Route Origin Authorization

$ rpki-client -vvvf rpki.admin.freerangecloud.com/repo/FRC-CA/6/32332e3135322e3232352e302f32342d3234203d3e20323035353532.roa
File:                     32332e3135322e3232352e302f32342d3234203d3e20323035353532.roa (raw, json)
Hash identifier:          zAi5Ubmgawgj9invUATg3ofGUSGrTbRBzzUzCTtlFkY=
Subject key identifier:   34:D4:3B:11:34:4D:20:0D:A7:CE:E1:76:97:51:E2:16:1A:62:6A:17
Certificate issuer:       /CN=a928fd66fc0487f5bba93f4ce32eee8bebaefff5aea95e8454
Certificate serial:       6C3BFD11AA7A918465DA88F5B189EC167DACCAA4
Authority key identifier: 75:E8:A0:27:E9:2C:15:B9:41:4A:59:AC:09:6B:D4:63:4B:90:69:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9aeaefa1-9009-4d41-9090-b27ec04ef7ef/a928fd66fc0487f5bba93f4ce32eee8bebaefff5aea95e8454.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/6/32332e3135322e3232352e302f32342d3234203d3e20323035353532.roa
Signing time:             Sat 19 Sep 2026 22:31:33 +0000
ROA not before:           Sat 19 Sep 2026 22:26:33 +0000
ROA not after:            Sat 18 Sep 2027 22:31:33 +0000
asID:                     205552
IP address blocks:        23.152.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/6/75E8A027E92C15B9414A59AC096BD4634B906914.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/6/75E8A027E92C15B9414A59AC096BD4634B906914.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9aeaefa1-9009-4d41-9090-b27ec04ef7ef/a928fd66fc0487f5bba93f4ce32eee8bebaefff5aea95e8454.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9aeaefa1-9009-4d41-9090-b27ec04ef7ef/9aeaefa1-9009-4d41-9090-b27ec04ef7ef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9aeaefa1-9009-4d41-9090-b27ec04ef7ef/9aeaefa1-9009-4d41-9090-b27ec04ef7ef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9aeaefa1-9009-4d41-9090-b27ec04ef7ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:3b:fd:11:aa:7a:91:84:65:da:88:f5:b1:89:ec:16:7d:ac:ca:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a928fd66fc0487f5bba93f4ce32eee8bebaefff5aea95e8454
        Validity
            Not Before: Sep 19 22:26:33 2026 GMT
            Not After : Sep 18 22:31:33 2027 GMT
        Subject: CN=34D43B11344D200DA7CEE1769751E2161A626A17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:7d:12:f8:44:03:ff:93:1e:d5:42:9e:64:c8:
                    36:6b:e8:62:52:c1:03:d2:d5:28:b5:80:b8:a5:7a:
                    dd:8c:c0:d0:21:0f:9f:b5:23:86:a2:33:3a:7d:98:
                    97:e0:ef:b6:87:9b:67:02:2c:85:76:9b:e4:ca:39:
                    a1:ec:a8:83:ab:fa:0b:50:e4:f6:6f:eb:cd:f4:2e:
                    72:18:c0:52:e6:c4:7b:18:c6:0b:ec:97:b3:5f:03:
                    6e:32:28:80:d7:e0:df:33:d2:4e:c2:0e:b7:25:27:
                    28:21:99:df:2c:e6:c8:09:69:c2:a1:7f:99:05:d9:
                    84:be:4a:69:91:42:f7:3d:a0:fa:a1:95:d9:17:01:
                    94:8e:9e:6c:72:91:38:3a:48:71:97:db:0a:c9:fb:
                    91:b6:ff:24:af:65:4c:a8:63:06:b1:5b:33:b0:f3:
                    ee:78:a0:66:05:e0:64:c9:92:aa:74:83:30:a8:14:
                    16:65:a3:61:47:bb:cd:14:81:cb:51:5c:93:01:61:
                    15:ac:56:08:b6:25:b2:a9:8e:50:81:4c:67:92:6c:
                    98:fe:f8:cc:d1:84:27:31:79:de:00:23:db:97:b2:
                    6f:03:b9:09:ca:47:e6:5f:b5:7f:2d:23:24:a6:eb:
                    43:bd:bb:fb:98:1f:6d:d7:d1:d5:8d:41:99:cd:7c:
                    b7:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:D4:3B:11:34:4D:20:0D:A7:CE:E1:76:97:51:E2:16:1A:62:6A:17
            X509v3 Authority Key Identifier:
                keyid:75:E8:A0:27:E9:2C:15:B9:41:4A:59:AC:09:6B:D4:63:4B:90:69:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/6/75E8A027E92C15B9414A59AC096BD4634B906914.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9aeaefa1-9009-4d41-9090-b27ec04ef7ef/a928fd66fc0487f5bba93f4ce32eee8bebaefff5aea95e8454.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/6/32332e3135322e3232352e302f32342d3234203d3e20323035353532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.152.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:e0:27:04:8e:09:a0:99:3c:2a:ba:42:7d:50:81:d5:07:ba:
         19:3c:e4:4e:f8:7d:95:df:93:25:39:17:04:98:0f:b2:17:e3:
         18:de:69:84:c5:af:3d:ae:0b:76:b7:0c:78:f4:7d:ee:fe:49:
         8f:6d:5a:a1:93:1b:c5:d3:9d:c8:11:3b:91:68:66:14:2c:3a:
         e1:ca:2d:e7:58:1b:62:1b:bc:11:37:f8:a2:fe:21:f4:e4:e0:
         bd:e3:f2:f8:f2:ab:f0:59:8f:a6:cc:54:ed:57:96:8b:56:01:
         11:9c:7c:e3:76:6e:e9:eb:1f:dc:21:de:3a:ad:0c:a6:41:67:
         cb:10:af:10:f7:43:2a:6e:9f:88:cf:b3:3f:25:70:7c:8b:7e:
         cf:50:a6:8d:83:5b:ec:47:32:4f:45:b9:79:7c:e7:bc:56:06:
         a2:a7:3c:ed:a5:45:42:01:e1:83:0a:c4:3c:c4:71:0a:8a:cb:
         77:81:9a:66:25:80:c6:1c:fb:27:aa:7e:6b:6a:ba:87:b4:a9:
         c8:f0:65:b2:74:60:f6:05:eb:12:d6:39:15:fb:ae:c2:0f:7c:
         2f:76:7e:43:63:41:80:16:3c:5a:df:2d:45:b3:c0:0d:02:4e:
         b2:81:1d:de:18:97:02:a8:aa:da:8a:44:81:43:8f:3b:d8:50:
         7a:20:ad:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 19:34:20 2026 by rpki-client