Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/6/32332e3135322e3232362e302f32342d3234203d3e203533333536.roa
File:                     32332e3135322e3232362e302f32342d3234203d3e203533333536.roa (raw, json)
Hash identifier:          CZEMfcNsp8KfJgN4rfxnCKXv+f0c9bwHBrLkkfOYgDY=
Subject key identifier:   7B:52:3F:0D:78:21:7A:F3:F2:B0:9F:A3:12:28:01:E6:9D:E8:1F:42
Certificate issuer:       /CN=a928fd66fc0487f5bba93f4ce32eee8bebaefff5aea95e8454
Certificate serial:       60C59BE9610C743F67F0BF83C4DA60E988E175B2
Authority key identifier: 75:E8:A0:27:E9:2C:15:B9:41:4A:59:AC:09:6B:D4:63:4B:90:69:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9aeaefa1-9009-4d41-9090-b27ec04ef7ef/a928fd66fc0487f5bba93f4ce32eee8bebaefff5aea95e8454.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/6/32332e3135322e3232362e302f32342d3234203d3e203533333536.roa
Signing time:             Tue 15 Aug 2023 02:00:22 +0000
ROA not before:           Tue 15 Aug 2023 01:55:22 +0000
ROA not after:            Tue 13 Aug 2024 02:00:22 +0000
asID:                     53356
IP address blocks:        23.152.226.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/6/75E8A027E92C15B9414A59AC096BD4634B906914.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/6/75E8A027E92C15B9414A59AC096BD4634B906914.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9aeaefa1-9009-4d41-9090-b27ec04ef7ef/a928fd66fc0487f5bba93f4ce32eee8bebaefff5aea95e8454.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9aeaefa1-9009-4d41-9090-b27ec04ef7ef/9aeaefa1-9009-4d41-9090-b27ec04ef7ef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9aeaefa1-9009-4d41-9090-b27ec04ef7ef/9aeaefa1-9009-4d41-9090-b27ec04ef7ef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9aeaefa1-9009-4d41-9090-b27ec04ef7ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 18:06:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:c5:9b:e9:61:0c:74:3f:67:f0:bf:83:c4:da:60:e9:88:e1:75:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a928fd66fc0487f5bba93f4ce32eee8bebaefff5aea95e8454
        Validity
            Not Before: Aug 15 01:55:22 2023 GMT
            Not After : Aug 13 02:00:22 2024 GMT
        Subject: CN=7B523F0D78217AF3F2B09FA3122801E69DE81F42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:d8:58:4c:58:75:7c:a1:78:47:33:56:db:a3:
                    e2:88:6a:9c:20:c6:6d:35:67:fa:67:be:0e:a4:00:
                    5d:51:88:a9:65:17:7e:73:4d:07:21:5e:f6:fb:72:
                    fc:70:bb:a5:a7:87:dd:1d:25:3f:68:09:73:5d:0a:
                    a8:d0:3f:2b:f0:32:3d:95:2b:ae:32:ff:04:3c:7d:
                    da:f1:f9:4c:bb:e5:9f:e3:4b:3b:a8:a5:c6:1d:35:
                    df:0f:b2:da:9a:a0:71:af:1f:87:71:6c:ee:c5:0b:
                    dd:dd:27:6a:d5:9d:c0:53:4f:03:68:ce:b7:3c:12:
                    55:a9:9a:58:41:ca:c2:00:ab:15:58:ae:d2:08:b5:
                    46:0a:f4:aa:d8:ff:af:30:b6:1c:a1:ea:75:e0:6a:
                    49:a8:bc:3e:bd:70:8f:05:a7:98:ee:3c:69:fa:8a:
                    e4:ad:00:9c:d1:7b:b2:52:71:6b:99:b1:2e:a8:6d:
                    82:67:3f:e1:f0:d8:2f:be:06:60:0a:68:f9:d7:70:
                    f4:7c:6e:cd:b8:4c:f8:04:5c:66:32:f3:55:62:20:
                    10:07:d8:98:11:2d:a8:28:dc:b2:44:77:df:aa:c7:
                    be:84:98:40:e9:47:9d:de:af:8d:41:dd:77:91:48:
                    b1:b7:48:56:7f:5c:2c:96:01:22:10:f3:21:ef:57:
                    30:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:52:3F:0D:78:21:7A:F3:F2:B0:9F:A3:12:28:01:E6:9D:E8:1F:42
