Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/7/3134322e3230322e39302e302f32342d3234203d3e203534313333.roa
File:                     3134322e3230322e39302e302f32342d3234203d3e203534313333.roa (raw, json)
Hash identifier:          Od2R23Cbq/NaCeQjqKx9/LwWVg9UceQwnXmx/P7SzUE=
Subject key identifier:   7B:FE:5C:4D:39:B7:4E:11:5C:D2:0F:66:FB:5C:FF:18:BE:C4:75:62
Certificate issuer:       /CN=46abb15c5b3d343c97c09f99907da1dccd4c3a215af59e8233
Certificate serial:       46F3CA3689FF61FBA88864CF31F92244573E239E
Authority key identifier: FA:04:8A:F3:EA:62:E5:57:5B:46:98:C5:CC:24:03:98:28:93:F0:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a4f730e-74f5-4c41-9c06-be5d40c9917d/46abb15c5b3d343c97c09f99907da1dccd4c3a215af59e8233.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/7/3134322e3230322e39302e302f32342d3234203d3e203534313333.roa
Signing time:             Fri 08 May 2026 00:58:35 +0000
ROA not before:           Fri 08 May 2026 00:53:35 +0000
ROA not after:            Fri 07 May 2027 00:58:35 +0000
asID:                     54133
IP address blocks:        142.202.90.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/7/FA048AF3EA62E5575B4698C5CC2403982893F0C5.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/7/FA048AF3EA62E5575B4698C5CC2403982893F0C5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a4f730e-74f5-4c41-9c06-be5d40c9917d/46abb15c5b3d343c97c09f99907da1dccd4c3a215af59e8233.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a4f730e-74f5-4c41-9c06-be5d40c9917d/0a4f730e-74f5-4c41-9c06-be5d40c9917d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a4f730e-74f5-4c41-9c06-be5d40c9917d/0a4f730e-74f5-4c41-9c06-be5d40c9917d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a4f730e-74f5-4c41-9c06-be5d40c9917d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:f3:ca:36:89:ff:61:fb:a8:88:64:cf:31:f9:22:44:57:3e:23:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46abb15c5b3d343c97c09f99907da1dccd4c3a215af59e8233
        Validity
            Not Before: May  8 00:53:35 2026 GMT
            Not After : May  7 00:58:35 2027 GMT
        Subject: CN=7BFE5C4D39B74E115CD20F66FB5CFF18BEC47562
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:bc:7b:be:7a:30:4c:9e:47:c7:59:a4:2d:89:
                    a8:db:08:5a:46:f9:1d:64:3d:1d:2c:a1:98:14:99:
                    87:d4:e7:b3:af:1f:ab:e4:f4:14:58:70:24:a7:e5:
                    ca:b2:4a:69:e4:36:df:ff:06:6e:31:a4:7e:6a:85:
                    f6:00:9a:92:f0:65:08:60:3b:13:6b:fd:b1:3f:f3:
                    6e:a2:4d:66:75:16:ea:c7:40:d1:ac:2b:ed:3f:99:
                    ef:18:6d:77:dd:ba:fb:b3:b2:1a:ed:62:8a:cd:fc:
                    98:64:4c:c9:e4:4c:e0:e1:69:68:5d:4d:02:85:6e:
                    c0:b8:d7:e3:98:7d:03:c4:86:d7:59:7a:5f:da:7a:
                    22:32:ab:9e:29:38:94:64:8e:0d:30:d0:9f:ad:57:
                    c8:32:31:31:e6:0b:af:4e:07:e8:7a:1d:a0:5e:1b:
                    f3:ae:d2:74:66:b7:ea:08:84:d3:de:eb:87:71:6f:
                    dc:19:4b:4f:58:31:3e:6b:93:32:96:ff:de:b6:5c:
                    f3:fb:6e:aa:d7:b5:23:fa:12:7f:eb:d8:1c:73:4a:
                    c4:71:d4:a8:21:a4:b7:8e:86:ed:b4:af:02:09:d7:
                    75:d1:dc:7c:9a:36:fa:31:08:00:2f:12:fb:f5:a3:
                    df:c9:8b:0b:1a:05:68:64:38:96:b6:36:d6:ca:21:
                    d9:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:FE:5C:4D:39:B7:4E:11:5C:D2:0F:66:FB:5C:FF:18:BE:C4:75:62
