Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/7/3134322e3230322e39302e302f32342d3234203d3e203533333536.roa
File:                     3134322e3230322e39302e302f32342d3234203d3e203533333536.roa (raw, json)
Hash identifier:          mAfLzjlFC046SbdxkLGFNjuHu5HLpW0eQ3AmN7vrIBs=
Subject key identifier:   61:72:DC:91:E0:F7:F1:74:5B:60:15:16:C4:A3:CC:E7:23:33:B1:BF
Certificate issuer:       /CN=46abb15c5b3d343c97c09f99907da1dccd4c3a215af59e8233
Certificate serial:       34A375E0EB025585CB87683DD9657D5E78B2C800
Authority key identifier: FA:04:8A:F3:EA:62:E5:57:5B:46:98:C5:CC:24:03:98:28:93:F0:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a4f730e-74f5-4c41-9c06-be5d40c9917d/46abb15c5b3d343c97c09f99907da1dccd4c3a215af59e8233.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/7/3134322e3230322e39302e302f32342d3234203d3e203533333536.roa
Signing time:             Thu 13 Aug 2026 21:30:54 +0000
ROA not before:           Thu 13 Aug 2026 21:25:54 +0000
ROA not after:            Thu 12 Aug 2027 21:30:54 +0000
asID:                     53356
IP address blocks:        142.202.90.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/7/FA048AF3EA62E5575B4698C5CC2403982893F0C5.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/7/FA048AF3EA62E5575B4698C5CC2403982893F0C5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a4f730e-74f5-4c41-9c06-be5d40c9917d/46abb15c5b3d343c97c09f99907da1dccd4c3a215af59e8233.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a4f730e-74f5-4c41-9c06-be5d40c9917d/0a4f730e-74f5-4c41-9c06-be5d40c9917d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a4f730e-74f5-4c41-9c06-be5d40c9917d/0a4f730e-74f5-4c41-9c06-be5d40c9917d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a4f730e-74f5-4c41-9c06-be5d40c9917d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Aug 2026 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:a3:75:e0:eb:02:55:85:cb:87:68:3d:d9:65:7d:5e:78:b2:c8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46abb15c5b3d343c97c09f99907da1dccd4c3a215af59e8233
        Validity
            Not Before: Aug 13 21:25:54 2026 GMT
            Not After : Aug 12 21:30:54 2027 GMT
        Subject: CN=6172DC91E0F7F1745B601516C4A3CCE72333B1BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:53:22:62:7e:b2:7b:5d:96:f4:4b:f6:ae:3d:
                    01:ba:77:ad:37:c7:64:c6:8b:6e:36:81:7d:9c:04:
                    d9:ea:a3:4b:e6:00:1e:c1:ba:02:b7:da:3f:57:93:
                    f5:45:01:de:56:b6:4e:87:58:ab:aa:3d:1e:c0:fa:
                    9c:ef:15:d9:6b:67:84:e8:9b:11:d5:43:48:82:fe:
                    98:2d:d5:e2:88:f1:01:6d:55:90:d2:f7:77:85:69:
                    38:63:ee:63:17:09:2b:82:3e:cc:ba:e7:55:3b:00:
                    6e:25:11:08:14:5d:00:73:95:47:34:3a:7f:fb:99:
                    57:74:02:f1:50:d0:9b:09:49:d5:a6:11:aa:57:7e:
                    95:05:00:5f:d1:0a:bd:ba:bf:ad:42:72:16:b8:05:
                    db:a9:be:cf:d8:7f:11:96:a9:ee:70:fa:61:b3:a3:
                    fc:17:11:6c:2c:c3:76:d4:d8:a0:6f:36:53:13:bc:
                    cf:6c:7d:fa:9e:40:de:31:be:57:3e:b6:90:cc:1d:
                    e0:c9:d9:b5:83:e6:a3:65:34:f8:dd:db:99:7f:e9:
                    d3:16:ab:e1:d1:80:1d:89:8b:8e:60:47:2f:97:84:
                    60:09:db:37:d2:cb:c0:61:90:43:4a:e6:00:59:19:
                    b6:d2:14:8b:9d:78:20:58:b4:c4:3e:4a:46:b1:8f:
                    ea:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:72:DC:91:E0:F7:F1:74:5B:60:15:16:C4:A3:CC:E7:23:33:B1:BF
