Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/3/3230362e38332e382e302f32342d3234203d3e20313339363836.roa
File:                     3230362e38332e382e302f32342d3234203d3e20313339363836.roa (raw, json)
Hash identifier:          I76vwtMnCxOJnzyJSme/Zad72J4JArFLET312hYrAKk=
Subject key identifier:   A5:03:37:63:1A:1A:31:CB:5F:F1:47:0F:DD:80:F2:67:93:02:BC:8B
Certificate issuer:       /CN=9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef
Certificate serial:       692803B2590291EB60F7347EA28945984BB27E41
Authority key identifier: A0:DF:8E:B2:8D:12:F9:CD:F7:A6:8B:3D:C7:A5:65:76:74:8B:2E:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/3230362e38332e382e302f32342d3234203d3e20313339363836.roa
Signing time:             Tue 17 Jun 2025 03:15:01 +0000
ROA not before:           Tue 17 Jun 2025 03:10:01 +0000
ROA not after:            Tue 16 Jun 2026 03:15:01 +0000
asID:                     139686
IP address blocks:        206.83.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/A0DF8EB28D12F9CDF7A68B3DC7A56576748B2E54.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/A0DF8EB28D12F9CDF7A68B3DC7A56576748B2E54.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/8bb7e416-db1b-4221-a6c0-947074a20f8f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/8bb7e416-db1b-4221-a6c0-947074a20f8f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 00:16:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:28:03:b2:59:02:91:eb:60:f7:34:7e:a2:89:45:98:4b:b2:7e:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef
        Validity
            Not Before: Jun 17 03:10:01 2025 GMT
            Not After : Jun 16 03:15:01 2026 GMT
        Subject: CN=A50337631A1A31CB5FF1470FDD80F2679302BC8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:8c:17:71:72:e3:7f:01:b1:7e:b7:73:c1:ea:
                    fd:b4:f5:3c:92:ce:c7:f1:83:14:30:0b:d3:e9:10:
                    65:af:03:73:f2:29:de:39:9a:a8:44:f0:f5:8c:65:
                    40:02:26:60:2e:81:a1:6b:17:f2:01:5d:62:de:42:
                    64:f9:27:02:ca:46:54:f5:7c:4c:1c:bc:c1:1b:a2:
                    30:66:a6:b9:1c:82:92:b7:c3:76:b3:22:e3:7f:d1:
                    fe:b1:7a:89:e9:21:12:f1:dc:0c:39:2f:bf:66:a4:
                    db:c5:cd:8f:7e:ae:ff:68:55:a0:bc:2d:84:6e:fb:
                    e0:f8:dd:ba:ad:a5:8f:c0:af:ce:50:0f:ea:07:6d:
                    ec:19:7e:18:c7:89:2f:35:f5:84:b1:39:80:aa:e9:
                    28:41:85:9d:a4:54:92:f7:5a:f6:50:08:10:ed:ed:
                    15:c6:90:01:d8:28:4e:a9:ab:fc:d9:c7:24:a1:07:
                    bd:fc:21:3f:67:49:80:49:63:be:1a:da:22:42:be:
                    99:61:ab:82:7c:ea:a6:9a:4e:fc:c3:27:66:0e:9e:
                    22:af:47:55:50:98:0c:d9:db:6e:77:b0:f4:34:53:
                    81:ad:69:4c:45:42:bf:1d:8c:ee:b3:a8:99:e8:0d:
                    50:1a:5e:78:99:de:8e:36:a4:38:b1:f5:07:75:be:
                    a4:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:03:37:63:1A:1A:31:CB:5F:F1:47:0F:DD:80:F2:67:93:02:BC:8B
            X509v3 Authority Key Identifier:
