Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/6/32332e3135322e3232352e302f32342d3234203d3e20323135303538.roa
File:                     32332e3135322e3232352e302f32342d3234203d3e20323135303538.roa (raw, json)
Hash identifier:          bTFmoU5mGeZwHVxNWdE2bn/3rcAPU28m2E76LYK46W0=
Subject key identifier:   F4:BD:E9:2C:FB:BD:20:3D:18:D1:38:81:7A:3C:CE:7F:E4:9C:BD:09
Certificate issuer:       /CN=a928fd66fc0487f5bba93f4ce32eee8bebaefff5aea95e8454
Certificate serial:       1D0CBD61C5CFC32F6A642642D63EC0DD2C0E4F29
Authority key identifier: 75:E8:A0:27:E9:2C:15:B9:41:4A:59:AC:09:6B:D4:63:4B:90:69:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9aeaefa1-9009-4d41-9090-b27ec04ef7ef/a928fd66fc0487f5bba93f4ce32eee8bebaefff5aea95e8454.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/6/32332e3135322e3232352e302f32342d3234203d3e20323135303538.roa
Signing time:             Sun 19 Oct 2025 01:14:52 +0000
ROA not before:           Sun 19 Oct 2025 01:09:52 +0000
ROA not after:            Sun 18 Oct 2026 01:14:52 +0000
asID:                     215058
IP address blocks:        23.152.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/6/75E8A027E92C15B9414A59AC096BD4634B906914.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/6/75E8A027E92C15B9414A59AC096BD4634B906914.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9aeaefa1-9009-4d41-9090-b27ec04ef7ef/a928fd66fc0487f5bba93f4ce32eee8bebaefff5aea95e8454.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9aeaefa1-9009-4d41-9090-b27ec04ef7ef/9aeaefa1-9009-4d41-9090-b27ec04ef7ef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9aeaefa1-9009-4d41-9090-b27ec04ef7ef/9aeaefa1-9009-4d41-9090-b27ec04ef7ef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9aeaefa1-9009-4d41-9090-b27ec04ef7ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 15:03:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:0c:bd:61:c5:cf:c3:2f:6a:64:26:42:d6:3e:c0:dd:2c:0e:4f:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a928fd66fc0487f5bba93f4ce32eee8bebaefff5aea95e8454
        Validity
            Not Before: Oct 19 01:09:52 2025 GMT
            Not After : Oct 18 01:14:52 2026 GMT
        Subject: CN=F4BDE92CFBBD203D18D138817A3CCE7FE49CBD09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:00:bc:eb:cf:a4:4a:9d:0b:6f:03:04:2c:da:
                    13:1b:ab:1e:8a:db:e9:3e:c1:84:f0:01:0e:03:df:
                    af:24:18:80:3a:26:bb:af:42:1c:9c:f0:2a:6a:6f:
                    5e:97:b8:a5:63:d6:5d:a2:7e:7d:f0:d0:17:da:fe:
                    e6:93:e1:c5:ea:dc:68:70:47:f2:16:3c:9b:d0:00:
                    4a:c6:c0:a7:7e:70:a0:f2:30:7a:1d:96:3f:8c:d6:
                    fd:e4:e4:c3:2d:03:61:ae:ef:f3:e7:02:26:68:00:
                    db:b4:2d:a1:86:93:d1:5d:76:6d:fc:28:86:0e:9d:
                    c0:c7:7d:e9:bc:3a:d0:24:2e:48:9f:26:12:0c:93:
                    a4:01:a5:96:ae:cf:11:47:d2:b0:d5:ce:7d:00:fb:
                    a1:85:d3:93:00:6f:50:6f:78:d8:2f:9b:58:52:10:
                    5a:cf:df:87:8e:a9:61:b4:e6:95:a4:08:71:c3:c7:
                    0a:b9:4a:9c:39:c9:4a:f6:ec:98:4c:e4:63:10:ca:
                    3b:6f:b2:8c:1b:05:9c:1f:24:29:a7:ad:03:e8:d4:
                    7d:96:0d:8f:99:79:cb:68:61:73:85:7c:f3:65:bd:
                    b4:f8:aa:5e:7b:59:49:13:66:91:45:de:20:f2:f8:
                    8b:7c:94:0b:64:eb:b2:38:6d:b6:60:a2:42:5d:07:
                    31:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:BD:E9:2C:FB:BD:20:3D:18:D1:38:81:7A:3C:CE:7F:E4:9C:BD:09
            X509v3 Authority Key Identifier:
                keyid:75:E8:A0:27:E9:2C:15:B9:41:4A:59:AC:09:6B:D4:63:4B:90:69:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/6/75E8A027E92C15B9414A59AC096BD4634B906914.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9aeaefa1-9009-4d41-9090-b27ec04ef7ef/a928fd66fc0487f5bba93f4ce32eee8bebaefff5aea95e8454.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/6/32332e3135322e3232352e302f32342d3234203d3e20323135303538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.152.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:00:bb:b5:a9:3f:3c:de:f4:aa:5f:ad:57:06:a6:2d:de:0f:
         4c:f7:c8:f3:5a:21:8b:de:c2:ba:3d:06:23:ed:9f:63:64:91:
         84:3a:d6:e1:98:db:52:60:cd:93:27:4c:d3:ff:f0:63:d9:2a:
         b3:ae:45:7a:ba:96:a7:2c:91:6a:47:5e:94:91:6d:2f:0d:ff:
         19:ba:d6:db:99:71:86:5c:31:bf:d6:6f:db:3e:a7:cb:f0:7a:
         84:29:fd:d4:62:00:86:01:12:72:09:d9:9a:c5:e6:39:12:e0:
         d4:88:eb:b1:1f:f6:00:5a:c1:48:ce:13:c7:41:fd:4e:d1:ed:
         83:d7:42:7d:5c:6d:f4:15:10:51:8f:51:7e:41:42:43:f6:d6:
         b2:f0:ab:44:3d:a8:2d:75:cb:4c:99:db:f4:e4:df:83:7c:18:
         49:f3:7d:da:3c:59:7c:13:3a:aa:cd:d3:2a:71:16:63:5b:fd:
         37:15:63:3b:82:e8:52:6e:6a:31:48:15:15:d8:7a:a2:4c:36:
         ba:8c:77:0c:94:fb:80:96:a2:e2:97:05:29:4f:87:e1:fb:67:
         a9:2e:f0:56:d4:95:6a:b9:6a:e6:44:3a:cd:85:24:8d:1f:99:
         b1:66:f0:30:5f:a7:b1:db:f1:51:c0:90:54:8e:16:46:23:d4:
         e2:95:ae:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 00:50:19 2025 by rpki-client