Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/6/32332e3135322e3232352e302f32342d3234203d3e20323035353532.roa
File:                     32332e3135322e3232352e302f32342d3234203d3e20323035353532.roa (raw, json)
Hash identifier:          y1Ft7P43CqaUuL7mNntgQDCmR+HyFibt3FaaN86qAIg=
Subject key identifier:   87:F7:31:9F:C1:86:3F:D9:91:B0:DB:CA:0A:5E:DB:79:06:0F:13:54
Certificate issuer:       /CN=a928fd66fc0487f5bba93f4ce32eee8bebaefff5aea95e8454
Certificate serial:       7A0C4F8439CFF15D03B464607ACEE914B4113742
Authority key identifier: 75:E8:A0:27:E9:2C:15:B9:41:4A:59:AC:09:6B:D4:63:4B:90:69:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9aeaefa1-9009-4d41-9090-b27ec04ef7ef/a928fd66fc0487f5bba93f4ce32eee8bebaefff5aea95e8454.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/6/32332e3135322e3232352e302f32342d3234203d3e20323035353532.roa
Signing time:             Sat 16 Nov 2024 22:04:37 +0000
ROA not before:           Sat 16 Nov 2024 21:59:37 +0000
ROA not after:            Sat 15 Nov 2025 22:04:37 +0000
asID:                     205552
IP address blocks:        23.152.225.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/6/75E8A027E92C15B9414A59AC096BD4634B906914.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/6/75E8A027E92C15B9414A59AC096BD4634B906914.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9aeaefa1-9009-4d41-9090-b27ec04ef7ef/a928fd66fc0487f5bba93f4ce32eee8bebaefff5aea95e8454.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9aeaefa1-9009-4d41-9090-b27ec04ef7ef/9aeaefa1-9009-4d41-9090-b27ec04ef7ef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9aeaefa1-9009-4d41-9090-b27ec04ef7ef/9aeaefa1-9009-4d41-9090-b27ec04ef7ef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9aeaefa1-9009-4d41-9090-b27ec04ef7ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 21:43:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:0c:4f:84:39:cf:f1:5d:03:b4:64:60:7a:ce:e9:14:b4:11:37:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a928fd66fc0487f5bba93f4ce32eee8bebaefff5aea95e8454
        Validity
            Not Before: Nov 16 21:59:37 2024 GMT
            Not After : Nov 15 22:04:37 2025 GMT
        Subject: CN=87F7319FC1863FD991B0DBCA0A5EDB79060F1354
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:3a:20:99:3e:c3:da:13:e6:f9:02:59:be:fc:
                    d8:1b:48:c9:f3:59:0b:8c:82:25:7b:e6:eb:f8:81:
                    39:c0:af:43:20:6d:db:16:63:c5:3a:d2:17:ea:ec:
                    d1:72:5a:4e:e9:61:c6:7a:9e:d2:ba:82:f0:c6:5b:
                    ca:41:12:ac:54:6b:58:2a:43:f3:88:03:f5:73:88:
                    7b:8f:51:d4:bc:ff:6d:46:8f:d8:04:a1:de:cd:a3:
                    b6:97:a5:94:bd:49:5a:b7:67:3d:53:5d:0d:3d:63:
                    bc:38:11:d6:54:de:92:23:40:c3:e6:b5:a7:e8:0f:
                    57:12:48:29:84:1a:2d:df:a8:62:2d:04:46:c7:aa:
                    3c:51:78:b7:7a:55:09:f4:4f:40:12:6d:a9:f8:22:
                    da:33:0a:cc:99:68:cf:2d:5c:cb:3f:47:92:24:ef:
                    2e:c1:31:b4:e5:58:dc:73:6d:50:87:39:55:40:8f:
                    2f:76:c6:12:5b:5e:5e:3f:f2:bd:8c:d5:18:c7:60:
                    26:3e:ba:2a:cd:d2:ae:e8:86:4b:bb:2e:89:f9:61:
                    78:9e:4a:58:8c:8c:80:55:c9:85:1f:c7:cf:79:d8:
                    cb:c9:93:ae:e3:ac:1a:ea:08:67:ee:ef:0c:51:9c:
                    aa:3e:e7:3f:f4:55:c3:e9:4f:51:eb:40:87:58:fb:
                    ab:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:F7:31:9F:C1:86:3F:D9:91:B0:DB:CA:0A:5E:DB:79:06:0F:13:54
