Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/6/32332e3135322e3232352e302f32342d3234203d3e20323135303538.roa
File:                     32332e3135322e3232352e302f32342d3234203d3e20323135303538.roa (raw, json)
Hash identifier:          fwsQkIwLjP+Iia62m8cJFhm82SSu9DOe31MzpU8uzOI=
Subject key identifier:   98:3E:20:12:4D:06:96:9E:C9:69:B6:5D:6B:94:16:27:C2:7C:52:38
Certificate issuer:       /CN=a928fd66fc0487f5bba93f4ce32eee8bebaefff5aea95e8454
Certificate serial:       054397177D35C4C6D7D88F014B947C46511EA8C1
Authority key identifier: 75:E8:A0:27:E9:2C:15:B9:41:4A:59:AC:09:6B:D4:63:4B:90:69:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9aeaefa1-9009-4d41-9090-b27ec04ef7ef/a928fd66fc0487f5bba93f4ce32eee8bebaefff5aea95e8454.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/6/32332e3135322e3232352e302f32342d3234203d3e20323135303538.roa
Signing time:             Sun 17 Nov 2024 00:38:23 +0000
ROA not before:           Sun 17 Nov 2024 00:33:23 +0000
ROA not after:            Sun 16 Nov 2025 00:38:23 +0000
asID:                     215058
IP address blocks:        23.152.225.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/6/75E8A027E92C15B9414A59AC096BD4634B906914.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/6/75E8A027E92C15B9414A59AC096BD4634B906914.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9aeaefa1-9009-4d41-9090-b27ec04ef7ef/a928fd66fc0487f5bba93f4ce32eee8bebaefff5aea95e8454.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9aeaefa1-9009-4d41-9090-b27ec04ef7ef/9aeaefa1-9009-4d41-9090-b27ec04ef7ef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9aeaefa1-9009-4d41-9090-b27ec04ef7ef/9aeaefa1-9009-4d41-9090-b27ec04ef7ef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9aeaefa1-9009-4d41-9090-b27ec04ef7ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 20:58:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:43:97:17:7d:35:c4:c6:d7:d8:8f:01:4b:94:7c:46:51:1e:a8:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a928fd66fc0487f5bba93f4ce32eee8bebaefff5aea95e8454
        Validity
            Not Before: Nov 17 00:33:23 2024 GMT
            Not After : Nov 16 00:38:23 2025 GMT
        Subject: CN=983E20124D06969EC969B65D6B941627C27C5238
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:21:ed:7a:06:7a:55:71:9b:85:49:37:9a:9b:
                    51:7c:f0:62:a2:28:e8:d8:cd:7c:eb:be:ad:ab:ad:
                    40:2e:72:71:92:9d:4a:c7:3f:82:65:ad:b6:66:bd:
                    b5:b3:4c:71:bd:5f:bc:a2:1a:29:ba:9c:54:a1:61:
                    7d:2f:a4:1c:63:e3:61:1b:ad:c2:cc:56:ca:2c:6f:
                    ff:2e:7a:c6:af:2a:97:cc:30:b3:82:f8:88:04:94:
                    a2:19:fe:c2:31:d5:50:63:47:c9:2f:9d:fe:3f:55:
                    94:80:36:68:f7:3a:e1:c2:81:13:b7:d8:93:5a:c1:
                    d6:f1:31:95:e3:ce:68:76:76:e4:12:97:fe:4c:3c:
                    38:b1:a7:d5:38:94:2c:ad:e1:98:20:64:7e:01:02:
                    56:e0:72:7d:01:14:a4:40:c1:10:82:b8:aa:73:3d:
                    e8:a1:6b:53:c4:90:5a:d4:60:d4:97:41:a2:1c:03:
                    4a:f4:04:0e:26:24:32:22:d7:09:de:76:ea:90:55:
                    00:ff:67:d8:fe:50:69:7b:b4:6a:87:e1:e8:24:40:
                    a6:6d:ec:72:0f:73:bc:82:13:eb:53:c5:09:e6:ea:
                    94:07:ab:6d:bc:5a:5c:4d:36:aa:2f:4f:d9:3e:46:
                    fa:3b:13:48:74:72:c5:18:54:3f:c6:82:c5:89:2b:
                    85:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:3E:20:12:4D:06:96:9E:C9:69:B6:5D:6B:94:16:27:C2:7C:52:38
            X509v3 Authority Key Identifier:
                keyid:75:E8:A0:27:E9:2C:15:B9:41:4A:59:AC:09:6B:D4:63:4B:90:69:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/6/75E8A027E92C15B9414A59AC096BD4634B906914.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9aeaefa1-9009-4d41-9090-b27ec04ef7ef/a928fd66fc0487f5bba93f4ce32eee8bebaefff5aea95e8454.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/6/32332e3135322e3232352e302f32342d3234203d3e20323135303538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.152.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:49:f0:ae:f4:ac:df:c0:28:4e:09:8e:07:9a:50:84:8d:c2:
         33:2c:90:09:56:62:3a:ea:90:06:d1:83:9c:0a:ff:31:5c:cc:
         69:f9:07:7c:92:1d:0a:75:cc:e7:cf:27:3e:a3:7f:11:7e:2b:
         20:51:c7:e9:8e:0d:25:0a:e6:7e:f6:86:98:bd:32:19:84:d3:
         f1:08:44:7b:1a:b9:75:da:21:4b:14:54:94:87:85:72:63:23:
         ef:e8:c5:fd:06:25:44:95:98:8f:a5:83:5c:d6:26:98:2e:86:
         9e:63:6f:8d:37:31:e8:1e:06:91:be:78:cf:ec:09:53:8e:eb:
         78:03:37:53:21:85:29:e2:bb:f3:24:52:eb:0a:e1:e8:8e:b0:
         2e:9a:97:3c:a6:eb:fb:bd:25:e8:86:2d:98:2f:37:27:31:35:
         40:68:bc:09:b3:80:20:1f:64:23:66:0c:2b:cf:50:46:dc:53:
         a4:8a:f3:ad:cc:a9:30:d7:b2:b7:8d:cb:d8:fb:d1:04:20:1e:
         36:bd:37:28:d2:43:b1:ef:46:3c:87:21:32:c7:ba:2b:70:dd:
         87:6d:ec:c8:5e:5f:04:ae:fb:71:ac:0c:e2:7f:95:09:e3:fa:
         24:23:b9:b2:31:6f:0c:d9:6b:96:d0:6d:f5:fe:b9:fa:45:51:
         24:40:7c:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:55 2024 by rpki-client on console-fra.rpki-client.org