Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/7/3139392e3234352e3137362e302f32342d3234203d3e20323133313836.roa
File:                     3139392e3234352e3137362e302f32342d3234203d3e20323133313836.roa (raw, json)
Hash identifier:          MEY73Q2pzks8mWxcS9GKi0xsKq2c0k6Dgp+0/C8C7ZQ=
Subject key identifier:   9D:E7:96:20:5B:61:D8:6D:E0:27:AF:C3:E9:C8:65:54:F2:16:54:8F
Certificate issuer:       /CN=46abb15c5b3d343c97c09f99907da1dccd4c3a215af59e8233
Certificate serial:       1627AE7F49AB3024820AC955C8B7E134D7986F28
Authority key identifier: FA:04:8A:F3:EA:62:E5:57:5B:46:98:C5:CC:24:03:98:28:93:F0:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a4f730e-74f5-4c41-9c06-be5d40c9917d/46abb15c5b3d343c97c09f99907da1dccd4c3a215af59e8233.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/7/3139392e3234352e3137362e302f32342d3234203d3e20323133313836.roa
Signing time:             Thu 16 Oct 2025 01:56:01 +0000
ROA not before:           Thu 16 Oct 2025 01:51:01 +0000
ROA not after:            Thu 15 Oct 2026 01:56:01 +0000
asID:                     213186
IP address blocks:        199.245.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/7/FA048AF3EA62E5575B4698C5CC2403982893F0C5.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/7/FA048AF3EA62E5575B4698C5CC2403982893F0C5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a4f730e-74f5-4c41-9c06-be5d40c9917d/46abb15c5b3d343c97c09f99907da1dccd4c3a215af59e8233.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a4f730e-74f5-4c41-9c06-be5d40c9917d/0a4f730e-74f5-4c41-9c06-be5d40c9917d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a4f730e-74f5-4c41-9c06-be5d40c9917d/0a4f730e-74f5-4c41-9c06-be5d40c9917d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a4f730e-74f5-4c41-9c06-be5d40c9917d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 19:37:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:27:ae:7f:49:ab:30:24:82:0a:c9:55:c8:b7:e1:34:d7:98:6f:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46abb15c5b3d343c97c09f99907da1dccd4c3a215af59e8233
        Validity
            Not Before: Oct 16 01:51:01 2025 GMT
            Not After : Oct 15 01:56:01 2026 GMT
        Subject: CN=9DE796205B61D86DE027AFC3E9C86554F216548F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:91:a7:df:6c:6a:1d:32:30:33:fd:5d:13:c1:
                    b4:16:fa:41:f9:d7:b9:95:ac:8f:75:98:cd:e2:bb:
                    f5:30:9b:38:cc:7b:7e:f5:2c:c5:11:23:96:4a:a9:
                    33:ae:8e:cd:62:3b:0e:85:23:59:5a:25:fc:5f:3c:
                    e1:76:15:a9:7e:b1:b9:9c:ea:20:80:02:37:5b:32:
                    73:d1:cb:05:3b:2d:23:18:2f:f0:93:5b:6e:c3:2e:
                    e4:fb:2e:be:cb:c9:9b:86:19:d8:45:0b:eb:5d:70:
                    dc:d9:eb:a2:f8:18:06:63:7e:c4:21:0a:97:6b:48:
                    7a:b9:9f:ed:84:a8:2a:fb:a6:8d:e1:5c:e7:ae:77:
                    f6:dd:b4:76:76:f8:8b:ab:2e:61:16:fb:ec:76:4f:
                    1a:3e:56:8f:0b:58:00:a6:67:73:d7:9a:32:b1:47:
                    64:29:5d:aa:e1:71:39:be:5d:01:2e:da:e6:e2:42:
                    1d:65:47:5f:81:74:e3:32:f9:f7:20:38:e2:ab:9d:
                    e3:e7:9b:47:ee:37:2f:3d:be:1f:99:42:4a:e5:ae:
                    9d:35:ec:b1:c1:9e:86:40:9c:9d:ef:4d:2e:f7:de:
                    96:2b:d5:92:de:ea:92:92:b7:19:e2:52:5c:15:56:
                    a5:57:96:43:6c:1a:ca:7d:31:54:81:c0:99:e3:d2:
                    0c:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:E7:96:20:5B:61:D8:6D:E0:27:AF:C3:E9:C8:65:54:F2:16:54:8F
            X509v3 Authority Key Identifier:
                keyid:FA:04:8A:F3:EA:62:E5:57:5B:46:98:C5:CC:24:03:98:28:93:F0:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/7/FA048AF3EA62E5575B4698C5CC2403982893F0C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a4f730e-74f5-4c41-9c06-be5d40c9917d/46abb15c5b3d343c97c09f99907da1dccd4c3a215af59e8233.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/7/3139392e3234352e3137362e302f32342d3234203d3e20323133313836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.245.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:b6:bf:85:3b:8a:4e:c7:41:5b:9a:69:85:db:34:2b:81:f0:
         eb:c6:e3:f0:1a:01:de:3c:4c:c2:0e:f7:36:00:0d:99:62:78:
         73:ec:41:60:c4:34:fa:72:be:0a:f7:c2:95:f7:74:43:2f:23:
         88:49:a5:97:a6:07:5c:3f:01:29:62:a0:6a:8a:bd:39:84:d8:
         5e:0d:db:8a:df:a2:c7:f9:40:74:6e:11:78:dd:40:6b:be:21:
         58:52:a8:dc:33:15:3e:32:50:82:9f:1a:05:e9:67:72:28:5c:
         83:59:14:17:8f:0c:9c:4a:21:c4:e1:6e:f4:c1:82:bf:dd:35:
         00:62:5c:c0:fd:7f:01:ed:72:c5:a0:aa:a8:42:6d:bc:e0:41:
         e1:76:61:b9:f9:be:8e:d7:01:39:92:95:1c:6c:a6:27:9e:11:
         16:b6:f8:20:98:b8:2d:0d:be:4d:10:e3:47:64:25:3e:16:83:
         17:ed:c5:41:e7:84:89:8e:96:8a:a2:5e:be:2a:96:4a:de:13:
         a6:8e:f7:dc:29:62:6c:da:de:5a:d5:d9:d8:4b:7a:07:63:b4:
         6b:10:d4:26:32:33:1a:54:b1:3a:c7:f2:85:db:75:c0:f3:cf:
         b0:99:53:46:33:fc:8c:86:9e:04:94:2d:2f:91:4e:8f:90:e9:
         22:c7:3c:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:47:38 2025 by rpki-client