Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/6/32332e3135322e3232362e302f32342d3234203d3e203533333536.roa
File:                     32332e3135322e3232362e302f32342d3234203d3e203533333536.roa (raw, json)
Hash identifier:          YkJSsQLgE3cmEd5vt3hTkaNLl2i8hwdi1SHSHaXSrE8=
Subject key identifier:   A1:10:5F:F2:6E:6C:A4:FA:89:22:22:06:8C:B1:98:0D:64:87:47:E1
Certificate issuer:       /CN=a928fd66fc0487f5bba93f4ce32eee8bebaefff5aea95e8454
Certificate serial:       0EFDAF34D346ED12E857476DCCEA86E6B9718BA0
Authority key identifier: 75:E8:A0:27:E9:2C:15:B9:41:4A:59:AC:09:6B:D4:63:4B:90:69:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9aeaefa1-9009-4d41-9090-b27ec04ef7ef/a928fd66fc0487f5bba93f4ce32eee8bebaefff5aea95e8454.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/6/32332e3135322e3232362e302f32342d3234203d3e203533333536.roa
Signing time:             Tue 19 May 2026 04:03:19 +0000
ROA not before:           Tue 19 May 2026 03:58:19 +0000
ROA not after:            Tue 18 May 2027 04:03:19 +0000
asID:                     53356
IP address blocks:        23.152.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/6/75E8A027E92C15B9414A59AC096BD4634B906914.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/6/75E8A027E92C15B9414A59AC096BD4634B906914.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9aeaefa1-9009-4d41-9090-b27ec04ef7ef/a928fd66fc0487f5bba93f4ce32eee8bebaefff5aea95e8454.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9aeaefa1-9009-4d41-9090-b27ec04ef7ef/9aeaefa1-9009-4d41-9090-b27ec04ef7ef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9aeaefa1-9009-4d41-9090-b27ec04ef7ef/9aeaefa1-9009-4d41-9090-b27ec04ef7ef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9aeaefa1-9009-4d41-9090-b27ec04ef7ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 05 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:fd:af:34:d3:46:ed:12:e8:57:47:6d:cc:ea:86:e6:b9:71:8b:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a928fd66fc0487f5bba93f4ce32eee8bebaefff5aea95e8454
        Validity
            Not Before: May 19 03:58:19 2026 GMT
            Not After : May 18 04:03:19 2027 GMT
        Subject: CN=A1105FF26E6CA4FA892222068CB1980D648747E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:b0:b9:49:74:9d:0f:6d:09:8d:4d:ae:96:7d:
                    11:9c:46:46:4b:43:35:c2:bc:d0:bc:8f:30:4a:23:
                    5e:d9:fd:8c:42:28:af:1b:ac:63:52:8b:30:86:61:
                    37:56:39:f4:09:00:ca:71:57:59:e5:30:5a:c4:d3:
                    e6:d2:34:51:3c:b3:bc:7b:8c:71:40:aa:a0:7b:80:
                    75:5e:9c:fe:b7:cd:93:6e:7c:95:57:14:1f:1a:05:
                    79:e3:ad:77:45:47:6a:4a:5f:b4:02:e9:ee:f3:55:
                    c2:63:7e:a4:97:63:97:76:91:b3:32:bb:36:73:5e:
                    64:82:28:84:39:11:88:b7:bd:c4:d3:b5:c7:c9:a2:
                    ca:e5:f1:4b:0b:6e:d5:cd:40:af:a5:f2:41:48:70:
                    19:97:ec:e5:cb:47:ee:47:11:6a:97:31:0e:a7:e3:
                    33:0e:15:c8:be:aa:2d:ce:50:3a:bc:4a:e3:44:d5:
                    2b:e1:4a:3a:36:48:23:98:44:43:2e:af:54:a6:25:
                    0b:fd:2a:c1:29:5c:89:9c:45:67:58:79:9d:3b:70:
                    ee:ef:52:b4:57:fb:c8:de:71:7e:2c:69:5f:ae:ed:
                    7e:1b:d6:c5:c6:ce:29:89:69:df:29:ac:6a:13:f3:
                    2e:0f:c3:a6:63:ce:39:66:d9:65:04:c9:67:ae:ee:
                    98:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:10:5F:F2:6E:6C:A4:FA:89:22:22:06:8C:B1:98:0D:64:87:47:E1
            X509v3 Authority Key Identifier:
                keyid:75:E8:A0:27:E9:2C:15:B9:41:4A:59:AC:09:6B:D4:63:4B:90:69:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/6/75E8A027E92C15B9414A59AC096BD4634B906914.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9aeaefa1-9009-4d41-9090-b27ec04ef7ef/a928fd66fc0487f5bba93f4ce32eee8bebaefff5aea95e8454.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/6/32332e3135322e3232362e302f32342d3234203d3e203533333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.152.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:0a:39:fc:2f:d0:a8:07:6e:a4:a7:5f:c9:dc:83:f2:4a:8c:
         f1:23:a2:be:b3:d8:ab:93:1f:f3:34:73:12:ac:a7:bd:fd:f4:
         a3:96:ba:fb:17:89:7b:df:67:94:71:0d:e1:83:91:5c:f6:00:
         2e:54:2a:b6:bb:52:5a:27:e8:c6:37:ee:23:ea:7f:d4:04:c2:
         61:a5:5d:df:38:3a:fd:92:9f:38:fd:99:b9:27:ac:ff:29:81:
         8c:5b:ad:f2:a0:13:74:30:68:7f:92:1e:17:3f:42:6e:e8:c5:
         bd:15:2a:2e:40:87:e6:40:ec:c7:73:2b:bd:ff:08:0b:e2:a4:
         ea:f4:ad:7a:19:6b:7c:7a:71:c7:4e:20:12:49:76:1e:27:b9:
         41:09:ff:9e:f8:b4:72:d2:e4:be:f8:0c:40:67:26:45:80:26:
         3d:9a:e8:0c:ee:8f:b4:69:52:8a:f8:9b:1a:7b:ce:9e:ed:26:
         fd:3a:8f:94:38:a7:a4:11:f3:ba:90:5a:43:02:7f:eb:2e:68:
         87:d1:35:54:e2:66:e0:49:4f:52:48:d1:b9:f8:6a:d0:2f:f8:
         32:33:28:55:0a:c5:ad:e8:91:dc:00:0c:db:cb:6d:b4:d7:8d:
         39:b9:63:70:e5:e4:14:d3:e6:03:a0:37:28:51:47:97:a4:09:
         bd:1c:5c:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 11:08:52 2026 by rpki-client