            X509v3 Authority Key Identifier:
                keyid:75:E8:A0:27:E9:2C:15:B9:41:4A:59:AC:09:6B:D4:63:4B:90:69:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/6/75E8A027E92C15B9414A59AC096BD4634B906914.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9aeaefa1-9009-4d41-9090-b27ec04ef7ef/a928fd66fc0487f5bba93f4ce32eee8bebaefff5aea95e8454.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/6/32332e3135322e3232362e302f32342d3234203d3e203533333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.152.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:76:5b:57:5f:c8:94:d8:60:9c:26:7c:52:66:35:67:39:2c:
         fe:7f:0f:e1:f5:12:3e:4d:03:c5:e6:49:9e:ca:a1:34:24:c7:
         77:c3:3c:30:e2:eb:72:83:23:2f:19:87:72:ed:90:d9:be:d9:
         c2:04:46:20:8a:a0:bb:b0:3e:13:ba:8f:e1:21:a2:54:ce:30:
         87:9d:ec:b5:0c:e4:10:28:f8:20:b9:8e:58:99:a3:54:33:3d:
         09:ad:6b:51:05:c6:e8:10:e6:87:f5:9f:01:ad:00:c1:fc:76:
         39:f0:f6:c8:51:d0:69:2a:33:d8:94:5f:55:32:96:45:3b:bd:
         01:e6:14:fc:d5:5f:54:dc:9e:55:37:0a:0d:de:37:1a:b4:60:
         86:e0:25:a3:bd:3d:2b:81:9e:57:7c:63:b1:36:45:75:9c:3b:
         47:9b:a9:37:fb:eb:e7:75:d1:53:6d:97:37:f2:63:b1:96:10:
         56:00:36:28:81:a3:0a:49:b5:84:b7:d6:ab:8a:e3:ad:2e:b8:
         da:6b:e8:a1:ff:21:b0:ff:30:7b:54:53:7c:21:08:bc:8e:c1:
         5d:d4:ae:91:a9:86:6e:f2:17:d2:48:53:16:9a:0f:fa:4e:f3:
         0e:9c:ad:48:84:fe:ec:5c:c6:ea:ed:25:98:a5:a7:9c:c6:40:
         be:aa:f6:2f
-----BEGIN CERTIFICATE-----
MIIFhTCCBG2gAwIBAgIUYMWb6WEMdD9n8L+DxNpg6YjhdbIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYTkyOGZkNjZmYzA0ODdmNWJiYTkzZjRjZTMyZWVlOGJl
YmFlZmZmNWFlYTk1ZTg0NTQwHhcNMjMwODE1MDE1NTIyWhcNMjQwODEzMDIwMDIy
WjAzMTEwLwYDVQQDEyg3QjUyM0YwRDc4MjE3QUYzRjJCMDlGQTMxMjI4MDFFNjlE
RTgxRjQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApdhYTFh1fKF4
RzNW26PiiGqcIMZtNWf6Z74OpABdUYipZRd+c00HIV72+3L8cLulp4fdHSU/aAlz
XQqo0D8r8DI9lSuuMv8EPH3a8flMu+Wf40s7qKXGHTXfD7LamqBxrx+HcWzuxQvd
3Sdq1Z3AU08DaM63PBJVqZpYQcrCAKsVWK7SCLVGCvSq2P+vMLYcoep14GpJqLw+
vXCPBaeY7jxp+orkrQCc0XuyUnFrmbEuqG2CZz/h8NgvvgZgCmj513D0fG7NuEz4
BFxmMvNVYiAQB9iYES2oKNyyRHffqse+hJhA6Ued3q+NQd13kUixt0hWf1wslgEi
EPMh71cwsQIDAQABo4IChTCCAoEwHQYDVR0OBBYEFHtSPw14IXrz8rCfoxIoAead
6B9CMB8GA1UdIwQYMBaAFHXooCfpLBW5QUpZrAlr1GNLkGkUMA4GA1UdDwEB/wQE
AwIHgDBxBgNVHR8EajBoMGagZKBihmByc3luYzovL3Jwa2kuYWRtaW4uZnJlZXJh
bmdlY2xvdWQuY29tL3JlcG8vRlJDLUNBLzYvNzVFOEEwMjdFOTJDMTVCOTQxNEE1
OUFDMDk2QkQ0NjM0QjkwNjkxNC5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZm
ZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzlhZWFlZmExLTkwMDkt
NGQ0MS05MDkwLWIyN2VjMDRlZjdlZi9hOTI4ZmQ2NmZjMDQ4N2Y1YmJhOTNmNGNl
MzJlZWU4YmViYWVmZmY1YWVhOTVlODQ1NC5jZXIwgYoGCCsGAQUFBwELBH4wfDB6
BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLmFkbWluLmZyZWVyYW5nZWNsb3VkLmNv
bS9yZXBvL0ZSQy1DQS82LzMyMzMyZTMxMzUzMjJlMzIzMjM2MmUzMDJmMzIzNDJk
MzIzNDIwM2QzZTIwMzUzMzMzMzUzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEABeY4jANBgkqhkiG9w0B
AQsFAAOCAQEAqXZbV1/IlNhgnCZ8UmY1Zzks/n8P4fUSPk0DxeZJnsqhNCTHd8M8
MOLrcoMjLxmHcu2Q2b7ZwgRGIIqgu7A+E7qP4SGiVM4wh53stQzkECj4ILmOWJmj
VDM9Ca1rUQXG6BDmh/WfAa0Awfx2OfD2yFHQaSoz2JRfVTKWRTu9AeYU/NVfVNye
VTcKDd43GrRghuAlo709K4GeV3xjsTZFdZw7R5upN/vr53XRU22XN/JjsZYQVgA2
KIGjCkm1hLfWq4rjrS642mvoof8hsP8we1RTfCEIvI7BXdSukamGbvIX0khTFpoP
+k7zDpytSIT+7FzG6u0lmKWnnMZAvqr2Lw==
-----END CERTIFICATE-----
Generated at Fri May 17 17:48:25 2024 by rpki-client on console-ams.rpki-client.org