Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/6/32332e3135322e3232342e302f32342d3234203d3e203533333536.roa
File:                     32332e3135322e3232342e302f32342d3234203d3e203533333536.roa (raw, json)
Hash identifier:          sr8xAW8CbysOR/bgVnpJf+8Rvm8zReQrB5lV36wgctg=
Subject key identifier:   E9:FE:5D:8A:EB:2D:9F:93:6E:3A:64:DD:80:0D:FA:F2:AC:7B:02:74
Certificate issuer:       /CN=a928fd66fc0487f5bba93f4ce32eee8bebaefff5aea95e8454
Certificate serial:       235B73204DE70CA8C868BA7B162DC6609BCDE1CB
Authority key identifier: 75:E8:A0:27:E9:2C:15:B9:41:4A:59:AC:09:6B:D4:63:4B:90:69:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9aeaefa1-9009-4d41-9090-b27ec04ef7ef/a928fd66fc0487f5bba93f4ce32eee8bebaefff5aea95e8454.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/6/32332e3135322e3232342e302f32342d3234203d3e203533333536.roa
Signing time:             Tue 17 Jun 2025 03:15:02 +0000
ROA not before:           Tue 17 Jun 2025 03:10:02 +0000
ROA not after:            Tue 16 Jun 2026 03:15:02 +0000
asID:                     53356
IP address blocks:        23.152.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/6/75E8A027E92C15B9414A59AC096BD4634B906914.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/6/75E8A027E92C15B9414A59AC096BD4634B906914.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9aeaefa1-9009-4d41-9090-b27ec04ef7ef/a928fd66fc0487f5bba93f4ce32eee8bebaefff5aea95e8454.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9aeaefa1-9009-4d41-9090-b27ec04ef7ef/9aeaefa1-9009-4d41-9090-b27ec04ef7ef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9aeaefa1-9009-4d41-9090-b27ec04ef7ef/9aeaefa1-9009-4d41-9090-b27ec04ef7ef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9aeaefa1-9009-4d41-9090-b27ec04ef7ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 06:20:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:5b:73:20:4d:e7:0c:a8:c8:68:ba:7b:16:2d:c6:60:9b:cd:e1:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a928fd66fc0487f5bba93f4ce32eee8bebaefff5aea95e8454
        Validity
            Not Before: Jun 17 03:10:02 2025 GMT
            Not After : Jun 16 03:15:02 2026 GMT
        Subject: CN=E9FE5D8AEB2D9F936E3A64DD800DFAF2AC7B0274
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:04:d4:73:88:93:2e:c6:be:95:5c:38:94:5e:
                    90:c1:de:d4:07:4c:82:63:42:cb:a3:15:62:51:90:
                    a1:48:87:4b:a6:8f:fd:8b:e5:7b:00:66:cc:a1:bf:
                    62:5f:73:25:46:33:e0:14:d4:a2:e9:98:5a:dc:3c:
                    51:18:5f:73:f3:5f:43:cf:e4:3c:17:19:9c:c9:19:
                    ab:d1:60:4e:80:9f:c1:77:82:3d:99:52:3f:93:b1:
                    e0:48:82:c7:18:a5:22:0e:ee:17:4c:b6:bf:6b:06:
                    b4:17:d6:05:e4:16:bb:be:25:4a:eb:ad:cd:0a:6d:
                    a5:e8:9a:18:80:7a:de:a0:5c:44:9e:c2:8c:7b:36:
                    41:90:85:35:0a:66:cf:e7:e8:39:82:1b:d0:47:d7:
                    54:51:9e:d9:02:ca:14:cf:c7:f7:bc:5b:ee:1c:ff:
                    47:48:92:28:b8:5f:01:3e:06:e2:9d:e6:1a:55:cb:
                    81:ef:9f:7e:9b:78:25:8a:da:0f:cb:2a:e7:9b:da:
                    f8:be:eb:d6:16:dd:94:d1:d7:9e:b5:6c:08:32:6a:
                    98:97:ee:f6:a1:c6:75:dd:05:d5:ad:4c:92:d7:94:
                    e8:4c:d8:51:c0:04:0a:73:16:2f:bc:82:fa:1d:1f:
                    96:dd:93:17:3d:7a:49:ec:f5:eb:23:e9:16:3c:31:
                    29:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:FE:5D:8A:EB:2D:9F:93:6E:3A:64:DD:80:0D:FA:F2:AC:7B:02:74
