Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/7/3134322e3230322e39302e302f32342d3234203d3e203533333536.roa
File:                     3134322e3230322e39302e302f32342d3234203d3e203533333536.roa (raw, json)
Hash identifier:          K2vyEvmIfwQCrvosk/b1fyjsdno5tTxyjdBs+L510yE=
Subject key identifier:   1D:D7:15:61:52:BE:F9:B6:4E:F8:1A:5C:A3:D1:90:82:99:65:B3:66
Certificate issuer:       /CN=46abb15c5b3d343c97c09f99907da1dccd4c3a215af59e8233
Certificate serial:       08B09F23A02C01BEF2107A7C6804909A90F532DA
Authority key identifier: FA:04:8A:F3:EA:62:E5:57:5B:46:98:C5:CC:24:03:98:28:93:F0:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a4f730e-74f5-4c41-9c06-be5d40c9917d/46abb15c5b3d343c97c09f99907da1dccd4c3a215af59e8233.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/7/3134322e3230322e39302e302f32342d3234203d3e203533333536.roa
Signing time:             Thu 10 Oct 2024 20:24:59 +0000
ROA not before:           Thu 10 Oct 2024 20:19:59 +0000
ROA not after:            Thu 09 Oct 2025 20:24:59 +0000
asID:                     53356
IP address blocks:        142.202.90.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/7/FA048AF3EA62E5575B4698C5CC2403982893F0C5.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/7/FA048AF3EA62E5575B4698C5CC2403982893F0C5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a4f730e-74f5-4c41-9c06-be5d40c9917d/46abb15c5b3d343c97c09f99907da1dccd4c3a215af59e8233.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a4f730e-74f5-4c41-9c06-be5d40c9917d/0a4f730e-74f5-4c41-9c06-be5d40c9917d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a4f730e-74f5-4c41-9c06-be5d40c9917d/0a4f730e-74f5-4c41-9c06-be5d40c9917d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a4f730e-74f5-4c41-9c06-be5d40c9917d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 21:07:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:b0:9f:23:a0:2c:01:be:f2:10:7a:7c:68:04:90:9a:90:f5:32:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46abb15c5b3d343c97c09f99907da1dccd4c3a215af59e8233
        Validity
            Not Before: Oct 10 20:19:59 2024 GMT
            Not After : Oct  9 20:24:59 2025 GMT
        Subject: CN=1DD7156152BEF9B64EF81A5CA3D190829965B366
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:81:a6:6d:0c:db:e3:fa:a5:eb:14:20:c6:74:
                    6f:72:57:7a:96:f3:ca:db:94:9d:09:6b:8b:82:fc:
                    90:15:18:64:e4:ad:8e:ad:c9:22:72:26:90:ce:4a:
                    9a:ce:11:2b:3c:65:58:26:6e:1c:eb:67:61:0c:48:
                    b1:f9:ff:e5:72:f4:d4:4f:a4:31:c2:6b:35:cc:32:
                    d3:92:b5:40:79:27:43:57:da:d4:5d:35:7f:86:f8:
                    5c:14:62:c8:a4:b8:33:78:28:3b:1b:e7:aa:62:4b:
                    ba:04:d1:4b:43:60:41:00:1e:81:79:76:ce:c7:83:
                    b0:a9:d3:7a:6a:b4:c2:5a:68:7c:d7:fe:6a:f2:49:
                    61:34:1b:10:b0:41:74:bf:a5:10:f0:73:b0:f1:c0:
                    38:aa:ac:5c:99:bf:2a:18:a9:5c:94:eb:a1:f9:d7:
                    67:bc:8b:ff:d7:f7:c5:cd:ad:12:e2:40:1d:8e:05:
                    cd:af:aa:d9:71:86:86:6e:7a:13:17:c4:03:37:f0:
                    3b:4d:38:40:a1:06:b1:3f:31:84:9d:dd:25:74:df:
                    2d:96:7c:01:84:d1:5a:54:15:6a:51:91:0b:ff:a9:
                    1d:aa:82:9a:c6:e2:84:81:65:ab:ca:13:05:6d:b4:
                    b4:2a:bb:37:ac:36:61:19:b5:bb:6a:8a:1a:f3:5d:
                    c1:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:D7:15:61:52:BE:F9:B6:4E:F8:1A:5C:A3:D1:90:82:99:65:B3:66
            X509v3 Authority Key Identifier:
                keyid:FA:04:8A:F3:EA:62:E5:57:5B:46:98:C5:CC:24:03:98:28:93:F0:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/7/FA048AF3EA62E5575B4698C5CC2403982893F0C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a4f730e-74f5-4c41-9c06-be5d40c9917d/46abb15c5b3d343c97c09f99907da1dccd4c3a215af59e8233.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/7/3134322e3230322e39302e302f32342d3234203d3e203533333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.202.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:c2:a0:af:a8:93:41:2b:78:43:c1:a6:d1:20:72:7e:65:7a:
         70:e9:69:59:63:1a:69:85:d5:d1:9f:7c:6a:81:ca:36:75:b0:
         58:a8:18:59:06:ad:ec:fb:82:d1:ec:87:9a:1f:c4:f0:84:41:
         4b:d9:c9:8a:bc:54:dd:29:5e:91:97:6d:ce:40:89:b2:4f:d6:
         e7:08:0b:7d:1f:17:43:4b:9a:83:67:09:7e:ae:40:5b:03:bd:
         47:1d:14:5c:0e:f3:cb:6f:68:46:0d:7d:f9:e5:53:3c:4a:11:
         0d:ae:34:51:a6:32:7d:ec:48:4c:67:e2:83:52:4d:48:80:dc:
         c0:d9:98:40:ab:5f:09:1a:b4:8f:c8:ca:22:18:65:b5:e7:e7:
         4f:01:2b:e7:ed:06:73:2b:4b:ca:0e:bc:b0:fc:03:67:22:9a:
         02:75:a9:2a:a9:50:62:c4:c5:73:18:06:bf:eb:6e:86:fc:79:
         5c:55:57:27:de:1b:c7:a8:67:85:62:4f:a0:ae:49:8d:12:98:
         25:04:bb:9e:36:af:21:ac:1d:c7:93:b7:ed:33:4f:a3:72:2d:
         5d:a2:9d:b7:59:80:06:56:e6:d0:ac:e0:cb:f4:13:26:1d:b0:
         e8:c0:f0:92:05:1c:76:29:f3:aa:6e:8c:4b:95:62:f8:cb:0e:
         0b:61:a0:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:34:43 2024 by rpki-client on console-fra.rpki-client.org