Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/7/3134322e3230322e39302e302f32342d3234203d3e20323135313837.roa
File:                     3134322e3230322e39302e302f32342d3234203d3e20323135313837.roa (raw, json)
Hash identifier:          7oKbOxNo3ziHVVwpp4MzoHDQc3EqMYqngLbzzJowWWA=
Subject key identifier:   2A:1D:7A:98:33:50:E2:C1:54:D5:44:A5:EE:31:0C:55:82:FC:09:B1
Certificate issuer:       /CN=46abb15c5b3d343c97c09f99907da1dccd4c3a215af59e8233
Certificate serial:       4A41AAF0B8FB70D75D48C45E1894FAD547B141B2
Authority key identifier: FA:04:8A:F3:EA:62:E5:57:5B:46:98:C5:CC:24:03:98:28:93:F0:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a4f730e-74f5-4c41-9c06-be5d40c9917d/46abb15c5b3d343c97c09f99907da1dccd4c3a215af59e8233.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/7/3134322e3230322e39302e302f32342d3234203d3e20323135313837.roa
Signing time:             Sun 19 Oct 2025 01:14:52 +0000
ROA not before:           Sun 19 Oct 2025 01:09:52 +0000
ROA not after:            Sun 18 Oct 2026 01:14:52 +0000
asID:                     215187
IP address blocks:        142.202.90.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/7/FA048AF3EA62E5575B4698C5CC2403982893F0C5.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/7/FA048AF3EA62E5575B4698C5CC2403982893F0C5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a4f730e-74f5-4c41-9c06-be5d40c9917d/46abb15c5b3d343c97c09f99907da1dccd4c3a215af59e8233.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a4f730e-74f5-4c41-9c06-be5d40c9917d/0a4f730e-74f5-4c41-9c06-be5d40c9917d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a4f730e-74f5-4c41-9c06-be5d40c9917d/0a4f730e-74f5-4c41-9c06-be5d40c9917d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a4f730e-74f5-4c41-9c06-be5d40c9917d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 15:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:41:aa:f0:b8:fb:70:d7:5d:48:c4:5e:18:94:fa:d5:47:b1:41:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46abb15c5b3d343c97c09f99907da1dccd4c3a215af59e8233
        Validity
            Not Before: Oct 19 01:09:52 2025 GMT
            Not After : Oct 18 01:14:52 2026 GMT
        Subject: CN=2A1D7A983350E2C154D544A5EE310C5582FC09B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:bd:0f:aa:a5:14:08:81:06:5f:e4:b3:49:78:
                    7f:01:ac:4d:92:33:f3:d1:f4:cf:03:b0:ed:96:e9:
                    22:af:7d:84:c6:ef:17:70:27:d2:a5:4a:c1:eb:7e:
                    e3:95:db:c4:9b:3a:38:9e:94:8d:75:b9:6b:43:87:
                    10:80:4b:dd:5b:11:9c:d4:68:4a:fe:31:06:9a:3f:
                    32:d4:a0:6d:18:de:2f:b0:69:e2:99:34:0c:40:91:
                    f2:a3:7a:07:1e:c9:f8:90:ad:84:ef:92:e3:20:e3:
                    75:f0:89:5f:85:9c:5d:09:b9:74:3e:6b:56:0e:0e:
                    58:0e:6c:46:ef:39:26:f2:8a:51:5f:e1:27:1b:37:
                    df:f7:e4:4d:8a:f5:2b:c3:38:30:18:b4:ee:f5:3d:
                    40:32:8c:a5:3c:b6:d4:bd:78:4c:ff:25:a3:40:92:
                    76:03:d4:57:84:bf:98:dc:86:96:ca:a0:f0:98:7f:
                    fe:f0:cd:74:d4:d4:8f:28:e1:5b:48:49:6c:54:3e:
                    70:f1:43:e6:bc:fe:87:cc:8a:60:48:ae:7d:61:2f:
                    fd:fe:1c:3f:15:da:38:41:b8:5f:74:e3:35:a5:43:
                    10:3e:3c:0d:36:eb:f8:36:77:35:7d:d5:9a:f5:40:
                    90:9b:9a:1f:95:96:e8:57:65:6b:b7:25:7f:45:cf:
                    cf:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:1D:7A:98:33:50:E2:C1:54:D5:44:A5:EE:31:0C:55:82:FC:09:B1
            X509v3 Authority Key Identifier:
                keyid:FA:04:8A:F3:EA:62:E5:57:5B:46:98:C5:CC:24:03:98:28:93:F0:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/7/FA048AF3EA62E5575B4698C5CC2403982893F0C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a4f730e-74f5-4c41-9c06-be5d40c9917d/46abb15c5b3d343c97c09f99907da1dccd4c3a215af59e8233.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/7/3134322e3230322e39302e302f32342d3234203d3e20323135313837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.202.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:f6:fc:39:c9:d1:f5:a1:c9:39:da:b1:05:4b:65:ab:ad:b8:
         ef:fd:cc:03:da:ed:9b:49:ed:70:4d:1c:99:62:03:1d:54:d2:
         51:83:8a:6d:0b:43:89:65:a4:95:b4:ce:cd:1c:98:42:5e:1f:
         cb:8b:50:33:80:cb:44:e2:93:49:3f:9a:ef:8d:d7:b2:30:4c:
         9d:6a:0d:38:35:04:11:9b:3e:6c:ad:1d:9e:53:a6:a0:68:c7:
         99:2a:46:be:3b:c0:09:6e:d2:e9:95:e3:dc:40:9e:b7:dd:5d:
         3b:a3:e1:06:bf:f2:e6:d6:4d:3d:46:ff:15:29:40:f1:52:e2:
         ba:71:4d:6b:d9:e9:04:4a:40:56:3b:b4:a6:2d:7e:53:84:fd:
         55:ec:0f:d7:b8:a8:b7:f9:bf:dd:a3:d6:f7:fa:84:79:8f:be:
         c9:39:38:96:28:9d:ed:81:db:da:36:ce:5c:cf:d1:70:26:70:
         7e:7a:4b:95:9c:47:52:b1:ce:68:fd:0e:2f:cc:17:8d:c8:9f:
         91:7b:f5:7e:f3:c8:a9:02:33:ef:99:13:df:b0:30:25:64:3b:
         15:0d:30:94:21:c1:53:8c:7d:e6:ae:58:f7:26:8a:8a:f3:80:
         11:37:f2:7b:e2:e3:a1:e6:58:8b:68:24:53:be:d6:86:a6:66:
         18:08:ab:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:00:21 2025 by rpki-client