Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/6/32332e3135322e3232362e302f32342d3234203d3e203533333536.roa
File:                     32332e3135322e3232362e302f32342d3234203d3e203533333536.roa (raw, json)
Hash identifier:          +801GtkNfprKoCwNF4hmRZ84uIa/EaGNz/ZiU2/w6Ec=
Subject key identifier:   0F:C3:89:AF:C3:12:CF:71:66:36:4F:F1:06:9E:F6:1C:48:05:1C:6C
Certificate issuer:       /CN=a928fd66fc0487f5bba93f4ce32eee8bebaefff5aea95e8454
Certificate serial:       35BA6FC2E584D29387082A397D77FAE26F882753
Authority key identifier: 75:E8:A0:27:E9:2C:15:B9:41:4A:59:AC:09:6B:D4:63:4B:90:69:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9aeaefa1-9009-4d41-9090-b27ec04ef7ef/a928fd66fc0487f5bba93f4ce32eee8bebaefff5aea95e8454.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/6/32332e3135322e3232362e302f32342d3234203d3e203533333536.roa
Signing time:             Tue 16 Jul 2024 02:42:29 +0000
ROA not before:           Tue 16 Jul 2024 02:37:29 +0000
ROA not after:            Tue 15 Jul 2025 02:42:29 +0000
asID:                     53356
IP address blocks:        23.152.226.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/6/75E8A027E92C15B9414A59AC096BD4634B906914.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/6/75E8A027E92C15B9414A59AC096BD4634B906914.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9aeaefa1-9009-4d41-9090-b27ec04ef7ef/a928fd66fc0487f5bba93f4ce32eee8bebaefff5aea95e8454.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9aeaefa1-9009-4d41-9090-b27ec04ef7ef/9aeaefa1-9009-4d41-9090-b27ec04ef7ef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9aeaefa1-9009-4d41-9090-b27ec04ef7ef/9aeaefa1-9009-4d41-9090-b27ec04ef7ef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9aeaefa1-9009-4d41-9090-b27ec04ef7ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 21:43:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:ba:6f:c2:e5:84:d2:93:87:08:2a:39:7d:77:fa:e2:6f:88:27:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a928fd66fc0487f5bba93f4ce32eee8bebaefff5aea95e8454
        Validity
            Not Before: Jul 16 02:37:29 2024 GMT
            Not After : Jul 15 02:42:29 2025 GMT
        Subject: CN=0FC389AFC312CF7166364FF1069EF61C48051C6C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:17:b8:1d:f3:ff:cc:97:5d:9b:09:9c:5e:6b:
                    ed:ae:ad:6f:c0:68:6d:fd:dd:aa:84:6a:da:9d:f3:
                    da:38:8d:4c:e1:24:a1:75:d9:02:11:b4:70:78:06:
                    66:30:26:54:c0:bc:00:c3:52:fd:04:b3:8c:e0:9e:
                    e5:75:35:5d:a2:80:81:07:fb:ca:71:59:34:c6:be:
                    0a:2c:ba:b0:70:82:f5:38:5b:0d:7f:f6:02:60:c8:
                    e0:cc:03:94:2e:5d:b6:57:a7:30:69:ff:61:ff:3b:
                    fe:a5:62:15:e5:50:da:8d:e7:65:eb:af:f5:72:d5:
                    0b:ea:d8:8d:eb:c6:2d:a4:2d:c8:c1:86:b1:73:44:
                    7b:fd:c3:67:76:cc:67:10:05:3b:f6:91:59:ca:91:
                    d1:7b:c8:86:70:68:5c:12:e9:b6:ed:ae:cd:6e:28:
                    67:8a:fa:37:a4:ab:10:27:72:04:dd:5b:6f:ad:0f:
                    3d:9f:4d:2d:3b:05:60:96:b4:48:5b:04:01:21:81:
                    d4:be:0b:2a:8d:bc:e6:65:da:95:cf:a9:0a:7d:cb:
                    ac:4e:e3:cd:75:e8:40:2c:96:0f:84:57:34:9e:12:
                    07:bb:9e:de:ea:7f:8c:13:f1:53:0e:6b:22:84:5f:
                    49:25:59:99:f9:c1:4a:ce:25:39:ee:99:13:b9:ca:
                    b6:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:C3:89:AF:C3:12:CF:71:66:36:4F:F1:06:9E:F6:1C:48:05:1C:6C
            X509v3 Authority Key Identifier:
                keyid:75:E8:A0:27:E9:2C:15:B9:41:4A:59:AC:09:6B:D4:63:4B:90:69:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/6/75E8A027E92C15B9414A59AC096BD4634B906914.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9aeaefa1-9009-4d41-9090-b27ec04ef7ef/a928fd66fc0487f5bba93f4ce32eee8bebaefff5aea95e8454.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/6/32332e3135322e3232362e302f32342d3234203d3e203533333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.152.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:f1:d5:be:2f:83:dc:8d:81:9f:a4:0a:a2:31:e6:db:34:cf:
         2d:ac:bf:bd:0a:7d:d6:54:4d:9c:cc:dc:50:3f:9c:34:58:09:
         d7:3b:e3:ac:db:06:91:9f:b8:15:76:94:9a:85:2f:b3:df:a0:
         e4:95:37:2a:50:2c:11:c6:29:5b:08:2a:bd:42:18:23:4f:23:
         6a:7c:9e:47:48:b8:0c:c0:dc:cd:5c:5a:43:24:7b:11:a2:90:
         d2:8c:fc:f3:ff:14:f9:0d:a5:ec:4a:2b:eb:04:a9:0d:30:f6:
         ba:37:27:9b:81:2e:8f:9a:71:f1:2f:30:f3:cc:94:de:d4:17:
         65:ae:3a:07:3e:ca:4b:c2:70:e6:81:ad:3e:e6:ee:21:e9:f2:
         6f:92:2b:da:c6:c0:c2:3b:3d:16:e2:39:45:23:70:f2:54:cf:
         dc:d3:cd:72:1d:60:9a:bb:40:7a:61:e8:ea:00:5e:fe:74:0f:
         6e:b2:b9:c1:c1:5c:f7:4d:6f:8c:85:65:f5:aa:14:c0:0a:13:
         5d:d7:6d:f4:d9:79:30:4d:96:5f:41:97:2e:2b:e0:b7:55:52:
         0b:05:fd:ea:d6:40:5a:87:46:4b:9a:2e:fa:de:c4:8c:eb:59:
         fb:e1:b9:9e:ec:56:c2:d4:e4:a0:96:00:f0:0a:1f:42:5c:67:
         02:03:3d:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:34:43 2024 by rpki-client on console-fra.rpki-client.org