Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/6/32332e3135322e3232352e302f32342d3234203d3e20323035353532.roa
File:                     32332e3135322e3232352e302f32342d3234203d3e20323035353532.roa (raw, json)
Hash identifier:          j/4+4kybQGjwL9EikAYOkikEV/vg6EEDU5tZEq1WFck=
Subject key identifier:   25:A0:6F:26:71:3A:2B:37:1F:15:A8:3B:C7:DC:08:5C:BD:6A:81:63
Certificate issuer:       /CN=a928fd66fc0487f5bba93f4ce32eee8bebaefff5aea95e8454
Certificate serial:       4A8523452EFA19E2EEC39699A91F109DEBA258AD
Authority key identifier: 75:E8:A0:27:E9:2C:15:B9:41:4A:59:AC:09:6B:D4:63:4B:90:69:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9aeaefa1-9009-4d41-9090-b27ec04ef7ef/a928fd66fc0487f5bba93f4ce32eee8bebaefff5aea95e8454.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/6/32332e3135322e3232352e302f32342d3234203d3e20323035353532.roa
Signing time:             Sat 18 Oct 2025 22:14:47 +0000
ROA not before:           Sat 18 Oct 2025 22:09:47 +0000
ROA not after:            Sat 17 Oct 2026 22:14:47 +0000
asID:                     205552
IP address blocks:        23.152.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/6/75E8A027E92C15B9414A59AC096BD4634B906914.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/6/75E8A027E92C15B9414A59AC096BD4634B906914.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9aeaefa1-9009-4d41-9090-b27ec04ef7ef/a928fd66fc0487f5bba93f4ce32eee8bebaefff5aea95e8454.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9aeaefa1-9009-4d41-9090-b27ec04ef7ef/9aeaefa1-9009-4d41-9090-b27ec04ef7ef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9aeaefa1-9009-4d41-9090-b27ec04ef7ef/9aeaefa1-9009-4d41-9090-b27ec04ef7ef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9aeaefa1-9009-4d41-9090-b27ec04ef7ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 15:03:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:85:23:45:2e:fa:19:e2:ee:c3:96:99:a9:1f:10:9d:eb:a2:58:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a928fd66fc0487f5bba93f4ce32eee8bebaefff5aea95e8454
        Validity
            Not Before: Oct 18 22:09:47 2025 GMT
            Not After : Oct 17 22:14:47 2026 GMT
        Subject: CN=25A06F26713A2B371F15A83BC7DC085CBD6A8163
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:3b:39:fc:6b:5c:bf:f6:97:ad:03:cc:8e:36:
                    b3:10:57:82:06:cc:a4:3e:4a:35:17:e5:f6:68:67:
                    51:ea:09:68:d3:24:15:ea:fc:f9:22:f6:d7:cc:d0:
                    cb:17:7b:75:15:41:c6:78:fb:9b:9c:60:47:bf:0b:
                    f0:8b:f3:22:c6:41:18:ea:b3:9d:e7:d2:c2:30:9c:
                    d5:0c:37:d3:9c:e2:26:bf:a3:bd:b8:18:62:06:c4:
                    a5:95:5f:22:03:87:13:ad:cf:d3:f6:d3:d6:bb:68:
                    70:5c:2e:19:b8:8b:31:55:db:4f:cd:87:91:a4:0c:
                    52:0b:1d:bf:ff:db:ce:b5:dc:85:e2:67:0d:cb:3b:
                    7b:c2:e8:62:65:be:cb:29:a7:ec:3c:6d:15:a2:08:
                    62:1a:82:d0:2c:4e:23:43:fc:3c:e6:74:4d:8b:26:
                    89:ae:5f:a0:ad:a9:7c:65:a6:30:02:a2:ee:f4:5a:
                    df:43:a4:84:40:d8:d8:cc:73:1d:24:87:81:8b:a8:
                    7d:d5:5d:ee:3e:1e:01:7a:37:ab:dd:d1:a9:c7:c7:
                    14:d9:06:0b:14:10:04:1f:00:6a:3a:20:a2:54:a7:
                    3e:04:1c:0f:c7:62:fb:e6:ac:2f:50:ef:d1:20:00:
                    46:27:75:36:a8:cf:f9:be:c3:bb:be:68:7a:ac:87:
                    e5:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:A0:6F:26:71:3A:2B:37:1F:15:A8:3B:C7:DC:08:5C:BD:6A:81:63
            X509v3 Authority Key Identifier:
                keyid:75:E8:A0:27:E9:2C:15:B9:41:4A:59:AC:09:6B:D4:63:4B:90:69:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/6/75E8A027E92C15B9414A59AC096BD4634B906914.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9aeaefa1-9009-4d41-9090-b27ec04ef7ef/a928fd66fc0487f5bba93f4ce32eee8bebaefff5aea95e8454.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/6/32332e3135322e3232352e302f32342d3234203d3e20323035353532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.152.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:72:3a:fc:6c:a7:d5:78:2d:8d:4e:f0:6b:43:00:64:77:f9:
         18:6e:a3:83:13:b7:26:c2:7c:8e:60:5b:cb:7d:42:51:f5:03:
         5f:24:2d:cb:f7:3a:2e:12:b6:ce:31:96:8b:69:91:32:5d:c0:
         18:37:7d:a9:50:15:8d:51:11:52:36:48:b4:7b:19:5d:1f:30:
         1e:82:29:20:da:88:43:b7:10:d2:a4:73:d6:ba:be:0d:bd:7e:
         2e:56:e9:d6:7a:a3:39:9b:72:7d:54:af:b5:c0:7c:af:1c:9c:
         47:df:19:45:69:27:e8:20:12:ba:04:9e:a8:94:e7:90:6e:d3:
         a4:79:49:4e:d2:0f:93:e5:63:46:73:83:8e:6d:07:e5:ce:04:
         b8:0b:cc:a0:c3:56:57:e0:81:d5:9f:37:da:9d:ef:61:fc:06:
         b4:91:f1:a5:9f:fe:b2:a5:9d:f2:99:90:bd:92:ce:17:66:8a:
         20:25:c1:62:4d:c9:0d:46:62:06:e7:b4:76:ac:97:94:0f:df:
         e5:35:3b:56:44:5e:e8:fa:9f:60:d6:54:4c:8f:c1:6c:68:9a:
         29:01:90:1e:9d:84:1b:2a:d7:6f:06:8a:36:18:e2:b3:d9:5b:
         85:90:94:68:f4:0a:71:a4:a1:71:9e:49:e8:9a:b6:96:c3:95:
         f3:60:87:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 00:51:37 2025 by rpki-client