            X509v3 Authority Key Identifier:
                keyid:FA:04:8A:F3:EA:62:E5:57:5B:46:98:C5:CC:24:03:98:28:93:F0:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/7/FA048AF3EA62E5575B4698C5CC2403982893F0C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a4f730e-74f5-4c41-9c06-be5d40c9917d/46abb15c5b3d343c97c09f99907da1dccd4c3a215af59e8233.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/7/3134322e3230322e39302e302f32342d3234203d3e203534313333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.202.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:42:ea:d1:ae:65:0e:a2:62:cf:54:a5:8e:17:81:87:42:08:
         6c:60:29:cb:99:00:87:ef:f0:3e:04:91:0a:69:79:46:75:08:
         45:c6:04:2b:74:6f:e5:34:f0:de:70:60:d2:4f:2e:7a:db:95:
         44:2c:7a:bb:3f:ca:20:dd:c3:3f:cc:3e:e2:6a:ac:d6:60:ee:
         5f:3f:3e:65:a0:8e:57:1c:ed:4f:d2:9d:1a:c5:18:77:5e:35:
         f2:3b:16:d6:de:a6:62:f2:6a:c3:fe:1d:a2:e1:06:f3:2b:d4:
         89:b3:50:c5:ef:b8:a2:91:cb:61:b9:eb:0a:e5:23:66:7d:33:
         94:9b:39:be:a6:0d:dd:1d:70:40:3d:62:44:52:8e:dd:29:f0:
         f0:51:ee:c4:6f:a0:34:90:49:6f:ce:0b:11:a7:33:31:a5:be:
         c8:5a:1c:ce:b0:d4:fc:ee:ad:25:00:6c:e4:b1:19:a8:4f:d7:
         47:9f:a4:4c:7f:ec:22:bf:04:c5:28:5f:ba:be:5c:e5:78:a6:
         86:b4:44:2b:d4:03:0b:ff:88:a4:5b:19:19:38:de:f3:a6:e9:
         29:36:a9:7d:0a:d1:37:7d:27:35:c3:bf:eb:74:1c:cc:21:59:
         05:20:8c:03:75:da:c6:44:b0:23:3b:f0:0c:f9:e3:4a:b9:0d:
         cc:bd:94:b0
-----BEGIN CERTIFICATE-----
MIIFhTCCBG2gAwIBAgIURvPKNon/YfuoiGTPMfkiRFc+I54wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNDZhYmIxNWM1YjNkMzQzYzk3YzA5Zjk5OTA3ZGExZGNj
ZDRjM2EyMTVhZjU5ZTgyMzMwHhcNMjYwNTA4MDA1MzM1WhcNMjcwNTA3MDA1ODM1
WjAzMTEwLwYDVQQDEyg3QkZFNUM0RDM5Qjc0RTExNUNEMjBGNjZGQjVDRkYxOEJF
QzQ3NTYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx7x7vnowTJ5H
x1mkLYmo2whaRvkdZD0dLKGYFJmH1Oezrx+r5PQUWHAkp+XKskpp5Dbf/wZuMaR+
aoX2AJqS8GUIYDsTa/2xP/Nuok1mdRbqx0DRrCvtP5nvGG133br7s7Ia7WKKzfyY
ZEzJ5Ezg4WloXU0ChW7AuNfjmH0DxIbXWXpf2noiMqueKTiUZI4NMNCfrVfIMjEx
5guvTgfoeh2gXhvzrtJ0ZrfqCITT3uuHcW/cGUtPWDE+a5Mylv/etlzz+26q17Uj
+hJ/69gcc0rEcdSoIaS3jobttK8CCdd10dx8mjb6MQgALxL79aPfyYsLGgVoZDiW
tjbWyiHZ2QIDAQABo4IChTCCAoEwHQYDVR0OBBYEFHv+XE05t04RXNIPZvtc/xi+
xHViMB8GA1UdIwQYMBaAFPoEivPqYuVXW0aYxcwkA5gok/DFMA4GA1UdDwEB/wQE
AwIHgDBxBgNVHR8EajBoMGagZKBihmByc3luYzovL3Jwa2kuYWRtaW4uZnJlZXJh
bmdlY2xvdWQuY29tL3JlcG8vRlJDLUNBLzcvRkEwNDhBRjNFQTYyRTU1NzVCNDY5
OEM1Q0MyNDAzOTgyODkzRjBDNS5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIx
ZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzBhNGY3MzBlLTc0ZjUt
NGM0MS05YzA2LWJlNWQ0MGM5OTE3ZC80NmFiYjE1YzViM2QzNDNjOTdjMDlmOTk5
MDdkYTFkY2NkNGMzYTIxNWFmNTllODIzMy5jZXIwgYoGCCsGAQUFBwELBH4wfDB6
BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLmFkbWluLmZyZWVyYW5nZWNsb3VkLmNv
bS9yZXBvL0ZSQy1DQS83LzMxMzQzMjJlMzIzMDMyMmUzOTMwMmUzMDJmMzIzNDJk
MzIzNDIwM2QzZTIwMzUzNDMxMzMzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAI7KWjANBgkqhkiG9w0B
AQsFAAOCAQEAikLq0a5lDqJiz1SljheBh0IIbGApy5kAh+/wPgSRCml5RnUIRcYE
K3Rv5TTw3nBg0k8uetuVRCx6uz/KIN3DP8w+4mqs1mDuXz8+ZaCOVxztT9KdGsUY
d1418jsW1t6mYvJqw/4douEG8yvUibNQxe+4opHLYbnrCuUjZn0zlJs5vqYN3R1w
QD1iRFKO3Snw8FHuxG+gNJBJb84LEaczMaW+yFoczrDU/O6tJQBs5LEZqE/XR5+k
TH/sIr8ExShfur5c5XimhrREK9QDC/+IpFsZGTje86bpKTapfQrRN30nNcO/63Qc
zCFZBSCMA3XaxkSwIzvwDPnjSrkNzL2UsA==
-----END CERTIFICATE-----
Generated at Wed May 13 00:58:56 2026 by rpki-client