Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/6/32332e3135322e3232352e302f32342d3234203d3e203533333536.roa
File:                     32332e3135322e3232352e302f32342d3234203d3e203533333536.roa (raw, json)
Hash identifier:          e2P2tox/kAjI9yyxOAn3PkweYZyDVbTd2RZJbP38esY=
Subject key identifier:   91:83:E5:F7:06:F9:E3:1E:3E:2E:94:18:84:D4:26:BA:8D:FE:BD:05
Certificate issuer:       /CN=a928fd66fc0487f5bba93f4ce32eee8bebaefff5aea95e8454
Certificate serial:       6939C24254A7A4FFBAC1FB10D6AC01B4955F4F1A
Authority key identifier: 75:E8:A0:27:E9:2C:15:B9:41:4A:59:AC:09:6B:D4:63:4B:90:69:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9aeaefa1-9009-4d41-9090-b27ec04ef7ef/a928fd66fc0487f5bba93f4ce32eee8bebaefff5aea95e8454.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/6/32332e3135322e3232352e302f32342d3234203d3e203533333536.roa
Signing time:             Wed 05 Feb 2025 02:09:49 +0000
ROA not before:           Wed 05 Feb 2025 02:04:49 +0000
ROA not after:            Wed 04 Feb 2026 02:09:49 +0000
asID:                     53356
IP address blocks:        23.152.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/6/75E8A027E92C15B9414A59AC096BD4634B906914.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/6/75E8A027E92C15B9414A59AC096BD4634B906914.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9aeaefa1-9009-4d41-9090-b27ec04ef7ef/a928fd66fc0487f5bba93f4ce32eee8bebaefff5aea95e8454.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9aeaefa1-9009-4d41-9090-b27ec04ef7ef/9aeaefa1-9009-4d41-9090-b27ec04ef7ef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9aeaefa1-9009-4d41-9090-b27ec04ef7ef/9aeaefa1-9009-4d41-9090-b27ec04ef7ef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9aeaefa1-9009-4d41-9090-b27ec04ef7ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Apr 2025 16:45:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:39:c2:42:54:a7:a4:ff:ba:c1:fb:10:d6:ac:01:b4:95:5f:4f:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a928fd66fc0487f5bba93f4ce32eee8bebaefff5aea95e8454
        Validity
            Not Before: Feb  5 02:04:49 2025 GMT
            Not After : Feb  4 02:09:49 2026 GMT
        Subject: CN=9183E5F706F9E31E3E2E941884D426BA8DFEBD05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:2f:15:98:06:1f:04:d8:a6:26:c5:58:99:1e:
                    fd:62:7a:ff:65:f3:3b:80:9e:a1:af:58:2a:d1:00:
                    1b:5d:9d:f0:79:cc:2c:2e:6b:59:be:2a:40:db:d8:
                    f7:42:38:e1:73:b4:fa:24:b1:a6:e5:5a:ef:78:7c:
                    11:29:a4:e4:ba:c1:33:6f:3f:3e:da:72:40:55:c4:
                    c4:ba:52:d7:da:80:19:1b:ec:9e:c7:d7:dc:e2:e7:
                    06:d5:27:fd:94:d2:8c:1c:3b:1f:ab:6b:0b:e3:f2:
                    a9:cc:fa:35:45:4c:f5:b6:58:dd:68:87:19:0c:c9:
                    9d:4a:56:aa:3a:1f:26:c8:4a:48:31:b0:b8:14:45:
                    52:06:bc:31:e8:22:ec:70:27:89:41:28:bd:97:83:
                    6a:6a:7b:db:90:12:d5:7c:b0:6b:f5:88:8f:99:4d:
                    8a:54:1f:74:7f:9f:11:6a:7e:43:e7:ee:62:fe:d6:
                    f5:bb:af:b4:90:54:e9:15:b7:e5:a9:a6:91:07:71:
                    9f:d6:d7:3d:0f:6c:23:98:c0:47:1b:6c:7b:a8:2f:
                    5c:bb:04:f6:a0:59:5c:f2:47:cf:8a:ee:73:e4:2e:
                    4a:c8:b1:2c:f7:6b:5b:e1:27:da:f3:ee:cb:db:9b:
                    91:9f:b9:72:dd:20:8a:36:64:64:dc:63:a4:2c:34:
                    6d:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:83:E5:F7:06:F9:E3:1E:3E:2E:94:18:84:D4:26:BA:8D:FE:BD:05
            X509v3 Authority Key Identifier:
                keyid:75:E8:A0:27:E9:2C:15:B9:41:4A:59:AC:09:6B:D4:63:4B:90:69:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/6/75E8A027E92C15B9414A59AC096BD4634B906914.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9aeaefa1-9009-4d41-9090-b27ec04ef7ef/a928fd66fc0487f5bba93f4ce32eee8bebaefff5aea95e8454.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/6/32332e3135322e3232352e302f32342d3234203d3e203533333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.152.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:a5:7f:26:bc:98:a1:3d:c5:ea:86:9c:25:ab:50:9c:05:6b:
         7c:90:9b:3e:9f:87:2b:f2:3e:95:1d:d7:39:6e:ef:d5:e0:4e:
         ad:00:19:e9:c4:d2:8f:e5:98:75:8a:8c:36:19:17:87:0c:2a:
         53:aa:9a:3f:90:51:81:4b:e3:c0:c1:a5:95:cc:98:6a:2b:58:
         b1:91:db:1f:8c:0b:50:50:77:1a:e0:d3:04:76:0c:db:16:b4:
         a1:6a:b0:9f:b0:b9:ae:c0:d0:87:6d:f1:6f:f6:67:70:e3:e3:
         f8:a6:53:e5:40:5c:c6:ed:30:a9:20:d0:5b:34:3b:31:33:31:
         ac:6a:e3:76:83:97:3d:52:08:65:4c:de:32:56:fe:ef:5d:54:
         d9:7f:25:b6:fd:d4:df:83:ea:7a:e2:8f:4e:4c:fb:24:30:c6:
         df:e9:91:13:ae:0e:82:b9:bf:17:cf:4c:41:44:9b:1d:b7:ef:
         55:f7:94:d1:2f:88:f0:de:31:d7:dd:f1:8b:0b:39:f1:ae:1a:
         30:02:7d:58:77:a5:09:19:36:6a:bf:e9:26:a7:38:4e:bd:8a:
         c1:b0:51:ae:ce:6f:f8:36:fb:1e:e3:b5:44:07:0b:35:1a:87:
         e1:79:48:1e:74:6c:cc:c7:12:9f:3b:da:a6:70:77:ed:75:b2:
         da:d9:8c:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 08:12:36 2025 by rpki-client