Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/7/32332e3139312e38302e302f32342d3234203d3e203533333536.roa
File:                     32332e3139312e38302e302f32342d3234203d3e203533333536.roa (raw, json)
Hash identifier:          k77IeAnfskBE5OZN5saUH0E15/XKQJ9+nDXODwPEHpI=
Subject key identifier:   A9:C4:0C:C0:A8:2F:34:BE:4C:A5:EF:92:72:65:9E:10:8A:D4:20:A3
Certificate issuer:       /CN=46abb15c5b3d343c97c09f99907da1dccd4c3a215af59e8233
Certificate serial:       5746B23277ACD88EFFE2D1E517BEA9E9C8415582
Authority key identifier: FA:04:8A:F3:EA:62:E5:57:5B:46:98:C5:CC:24:03:98:28:93:F0:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a4f730e-74f5-4c41-9c06-be5d40c9917d/46abb15c5b3d343c97c09f99907da1dccd4c3a215af59e8233.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/7/32332e3139312e38302e302f32342d3234203d3e203533333536.roa
Signing time:             Tue 16 Jul 2024 02:42:28 +0000
ROA not before:           Tue 16 Jul 2024 02:37:28 +0000
ROA not after:            Tue 15 Jul 2025 02:42:28 +0000
asID:                     53356
IP address blocks:        23.191.80.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/7/FA048AF3EA62E5575B4698C5CC2403982893F0C5.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/7/FA048AF3EA62E5575B4698C5CC2403982893F0C5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a4f730e-74f5-4c41-9c06-be5d40c9917d/46abb15c5b3d343c97c09f99907da1dccd4c3a215af59e8233.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a4f730e-74f5-4c41-9c06-be5d40c9917d/0a4f730e-74f5-4c41-9c06-be5d40c9917d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a4f730e-74f5-4c41-9c06-be5d40c9917d/0a4f730e-74f5-4c41-9c06-be5d40c9917d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a4f730e-74f5-4c41-9c06-be5d40c9917d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 21:07:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:46:b2:32:77:ac:d8:8e:ff:e2:d1:e5:17:be:a9:e9:c8:41:55:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46abb15c5b3d343c97c09f99907da1dccd4c3a215af59e8233
        Validity
            Not Before: Jul 16 02:37:28 2024 GMT
            Not After : Jul 15 02:42:28 2025 GMT
        Subject: CN=A9C40CC0A82F34BE4CA5EF9272659E108AD420A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:67:41:f5:aa:c7:29:dc:50:9d:c3:df:93:e8:
                    8e:e0:08:a2:83:79:16:b3:c9:fb:c3:12:e0:a1:86:
                    7b:75:ae:96:9a:ac:2f:59:eb:55:29:02:1c:aa:05:
                    6f:8c:dd:1f:be:c8:e4:3b:34:14:36:dc:1a:5e:66:
                    f6:c1:69:d8:80:6c:1d:71:85:b3:3f:72:87:04:d7:
                    2f:ba:c1:22:44:55:da:4b:51:87:da:24:20:ac:1e:
                    c1:6a:af:86:60:2d:22:1d:b2:0c:5a:ef:b9:32:89:
                    a2:5b:39:f2:1a:a5:22:7b:07:95:10:0b:ce:55:aa:
                    fc:a1:11:85:05:28:cb:75:88:41:92:62:9c:8b:f8:
                    f9:3b:56:fc:0c:27:14:93:12:82:2e:4d:01:ee:91:
                    25:da:53:85:de:58:d5:0e:12:3c:11:b0:58:cc:b7:
                    2e:b6:8c:36:06:b7:43:4f:54:08:f9:9f:bd:75:f8:
                    d9:d1:31:3d:c4:48:5f:c1:d9:ec:47:ec:38:0f:cb:
                    fd:13:20:8d:5f:dc:18:3a:30:69:3e:3e:38:07:b0:
                    34:5b:f4:47:bb:90:f4:63:24:a9:e4:8b:4a:fe:f8:
                    a3:b3:7e:d2:15:bf:2d:8a:16:ae:a2:64:9d:17:9b:
                    ab:07:7c:92:d2:bd:a0:2c:d4:e2:4c:af:b7:a2:82:
                    7d:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:C4:0C:C0:A8:2F:34:BE:4C:A5:EF:92:72:65:9E:10:8A:D4:20:A3
            X509v3 Authority Key Identifier:
                keyid:FA:04:8A:F3:EA:62:E5:57:5B:46:98:C5:CC:24:03:98:28:93:F0:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/7/FA048AF3EA62E5575B4698C5CC2403982893F0C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a4f730e-74f5-4c41-9c06-be5d40c9917d/46abb15c5b3d343c97c09f99907da1dccd4c3a215af59e8233.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/7/32332e3139312e38302e302f32342d3234203d3e203533333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.191.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:4d:20:09:a5:8c:b3:d3:10:10:54:a9:43:8c:c9:a3:5a:8f:
         31:f1:de:e3:fa:2f:bc:ad:81:76:14:15:c8:e8:10:b9:dd:67:
         46:a7:fa:3c:2d:e0:71:ed:ee:c2:c0:15:c1:58:d7:ef:59:0f:
         d1:61:15:96:49:f6:7d:25:5b:47:c8:c1:f4:71:52:07:75:59:
         91:28:70:23:47:2c:e0:60:a1:a1:90:fb:58:e8:9a:e3:5a:bf:
         46:d5:7c:6d:a6:e3:81:21:2f:f2:5e:e6:dd:1a:3a:d8:e8:a0:
         b9:27:0e:54:94:9e:83:38:1d:d1:b0:72:37:6d:38:25:61:60:
         a8:e0:3e:a4:90:8b:d8:35:f5:8b:94:be:36:dc:ac:83:c6:7a:
         ca:12:3b:30:2e:69:2b:f7:91:4a:1a:0a:70:36:29:ac:23:e2:
         18:e6:c9:73:ab:17:1e:95:24:e7:07:a3:bf:81:ef:ad:8c:2d:
         bb:60:9d:31:ae:9f:5f:39:28:96:4c:0f:96:15:8e:34:30:fc:
         11:94:a5:fc:36:b1:9e:9c:ab:48:3e:0f:bd:4f:93:2f:e1:20:
         db:3a:0c:e2:df:cc:24:f4:76:fe:fe:a6:f9:22:25:27:35:e7:
         ec:1b:2c:d8:0d:ec:3b:3e:1b:32:08:16:b2:22:aa:db:17:c1:
         c7:4d:5e:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:35:05 2024 by rpki-client on console-ams.rpki-client.org