Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/7/32332e3139312e38302e302f32342d3234203d3e203533333536.roa
File:                     32332e3139312e38302e302f32342d3234203d3e203533333536.roa (raw, json)
Hash identifier:          HFg68baRz0QSouxIgvymWq50kg3+a7e8MG/E8E0ld4A=
Subject key identifier:   36:AC:D9:25:8D:A6:8D:18:95:8C:5F:CC:59:52:FF:6F:7D:65:01:F9
Certificate issuer:       /CN=46abb15c5b3d343c97c09f99907da1dccd4c3a215af59e8233
Certificate serial:       0A61AB745466BCDC697828EFFBFA28B76D53799E
Authority key identifier: FA:04:8A:F3:EA:62:E5:57:5B:46:98:C5:CC:24:03:98:28:93:F0:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a4f730e-74f5-4c41-9c06-be5d40c9917d/46abb15c5b3d343c97c09f99907da1dccd4c3a215af59e8233.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/7/32332e3139312e38302e302f32342d3234203d3e203533333536.roa
Signing time:             Tue 17 Jun 2025 03:15:01 +0000
ROA not before:           Tue 17 Jun 2025 03:10:01 +0000
ROA not after:            Tue 16 Jun 2026 03:15:01 +0000
asID:                     53356
IP address blocks:        23.191.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/7/FA048AF3EA62E5575B4698C5CC2403982893F0C5.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/7/FA048AF3EA62E5575B4698C5CC2403982893F0C5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a4f730e-74f5-4c41-9c06-be5d40c9917d/46abb15c5b3d343c97c09f99907da1dccd4c3a215af59e8233.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a4f730e-74f5-4c41-9c06-be5d40c9917d/0a4f730e-74f5-4c41-9c06-be5d40c9917d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a4f730e-74f5-4c41-9c06-be5d40c9917d/0a4f730e-74f5-4c41-9c06-be5d40c9917d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a4f730e-74f5-4c41-9c06-be5d40c9917d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 05:41:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:61:ab:74:54:66:bc:dc:69:78:28:ef:fb:fa:28:b7:6d:53:79:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46abb15c5b3d343c97c09f99907da1dccd4c3a215af59e8233
        Validity
            Not Before: Jun 17 03:10:01 2025 GMT
            Not After : Jun 16 03:15:01 2026 GMT
        Subject: CN=36ACD9258DA68D18958C5FCC5952FF6F7D6501F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ab:44:70:41:77:17:72:1a:c5:90:b1:80:37:
                    6f:06:91:3e:5b:bd:c9:f8:18:a0:b6:60:2f:88:ea:
                    26:e4:b9:a6:2f:2e:33:a1:ae:a0:04:92:e3:1a:6f:
                    1c:d0:ce:f1:d0:65:ef:7e:a6:3f:44:1b:82:27:8c:
                    50:63:a0:01:e9:dc:66:88:60:04:c1:82:75:ae:46:
                    c1:db:df:67:9b:ff:54:41:95:bb:c7:a1:ff:70:49:
                    c0:f3:7a:c4:81:e2:70:8b:9a:0b:85:ca:5f:6f:11:
                    cc:95:bb:c8:19:73:9e:dd:ea:2a:3e:3d:fb:0a:f0:
                    47:7a:a5:58:b3:da:f4:7f:04:04:12:15:d5:85:2b:
                    30:c4:77:68:93:88:25:ca:5a:3b:d3:3c:75:1b:b7:
                    c9:ef:79:04:54:54:3a:d9:f7:0e:7b:f0:b6:1c:1c:
                    26:57:20:6b:25:02:ed:2e:3c:97:5b:32:6b:9f:9b:
                    4b:ff:6f:18:d6:94:1e:aa:03:7a:0f:b2:30:f7:98:
                    ae:e8:05:e0:4f:4e:ce:bf:1b:3a:f2:35:d8:7b:da:
                    1d:1c:38:a6:99:3d:19:66:90:4c:fb:9d:fa:29:35:
                    3f:39:ac:60:dc:c1:fd:46:8c:56:13:2f:0b:d7:e9:
                    06:0d:c7:56:5c:7f:58:06:ad:40:c0:c6:92:5c:de:
                    2f:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:AC:D9:25:8D:A6:8D:18:95:8C:5F:CC:59:52:FF:6F:7D:65:01:F9
            X509v3 Authority Key Identifier:
                keyid:FA:04:8A:F3:EA:62:E5:57:5B:46:98:C5:CC:24:03:98:28:93:F0:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/7/FA048AF3EA62E5575B4698C5CC2403982893F0C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a4f730e-74f5-4c41-9c06-be5d40c9917d/46abb15c5b3d343c97c09f99907da1dccd4c3a215af59e8233.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/7/32332e3139312e38302e302f32342d3234203d3e203533333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.191.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:51:9c:4b:fc:f0:f1:11:4f:10:f8:75:cb:b9:10:1c:b1:1d:
         e8:93:1f:e1:2a:44:74:a7:81:02:50:e5:97:cc:dd:32:ef:31:
         94:95:33:94:47:52:86:d9:a0:e2:4e:f2:8d:ef:a1:1e:a4:78:
         eb:c6:a2:e2:14:c0:a2:28:fc:d7:9b:3d:0d:f5:83:15:5b:aa:
         66:75:09:5e:cb:3c:50:a8:2e:51:6a:9b:18:1f:55:1f:e7:e7:
         bb:75:77:31:8c:a1:7b:ba:df:8a:98:c7:33:57:4d:68:36:09:
         b5:31:b0:76:17:d2:db:8b:7e:07:91:85:18:5f:08:d3:05:c3:
         a5:b9:3c:33:22:70:b3:2c:a7:2d:1b:df:81:ec:af:dc:c9:d9:
         f7:2d:d2:b4:07:5f:8a:5f:e7:97:64:1a:48:e1:05:ec:ac:15:
         05:ec:c8:66:73:96:83:db:ce:fe:54:6d:f5:f1:d5:d0:2a:b5:
         a2:11:44:3f:34:40:e9:af:b9:ae:0d:af:5d:f6:71:ca:08:bb:
         10:90:44:c0:82:c3:ac:40:9d:fb:14:f1:43:7f:89:5f:7e:f6:
         45:4a:2e:83:85:71:30:76:00:ab:a5:63:c5:a2:cc:68:88:32:
         10:cb:e3:72:32:ec:cd:8f:b5:71:b0:dd:db:43:b7:ab:72:c3:
         a7:ff:26:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 09:20:08 2025 by rpki-client