                keyid:A0:DF:8E:B2:8D:12:F9:CD:F7:A6:8B:3D:C7:A5:65:76:74:8B:2E:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/A0DF8EB28D12F9CDF7A68B3DC7A56576748B2E54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/3230362e38332e382e302f32342d3234203d3e20313339363836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.83.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:2a:a2:7d:f6:e6:91:3e:61:90:3f:e2:f8:04:9d:14:75:ef:
         d0:55:57:02:81:b8:f3:fd:7a:e1:7a:f6:b1:4c:63:f1:e6:64:
         05:ab:b3:97:21:ed:cf:3a:67:75:6f:06:db:2d:ae:0e:b0:04:
         7b:67:3d:58:a7:17:95:03:a9:29:61:d2:ef:5a:ba:cf:55:84:
         7c:9a:37:3b:db:24:1a:d1:37:1a:a7:c8:ee:e2:83:84:3f:4a:
         75:68:6a:ff:6e:ed:df:b3:92:e0:ea:a7:5b:43:f3:9b:3f:ed:
         a9:5e:84:0b:c1:b7:ff:67:ee:bb:b7:3c:89:a9:04:4d:f8:d0:
         f9:1f:6d:ad:b1:60:95:a6:e6:03:b2:ba:c6:0b:4b:cd:bc:50:
         33:6a:3d:d0:6f:ec:4b:7d:7b:16:15:11:b8:b4:01:ce:eb:b2:
         72:0a:05:fe:69:54:83:1a:c3:dc:d4:a3:bf:16:c0:04:6f:ec:
         6d:9c:3b:90:6d:6d:0e:c5:74:c3:66:51:cf:32:7f:eb:78:53:
         83:de:d2:e7:4c:26:90:1e:1d:3a:4d:30:15:42:0b:33:80:24:
         cb:bd:ed:ad:64:ea:08:bd:aa:9f:20:ff:72:85:e2:37:23:06:
         03:97:10:54:5c:b6:18:9d:50:17:11:4f:59:87:7e:dd:19:45:
         61:1f:19:19
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIUaSgDslkCketg9zR+oolFmEuyfkEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOWFiMjhmYmM4YzA4NGQzNmNkMjZkMzA4YjE2NzAyZTU5
ZTAxZmNiYTY4MWJmZWM5ZWYwHhcNMjUwNjE3MDMxMDAxWhcNMjYwNjE2MDMxNTAx
WjAzMTEwLwYDVQQDEyhBNTAzMzc2MzFBMUEzMUNCNUZGMTQ3MEZERDgwRjI2Nzkz
MDJCQzhCMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnYwXcXLjfwGx
frdzwer9tPU8ks7H8YMUMAvT6RBlrwNz8ineOZqoRPD1jGVAAiZgLoGhaxfyAV1i
3kJk+ScCykZU9XxMHLzBG6IwZqa5HIKSt8N2syLjf9H+sXqJ6SES8dwMOS+/ZqTb
xc2Pfq7/aFWgvC2Ebvvg+N26raWPwK/OUA/qB23sGX4Yx4kvNfWEsTmAqukoQYWd
pFSS91r2UAgQ7e0VxpAB2ChOqav82cckoQe9/CE/Z0mASWO+GtoiQr6ZYauCfOqm
mk78wydmDp4ir0dVUJgM2dtud7D0NFOBrWlMRUK/HYzus6iZ6A1QGl54md6ONqQ4
sfUHdb6ktQIDAQABo4ICgzCCAn8wHQYDVR0OBBYEFKUDN2MaGjHLX/FHD92A8meT
AryLMB8GA1UdIwQYMBaAFKDfjrKNEvnN96aLPcelZXZ0iy5UMA4GA1UdDwEB/wQE
AwIHgDBxBgNVHR8EajBoMGagZKBihmByc3luYzovL3Jwa2kuYWRtaW4uZnJlZXJh
bmdlY2xvdWQuY29tL3JlcG8vRlJDLUNBLzMvQTBERjhFQjI4RDEyRjlDREY3QTY4
QjNEQzdBNTY1NzY3NDhCMkU1NC5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZm
ZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzhiYjdlNDE2LWRiMWIt
NDIyMS1hNmMwLTk0NzA3NGEyMGY4Zi85YWIyOGZiYzhjMDg0ZDM2Y2QyNmQzMDhi
MTY3MDJlNTllMDFmY2JhNjgxYmZlYzllZi5jZXIwgYgGCCsGAQUFBwELBHwwejB4
BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLmFkbWluLmZyZWVyYW5nZWNsb3VkLmNv
bS9yZXBvL0ZSQy1DQS8zLzMyMzAzNjJlMzgzMzJlMzgyZTMwMmYzMjM0MmQzMjM0
MjAzZDNlMjAzMTMzMzkzNjM4MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH
DgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADOUwgwDQYJKoZIhvcNAQEL
BQADggEBADgqon325pE+YZA/4vgEnRR179BVVwKBuPP9euF69rFMY/HmZAWrs5ch
7c86Z3VvBtstrg6wBHtnPVinF5UDqSlh0u9aus9VhHyaNzvbJBrRNxqnyO7ig4Q/
SnVoav9u7d+zkuDqp1tD85s/7alehAvBt/9n7ru3PImpBE340Pkfba2xYJWm5gOy
usYLS828UDNqPdBv7Et9exYVEbi0Ac7rsnIKBf5pVIMaw9zUo78WwARv7G2cO5Bt
bQ7FdMNmUc8yf+t4U4Pe0udMJpAeHTpNMBVCCzOAJMu97a1k6gi9qp8g/3KF4jcj
BgOXEFRcthidUBcRT1mHft0ZRWEfGRk=
-----END CERTIFICATE-----
Generated at Wed Jun 18 16:36:41 2025 by rpki-client