Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/6/32332e3135322e3232352e302f32342d3234203d3e20323135313837.roa
File:                     32332e3135322e3232352e302f32342d3234203d3e20323135313837.roa (raw, json)
Hash identifier:          qqDOkoRzHO7X9hPdRAjd4i89Zr92XyK4MSaCDziSqyA=
Subject key identifier:   F0:57:79:AE:95:77:9F:93:37:31:98:E8:3D:93:3C:A3:47:63:A4:75
Certificate issuer:       /CN=a928fd66fc0487f5bba93f4ce32eee8bebaefff5aea95e8454
Certificate serial:       743C3859535ED77C4190EC4BAA6DE36C0ABF42A9
Authority key identifier: 75:E8:A0:27:E9:2C:15:B9:41:4A:59:AC:09:6B:D4:63:4B:90:69:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9aeaefa1-9009-4d41-9090-b27ec04ef7ef/a928fd66fc0487f5bba93f4ce32eee8bebaefff5aea95e8454.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/6/32332e3135322e3232352e302f32342d3234203d3e20323135313837.roa
Signing time:             Sat 07 Jun 2025 00:19:29 +0000
ROA not before:           Sat 07 Jun 2025 00:14:29 +0000
ROA not after:            Sat 06 Jun 2026 00:19:29 +0000
asID:                     215187
IP address blocks:        23.152.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/6/75E8A027E92C15B9414A59AC096BD4634B906914.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/6/75E8A027E92C15B9414A59AC096BD4634B906914.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9aeaefa1-9009-4d41-9090-b27ec04ef7ef/a928fd66fc0487f5bba93f4ce32eee8bebaefff5aea95e8454.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9aeaefa1-9009-4d41-9090-b27ec04ef7ef/9aeaefa1-9009-4d41-9090-b27ec04ef7ef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9aeaefa1-9009-4d41-9090-b27ec04ef7ef/9aeaefa1-9009-4d41-9090-b27ec04ef7ef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9aeaefa1-9009-4d41-9090-b27ec04ef7ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 11 Jun 2025 01:35:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:3c:38:59:53:5e:d7:7c:41:90:ec:4b:aa:6d:e3:6c:0a:bf:42:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a928fd66fc0487f5bba93f4ce32eee8bebaefff5aea95e8454
        Validity
            Not Before: Jun  7 00:14:29 2025 GMT
            Not After : Jun  6 00:19:29 2026 GMT
        Subject: CN=F05779AE95779F93373198E83D933CA34763A475
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ab:60:1b:2b:d3:b8:1b:cc:f5:8a:ec:5b:e4:
                    ac:68:69:a0:f6:64:e7:2b:16:ef:1b:57:18:31:39:
                    7f:46:40:fc:57:ea:94:1c:a5:9f:68:64:10:88:84:
                    f7:cb:93:92:ab:82:14:98:03:5d:e3:6b:81:d3:c4:
                    c3:b9:65:05:c9:1a:18:8a:c2:36:46:f2:0b:9d:99:
                    e5:7d:b2:05:10:a3:6d:af:47:d2:e8:00:fd:d9:c9:
                    59:ce:7b:9c:43:f2:34:74:53:e5:e9:ff:21:eb:11:
                    ff:93:9f:54:c5:05:03:98:99:83:ee:1e:4c:11:1f:
                    1e:5a:43:98:0e:cf:4d:d7:0a:2c:76:1c:35:a7:86:
                    d8:07:da:1f:8e:54:fb:e9:4e:82:54:b1:80:fb:4d:
                    18:e0:a5:4b:db:5a:47:7f:e5:08:37:c5:c8:4c:aa:
                    19:65:f6:e6:94:ba:82:9e:b0:e5:b1:0a:28:69:4c:
                    55:ab:13:a7:8f:25:51:e7:eb:fe:0a:1d:2e:40:06:
                    36:0d:d4:84:0d:90:fd:24:71:ec:d0:7b:dd:fc:97:
                    e8:ab:eb:21:7e:f3:bc:a0:ae:30:71:f4:9d:37:ca:
                    95:c7:c7:20:57:53:b3:1a:07:e8:80:78:97:d4:bc:
                    c6:eb:96:ed:5e:b9:e5:39:fc:48:60:2e:7a:8d:ff:
                    7a:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:57:79:AE:95:77:9F:93:37:31:98:E8:3D:93:3C:A3:47:63:A4:75
            X509v3 Authority Key Identifier:
                keyid:75:E8:A0:27:E9:2C:15:B9:41:4A:59:AC:09:6B:D4:63:4B:90:69:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/6/75E8A027E92C15B9414A59AC096BD4634B906914.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9aeaefa1-9009-4d41-9090-b27ec04ef7ef/a928fd66fc0487f5bba93f4ce32eee8bebaefff5aea95e8454.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/6/32332e3135322e3232352e302f32342d3234203d3e20323135313837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.152.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:27:c4:83:05:bd:66:3a:6f:ed:7e:fa:ed:a7:30:cf:87:be:
         e2:54:58:08:b3:fa:7d:65:91:94:7d:ed:b2:a6:29:c9:93:c5:
         33:25:b1:69:3e:e6:a5:e5:0e:21:a5:62:be:6e:3e:93:d0:62:
         68:f4:73:81:44:c1:0a:c1:45:4b:7d:2e:50:63:a6:60:12:b0:
         4a:70:76:66:70:b0:c9:2e:e1:fc:08:61:c7:46:f3:9a:7a:49:
         f4:c0:ba:96:1b:2b:48:b3:ad:e5:ba:19:b0:cb:d0:48:ed:99:
         65:8f:39:18:27:d0:fe:b7:68:45:50:bb:af:94:4d:5c:5d:bb:
         a7:46:2e:80:46:b7:a9:0f:4c:51:41:2f:8c:8c:59:94:05:18:
         fe:b4:44:c1:cf:d5:4c:f1:ec:05:65:1e:7e:61:6c:eb:7d:7b:
         94:8a:2f:f1:1d:cd:c1:18:68:38:4d:5b:d4:f4:00:f7:74:24:
         04:29:71:c3:b5:85:b7:ec:bc:63:7d:07:51:4c:d3:55:8a:b1:
         1e:b8:ad:d3:8c:34:95:dc:67:4c:41:68:64:2c:2a:5d:18:b4:
         f1:f5:39:00:79:6c:72:a9:2f:7d:f1:bb:0f:e8:b7:0f:fc:fd:
         dc:fd:8c:4b:ad:c5:f1:d7:83:21:a9:4b:85:91:e4:04:57:e8:
         55:26:91:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 11:57:38 2025 by rpki-client