            X509v3 Authority Key Identifier:
                keyid:75:E8:A0:27:E9:2C:15:B9:41:4A:59:AC:09:6B:D4:63:4B:90:69:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/6/75E8A027E92C15B9414A59AC096BD4634B906914.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9aeaefa1-9009-4d41-9090-b27ec04ef7ef/a928fd66fc0487f5bba93f4ce32eee8bebaefff5aea95e8454.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/6/32332e3135322e3232342e302f32342d3234203d3e203533333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.152.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:a1:f6:cc:da:30:63:39:1f:51:5e:bd:13:a9:e6:08:90:90:
         41:8a:e6:56:f8:65:d7:0c:a7:4c:92:7a:ab:1e:22:89:8c:29:
         5c:a5:8c:97:89:e7:44:b4:a4:a3:49:9e:9c:20:2b:7d:a9:3d:
         1c:91:4e:81:86:45:45:ae:54:9b:38:cf:80:7c:48:d4:8f:8a:
         51:71:6b:81:bf:ab:2d:d9:eb:be:52:41:f4:d8:39:67:68:1b:
         90:47:b2:ff:4e:d3:ad:f3:50:5c:0e:b5:b5:64:98:f0:18:1e:
         6c:f3:b4:f8:38:1e:25:23:0a:1e:c8:27:08:87:66:2b:92:1c:
         6c:8e:9a:bf:ce:f5:45:24:a8:93:bc:ca:20:f9:b7:5c:1f:e3:
         61:39:34:4f:d4:26:c8:f7:f6:a2:1c:98:1f:1c:96:bc:df:fd:
         e7:4e:c4:72:5f:9b:cf:ef:3e:c9:52:4c:a6:d5:f8:25:6d:b3:
         ac:e1:3d:d6:ec:5f:df:4f:37:6f:c5:f7:eb:a9:33:d1:50:04:
         79:1b:0e:2a:1a:86:83:f0:b3:97:f5:85:fa:a3:54:fc:ad:bb:
         6a:d1:a8:a0:2f:27:95:31:3f:9d:cd:05:51:b2:15:d6:5b:6c:
         4e:ec:11:26:d2:35:81:19:37:0c:0e:eb:e3:ef:96:85:2b:b4:
         cd:8b:07:5f
-----BEGIN CERTIFICATE-----
MIIFhTCCBG2gAwIBAgIUI1tzIE3nDKjIaLp7Fi3GYJvN4cswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYTkyOGZkNjZmYzA0ODdmNWJiYTkzZjRjZTMyZWVlOGJl
YmFlZmZmNWFlYTk1ZTg0NTQwHhcNMjUwNjE3MDMxMDAyWhcNMjYwNjE2MDMxNTAy
WjAzMTEwLwYDVQQDEyhFOUZFNUQ4QUVCMkQ5RjkzNkUzQTY0REQ4MDBERkFGMkFD
N0IwMjc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ATUc4iTLsa+
lVw4lF6Qwd7UB0yCY0LLoxViUZChSIdLpo/9i+V7AGbMob9iX3MlRjPgFNSi6Zha
3DxRGF9z819Dz+Q8FxmcyRmr0WBOgJ/Bd4I9mVI/k7HgSILHGKUiDu4XTLa/awa0
F9YF5Ba7viVK663NCm2l6JoYgHreoFxEnsKMezZBkIU1CmbP5+g5ghvQR9dUUZ7Z
AsoUz8f3vFvuHP9HSJIouF8BPgbineYaVcuB759+m3glitoPyyrnm9r4vuvWFt2U
0deetWwIMmqYl+72ocZ13QXVrUyS15ToTNhRwAQKcxYvvIL6HR+W3ZMXPXpJ7PXr
I+kWPDEp/wIDAQABo4IChTCCAoEwHQYDVR0OBBYEFOn+XYrrLZ+Tbjpk3YAN+vKs
ewJ0MB8GA1UdIwQYMBaAFHXooCfpLBW5QUpZrAlr1GNLkGkUMA4GA1UdDwEB/wQE
AwIHgDBxBgNVHR8EajBoMGagZKBihmByc3luYzovL3Jwa2kuYWRtaW4uZnJlZXJh
bmdlY2xvdWQuY29tL3JlcG8vRlJDLUNBLzYvNzVFOEEwMjdFOTJDMTVCOTQxNEE1
OUFDMDk2QkQ0NjM0QjkwNjkxNC5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZm
ZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzlhZWFlZmExLTkwMDkt
NGQ0MS05MDkwLWIyN2VjMDRlZjdlZi9hOTI4ZmQ2NmZjMDQ4N2Y1YmJhOTNmNGNl
MzJlZWU4YmViYWVmZmY1YWVhOTVlODQ1NC5jZXIwgYoGCCsGAQUFBwELBH4wfDB6
BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLmFkbWluLmZyZWVyYW5nZWNsb3VkLmNv
bS9yZXBvL0ZSQy1DQS82LzMyMzMyZTMxMzUzMjJlMzIzMjM0MmUzMDJmMzIzNDJk
MzIzNDIwM2QzZTIwMzUzMzMzMzUzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEABeY4DANBgkqhkiG9w0B
AQsFAAOCAQEAAKH2zNowYzkfUV69E6nmCJCQQYrmVvhl1wynTJJ6qx4iiYwpXKWM
l4nnRLSko0menCArfak9HJFOgYZFRa5UmzjPgHxI1I+KUXFrgb+rLdnrvlJB9Ng5
Z2gbkEey/07TrfNQXA61tWSY8BgebPO0+DgeJSMKHsgnCIdmK5IcbI6av871RSSo
k7zKIPm3XB/jYTk0T9QmyPf2ohyYHxyWvN/9507Ecl+bz+8+yVJMptX4JW2zrOE9
1uxf3083b8X366kz0VAEeRsOKhqGg/Czl/WF+qNU/K27atGooC8nlTE/nc0FUbIV
1ltsTuwRJtI1gRk3DA7r4++WhSu0zYsHXw==
-----END CERTIFICATE-----
Generated at Tue Jun 17 15:15:45 2025 by rpki-client