            X509v3 Authority Key Identifier:
                keyid:75:E8:A0:27:E9:2C:15:B9:41:4A:59:AC:09:6B:D4:63:4B:90:69:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/6/75E8A027E92C15B9414A59AC096BD4634B906914.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9aeaefa1-9009-4d41-9090-b27ec04ef7ef/a928fd66fc0487f5bba93f4ce32eee8bebaefff5aea95e8454.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/6/32332e3135322e3232352e302f32342d3234203d3e20323035353532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.152.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:8e:44:68:3b:90:2b:30:c8:dd:a4:bb:bd:8b:26:b3:0e:dd:
         e5:99:03:71:ab:c1:6c:45:b9:88:1a:7d:b9:f0:27:3f:a0:64:
         c6:48:62:86:b9:16:b7:d9:49:8c:a1:67:e3:ab:df:e2:4a:9f:
         1f:c8:d6:18:96:08:22:96:4e:10:43:90:3b:3c:14:22:43:46:
         45:6e:86:5f:83:14:08:fd:dd:00:b4:1e:d5:61:bd:70:76:69:
         ed:c9:19:ac:ad:ba:98:21:5e:de:8c:56:38:b0:a7:34:27:5b:
         24:45:6f:ee:70:bf:78:46:61:49:3d:32:a3:4c:5a:4e:3b:99:
         12:ec:fb:b1:eb:71:9d:31:e5:d7:05:a2:f5:3d:d5:92:36:61:
         22:82:3e:2f:b6:5b:6c:29:de:44:f2:6a:9c:d9:b6:9a:cc:72:
         15:05:26:a7:55:20:c6:4a:c0:89:66:73:96:24:8a:0c:df:68:
         a5:33:66:3a:85:27:e0:94:57:e3:6c:72:e8:06:79:e3:6f:80:
         cd:05:a2:20:c0:b6:73:9a:0a:be:9a:e0:d8:ab:c6:62:1d:08:
         3c:16:66:62:a0:f6:1e:38:27:19:bd:05:41:3a:a6:0c:21:c7:
         0c:a4:b5:ec:92:5e:20:e1:e5:b4:f2:e2:a2:e8:a3:be:2b:28:
         68:5a:00:e8
-----BEGIN CERTIFICATE-----
MIIFiDCCBHCgAwIBAgIUegxPhDnP8V0DtGRges7pFLQRN0IwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYTkyOGZkNjZmYzA0ODdmNWJiYTkzZjRjZTMyZWVlOGJl
YmFlZmZmNWFlYTk1ZTg0NTQwHhcNMjQxMTE2MjE1OTM3WhcNMjUxMTE1MjIwNDM3
WjAzMTEwLwYDVQQDEyg4N0Y3MzE5RkMxODYzRkQ5OTFCMERCQ0EwQTVFREI3OTA2
MEYxMzU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjogmT7D2hPm
+QJZvvzYG0jJ81kLjIIle+br+IE5wK9DIG3bFmPFOtIX6uzRclpO6WHGep7SuoLw
xlvKQRKsVGtYKkPziAP1c4h7j1HUvP9tRo/YBKHezaO2l6WUvUlat2c9U10NPWO8
OBHWVN6SI0DD5rWn6A9XEkgphBot36hiLQRGx6o8UXi3elUJ9E9AEm2p+CLaMwrM
mWjPLVzLP0eSJO8uwTG05Vjcc21QhzlVQI8vdsYSW15eP/K9jNUYx2AmProqzdKu
6IZLuy6J+WF4nkpYjIyAVcmFH8fPedjLyZOu46wa6ghn7u8MUZyqPuc/9FXD6U9R
60CHWPurrwIDAQABo4ICiDCCAoQwHQYDVR0OBBYEFIf3MZ/Bhj/ZkbDbygpe23kG
DxNUMB8GA1UdIwQYMBaAFHXooCfpLBW5QUpZrAlr1GNLkGkUMA4GA1UdDwEB/wQE
AwIHgDBxBgNVHR8EajBoMGagZKBihmByc3luYzovL3Jwa2kuYWRtaW4uZnJlZXJh
bmdlY2xvdWQuY29tL3JlcG8vRlJDLUNBLzYvNzVFOEEwMjdFOTJDMTVCOTQxNEE1
OUFDMDk2QkQ0NjM0QjkwNjkxNC5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZm
ZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzlhZWFlZmExLTkwMDkt
NGQ0MS05MDkwLWIyN2VjMDRlZjdlZi9hOTI4ZmQ2NmZjMDQ4N2Y1YmJhOTNmNGNl
MzJlZWU4YmViYWVmZmY1YWVhOTVlODQ1NC5jZXIwgY0GCCsGAQUFBwELBIGAMH4w
fAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5j
b20vcmVwby9GUkMtQ0EvNi8zMjMzMmUzMTM1MzIyZTMyMzIzNTJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMyMzAzNTM1MzUzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEABeY4TANBgkqhkiG
9w0BAQsFAAOCAQEAkY5EaDuQKzDI3aS7vYsmsw7d5ZkDcavBbEW5iBp9ufAnP6Bk
xkhihrkWt9lJjKFn46vf4kqfH8jWGJYIIpZOEEOQOzwUIkNGRW6GX4MUCP3dALQe
1WG9cHZp7ckZrK26mCFe3oxWOLCnNCdbJEVv7nC/eEZhST0yo0xaTjuZEuz7setx
nTHl1wWi9T3VkjZhIoI+L7ZbbCneRPJqnNm2msxyFQUmp1UgxkrAiWZzliSKDN9o
pTNmOoUn4JRX42xy6AZ542+AzQWiIMC2c5oKvprg2KvGYh0IPBZmYqD2HjgnGb0F
QTqmDCHHDKS17JJeIOHltPLiouijvisoaFoA6A==
-----END CERTIFICATE-----
Generated at Thu Nov 21 22:34:43 2024 by rpki-client on console-fra.rpki-client.org