f8:69:
                    14:17:63:45:36:fd:d3:06:0d:e9:30:33:84:8b:92:
                    6d:d6:70:dd:48:07:39:7f:cb:5b:62:d7:30:d5:bf:
                    df:77:11:71:16:54:ac:af:3b:75:6d:5c:90:f5:d3:
                    e3:64:e6:09:4b:c8:f4:e8:29:e4:1d:89:d1:78:fd:
                    b6:0c:26:95:ff:bd:7e:5d:27:5e:e1:be:79:ba:2f:
                    ad:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:D5:F8:9B:DC:FE:9F:27:7B:47:E0:3D:0B:C2:A0:6F:49:23:42:88
            X509v3 Authority Key Identifier:
                keyid:75:E8:A0:27:E9:2C:15:B9:41:4A:59:AC:09:6B:D4:63:4B:90:69:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/6/75E8A027E92C15B9414A59AC096BD4634B906914.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9aeaefa1-9009-4d41-9090-b27ec04ef7ef/a928fd66fc0487f5bba93f4ce32eee8bebaefff5aea95e8454.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/6/32332e3135322e3232342e302f32342d3234203d3e203533333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.152.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ba:30:9a:f8:d3:b9:17:28:ec:1a:a0:9c:0c:ca:72:9f:74:cb:
         5f:c7:ec:f4:85:66:71:0c:66:2f:2b:ad:d6:85:5b:5f:fd:e3:
         2c:9c:68:b8:38:06:f6:3a:14:73:1a:a2:e6:cd:8d:03:59:2d:
         b5:87:2a:b3:29:64:7a:1c:1c:40:b5:fc:f3:9b:59:8f:6e:d1:
         ed:da:20:26:88:a1:8d:39:ff:41:f5:0e:eb:9a:5c:a8:a3:d2:
         49:c8:84:31:94:56:ea:cb:a9:d3:78:c1:0c:92:08:ee:c7:48:
         ac:85:f9:45:06:57:4f:84:78:4b:26:5b:1d:30:40:71:b0:a4:
         a6:86:25:e7:6b:10:c8:39:87:ee:01:89:70:75:48:dc:8b:9f:
         29:54:ec:77:fa:fe:41:f5:70:2a:a1:94:05:15:3a:75:91:bd:
         fb:31:72:9c:c1:c4:64:39:14:e4:cb:9f:ed:02:12:27:3b:97:
         ee:cb:d5:35:a4:8d:99:2a:90:a8:3e:83:36:e7:ad:39:aa:7a:
         14:9c:c4:ca:ed:51:ae:be:26:be:6a:0e:d0:ef:58:91:be:76:
         09:07:4c:8f:29:7f:06:0b:80:4e:a8:ca:b7:63:66:18:13:ee:
         14:0d:72:33:78:42:5d:11:20:28:29:03:3e:8c:cf:97:78:4e:
         df:1d:e5:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:35:05 2024 by rpki-client on console-ams.rpki-client.org