Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/7/3134322e3230322e39302e302f32342d3234203d3e20323135303033.roa
File:                     3134322e3230322e39302e302f32342d3234203d3e20323135303033.roa (raw, json)
Hash identifier:          bj4uvf7xafBDsPXx/e37QZYyp8MfFd2l1KA7Wpnwo3w=
Subject key identifier:   4E:EF:86:07:A8:8E:CA:79:F7:A4:BF:24:C0:BC:56:54:D6:80:31:90
Certificate issuer:       /CN=46abb15c5b3d343c97c09f99907da1dccd4c3a215af59e8233
Certificate serial:       39336A56A6D1714C2B927F4771880CF8ED0E17A6
Authority key identifier: FA:04:8A:F3:EA:62:E5:57:5B:46:98:C5:CC:24:03:98:28:93:F0:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a4f730e-74f5-4c41-9c06-be5d40c9917d/46abb15c5b3d343c97c09f99907da1dccd4c3a215af59e8233.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/7/3134322e3230322e39302e302f32342d3234203d3e20323135303033.roa
Signing time:             Sun 05 Jul 2026 23:29:29 +0000
ROA not before:           Sun 05 Jul 2026 23:24:29 +0000
ROA not after:            Sun 04 Jul 2027 23:29:29 +0000
asID:                     215003
IP address blocks:        142.202.90.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/7/FA048AF3EA62E5575B4698C5CC2403982893F0C5.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/7/FA048AF3EA62E5575B4698C5CC2403982893F0C5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a4f730e-74f5-4c41-9c06-be5d40c9917d/46abb15c5b3d343c97c09f99907da1dccd4c3a215af59e8233.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a4f730e-74f5-4c41-9c06-be5d40c9917d/0a4f730e-74f5-4c41-9c06-be5d40c9917d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a4f730e-74f5-4c41-9c06-be5d40c9917d/0a4f730e-74f5-4c41-9c06-be5d40c9917d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a4f730e-74f5-4c41-9c06-be5d40c9917d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:33:6a:56:a6:d1:71:4c:2b:92:7f:47:71:88:0c:f8:ed:0e:17:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46abb15c5b3d343c97c09f99907da1dccd4c3a215af59e8233
        Validity
            Not Before: Jul  5 23:24:29 2026 GMT
            Not After : Jul  4 23:29:29 2027 GMT
        Subject: CN=4EEF8607A88ECA79F7A4BF24C0BC5654D6803190
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:3a:5a:62:63:e6:fe:70:d2:a6:ed:1e:6f:3e:
                    bc:ec:50:f0:40:80:fa:6e:e1:d5:ba:ad:7d:05:af:
                    d3:7b:8d:5e:8e:c6:74:b0:9d:e0:1c:c2:6a:4d:c4:
                    24:24:57:45:9a:ca:e7:38:a8:fa:dd:40:cd:cd:21:
                    03:66:cd:57:b4:f5:21:28:83:fc:17:81:17:33:82:
                    11:98:f6:ae:c8:f3:22:7e:aa:3d:4f:a6:28:13:d2:
                    42:7e:07:e6:9e:d5:fe:f8:ca:9a:8b:44:dc:5a:12:
                    29:58:7b:15:a2:be:0e:6f:06:74:32:76:4b:99:9f:
                    38:10:14:bf:24:4c:70:36:69:52:41:28:e5:e6:89:
                    84:c8:70:e0:da:2c:12:19:1b:ba:91:a6:3e:ea:2b:
                    42:19:1b:63:0d:79:bf:8b:56:fe:f2:09:a9:42:8a:
                    5e:ee:da:71:ab:2a:f7:47:9f:b3:02:08:e2:cf:3a:
                    8a:e1:97:95:d4:32:34:62:6f:c6:1c:12:97:e3:43:
                    3d:b9:2f:1e:5b:1e:22:65:8f:b9:28:10:b0:a6:d2:
                    5d:10:49:29:64:22:27:2d:38:82:95:90:86:74:69:
                    61:7d:57:93:45:91:1b:68:5a:e2:82:7e:26:c5:54:
                    f5:6a:fe:d3:82:80:8d:80:d4:ac:ed:33:6c:24:a6:
                    53:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:EF:86:07:A8:8E:CA:79:F7:A4:BF:24:C0:BC:56:54:D6:80:31:90
            X509v3 Authority Key Identifier:
                keyid:FA:04:8A:F3:EA:62:E5:57:5B:46:98:C5:CC:24:03:98:28:93:F0:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/7/FA048AF3EA62E5575B4698C5CC2403982893F0C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a4f730e-74f5-4c41-9c06-be5d40c9917d/46abb15c5b3d343c97c09f99907da1dccd4c3a215af59e8233.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/7/3134322e3230322e39302e302f32342d3234203d3e20323135303033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.202.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:5b:b4:8f:44:0d:48:1c:60:fb:06:cd:d8:9b:19:d9:7a:d7:
         a7:cf:c5:41:fd:fa:d8:9f:13:a4:61:fd:05:74:82:45:d0:d8:
         7f:bc:9c:84:73:50:55:9b:ac:46:78:3c:c8:d6:3d:48:45:ad:
         ad:40:82:56:78:d7:db:b2:37:6e:78:fd:34:92:3f:12:77:7b:
         ec:dd:e4:07:ce:d0:64:a4:9d:b6:eb:24:eb:50:bb:ce:ba:d7:
         e1:d9:93:25:aa:06:e6:59:e3:41:85:47:d6:a1:04:9f:19:91:
         2b:90:98:69:a3:56:f6:de:88:3c:22:b3:d4:df:25:e0:d0:4d:
         8d:bc:d6:75:cd:21:9c:e2:0f:90:fa:0a:2a:c1:26:33:c4:79:
         f1:41:d4:6c:61:29:01:26:d2:47:09:eb:a6:21:a1:56:e7:dc:
         a0:9b:6b:3d:80:7d:68:fa:d6:94:e6:a4:04:c7:f6:99:65:5a:
         87:4f:4a:a5:e6:18:46:4d:85:79:78:cd:3a:6f:83:05:fd:81:
         30:c0:f2:67:43:b2:6b:7a:83:03:95:8e:5a:6a:e4:41:40:0d:
         33:eb:89:79:78:f0:75:bf:74:e1:8e:b5:ec:6f:56:85:5e:29:
         d8:ee:93:41:dd:6a:a8:68:b4:c0:e1:49:c4:c3:ce:24:6b:8f:
         cb:bc:7f:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:31:00 2026 by rpki-client