            X509v3 Authority Key Identifier:
                keyid:FA:04:8A:F3:EA:62:E5:57:5B:46:98:C5:CC:24:03:98:28:93:F0:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/7/FA048AF3EA62E5575B4698C5CC2403982893F0C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a4f730e-74f5-4c41-9c06-be5d40c9917d/46abb15c5b3d343c97c09f99907da1dccd4c3a215af59e8233.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/7/3134322e3230322e39302e302f32342d3234203d3e203533333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.202.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:b1:40:be:99:49:c5:af:f9:77:3b:2a:9d:6c:af:5f:e5:81:
         84:f9:3c:4a:66:f4:eb:78:2f:2a:7b:4e:be:b8:39:87:af:f9:
         5e:ed:35:43:54:fb:78:d7:da:6a:27:5a:34:14:6b:d6:38:08:
         72:a6:66:dd:e9:fe:7a:17:e3:ae:ea:b2:31:9b:9a:ff:ba:3e:
         97:dd:9a:83:f1:2f:82:e7:7e:00:20:f8:f2:78:fa:3c:d3:57:
         96:ab:27:2e:ee:a7:13:f5:e6:3c:75:1c:6e:2c:16:3c:85:16:
         02:52:3d:66:9c:86:91:60:b2:50:3c:1d:72:a4:b4:d0:ce:0c:
         b2:d1:1d:1d:83:98:07:86:36:76:ae:cd:ca:4b:75:68:af:09:
         89:13:63:91:be:85:23:23:a6:40:d1:08:46:20:29:99:f2:1b:
         1a:b5:3d:85:35:08:4d:58:80:d8:1b:57:fc:79:95:7a:ed:4f:
         04:2a:47:11:ef:af:5c:06:d7:2c:fc:61:e7:2c:0a:c8:64:5b:
         c6:f1:8b:73:bf:62:6b:c5:f3:ad:79:7f:d3:83:24:69:be:4a:
         38:4f:88:7b:60:c4:b5:a9:e2:cd:dc:05:d1:78:ad:1c:09:30:
         ff:19:d3:52:8d:9e:53:ca:45:56:7c:3b:c0:80:95:83:1a:8c:
         f9:e8:25:e6
-----BEGIN CERTIFICATE-----
MIIFhTCCBG2gAwIBAgIUNKN14OsCVYXLh2g92WV9XniyyAAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNDZhYmIxNWM1YjNkMzQzYzk3YzA5Zjk5OTA3ZGExZGNj
ZDRjM2EyMTVhZjU5ZTgyMzMwHhcNMjYwODEzMjEyNTU0WhcNMjcwODEyMjEzMDU0
WjAzMTEwLwYDVQQDEyg2MTcyREM5MUUwRjdGMTc0NUI2MDE1MTZDNEEzQ0NFNzIz
MzNCMUJGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAylMiYn6ye12W
9Ev2rj0BunetN8dkxotuNoF9nATZ6qNL5gAewboCt9o/V5P1RQHeVrZOh1irqj0e
wPqc7xXZa2eE6JsR1UNIgv6YLdXiiPEBbVWQ0vd3hWk4Y+5jFwkrgj7MuudVOwBu
JREIFF0Ac5VHNDp/+5lXdALxUNCbCUnVphGqV36VBQBf0Qq9ur+tQnIWuAXbqb7P
2H8RlqnucPphs6P8FxFsLMN21NigbzZTE7zPbH36nkDeMb5XPraQzB3gydm1g+aj
ZTT43duZf+nTFqvh0YAdiYuOYEcvl4RgCds30svAYZBDSuYAWRm20hSLnXggWLTE
PkpGsY/qZQIDAQABo4IChTCCAoEwHQYDVR0OBBYEFGFy3JHg9/F0W2AVFsSjzOcj
M7G/MB8GA1UdIwQYMBaAFPoEivPqYuVXW0aYxcwkA5gok/DFMA4GA1UdDwEB/wQE
AwIHgDBxBgNVHR8EajBoMGagZKBihmByc3luYzovL3Jwa2kuYWRtaW4uZnJlZXJh
bmdlY2xvdWQuY29tL3JlcG8vRlJDLUNBLzcvRkEwNDhBRjNFQTYyRTU1NzVCNDY5
OEM1Q0MyNDAzOTgyODkzRjBDNS5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIx
ZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzBhNGY3MzBlLTc0ZjUt
NGM0MS05YzA2LWJlNWQ0MGM5OTE3ZC80NmFiYjE1YzViM2QzNDNjOTdjMDlmOTk5
MDdkYTFkY2NkNGMzYTIxNWFmNTllODIzMy5jZXIwgYoGCCsGAQUFBwELBH4wfDB6
BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLmFkbWluLmZyZWVyYW5nZWNsb3VkLmNv
bS9yZXBvL0ZSQy1DQS83LzMxMzQzMjJlMzIzMDMyMmUzOTMwMmUzMDJmMzIzNDJk
MzIzNDIwM2QzZTIwMzUzMzMzMzUzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAI7KWjANBgkqhkiG9w0B
AQsFAAOCAQEAo7FAvplJxa/5dzsqnWyvX+WBhPk8Smb063gvKntOvrg5h6/5Xu01
Q1T7eNfaaidaNBRr1jgIcqZm3en+ehfjruqyMZua/7o+l92ag/Evgud+ACD48nj6
PNNXlqsnLu6nE/XmPHUcbiwWPIUWAlI9ZpyGkWCyUDwdcqS00M4MstEdHYOYB4Y2
dq7Nykt1aK8JiRNjkb6FIyOmQNEIRiApmfIbGrU9hTUITViA2BtX/HmVeu1PBCpH
Ee+vXAbXLPxh5ywKyGRbxvGLc79ia8XzrXl/04Mkab5KOE+Ie2DEtanizdwF0Xit
HAkw/xnTUo2eU8pFVnw7wICVgxqM+egl5g==
-----END CERTIFICATE-----
Generated at Sat Aug 15 08:04:38 2026 by rpki-client