Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/7/3134322e3230322e39302e302f32332d3234203d3e203533333536.roa
File:                     3134322e3230322e39302e302f32332d3234203d3e203533333536.roa (raw, json)
Hash identifier:          aYmHsJWKl9dagLrwbVh4J1VCmYCl9SRb54SiXm0D9Qk=
Subject key identifier:   27:FE:B5:D7:73:AB:91:D2:C0:3C:3D:83:2A:7F:75:56:76:6C:6E:48
Certificate issuer:       /CN=46abb15c5b3d343c97c09f99907da1dccd4c3a215af59e8233
Certificate serial:       700D091039EE3FB6BBD6BDEAB58ED77672349987
Authority key identifier: FA:04:8A:F3:EA:62:E5:57:5B:46:98:C5:CC:24:03:98:28:93:F0:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a4f730e-74f5-4c41-9c06-be5d40c9917d/46abb15c5b3d343c97c09f99907da1dccd4c3a215af59e8233.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/7/3134322e3230322e39302e302f32332d3234203d3e203533333536.roa
Signing time:             Tue 19 May 2026 04:03:16 +0000
ROA not before:           Tue 19 May 2026 03:58:16 +0000
ROA not after:            Tue 18 May 2027 04:03:16 +0000
asID:                     53356
IP address blocks:        142.202.90.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/7/FA048AF3EA62E5575B4698C5CC2403982893F0C5.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/7/FA048AF3EA62E5575B4698C5CC2403982893F0C5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a4f730e-74f5-4c41-9c06-be5d40c9917d/46abb15c5b3d343c97c09f99907da1dccd4c3a215af59e8233.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a4f730e-74f5-4c41-9c06-be5d40c9917d/0a4f730e-74f5-4c41-9c06-be5d40c9917d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a4f730e-74f5-4c41-9c06-be5d40c9917d/0a4f730e-74f5-4c41-9c06-be5d40c9917d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a4f730e-74f5-4c41-9c06-be5d40c9917d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:0d:09:10:39:ee:3f:b6:bb:d6:bd:ea:b5:8e:d7:76:72:34:99:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46abb15c5b3d343c97c09f99907da1dccd4c3a215af59e8233
        Validity
            Not Before: May 19 03:58:16 2026 GMT
            Not After : May 18 04:03:16 2027 GMT
        Subject: CN=27FEB5D773AB91D2C03C3D832A7F7556766C6E48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:7a:bf:8a:aa:f4:a4:71:c9:45:0f:fc:97:ed:
                    b3:f8:07:2c:38:4d:74:4a:fa:0a:f8:48:92:e4:ec:
                    a1:5d:96:29:ef:1c:17:18:34:c1:d3:68:f9:cb:75:
                    a5:cc:2f:3b:e1:93:af:f1:e8:c7:17:77:83:e9:c3:
                    a0:db:fe:23:60:3a:4e:ab:99:1c:b0:3a:28:00:72:
                    d5:55:a5:88:34:bb:be:68:b4:10:6c:d4:73:2c:25:
                    a7:0f:15:9a:4e:e0:21:46:40:9c:69:18:77:4a:1c:
                    5d:85:c4:d5:b6:30:19:0b:f7:91:21:60:5e:48:28:
                    34:3e:49:08:5b:c8:0d:97:73:b7:3a:9b:e1:b5:bf:
                    af:45:fa:20:f2:fa:80:c4:45:fa:b5:c1:e1:ad:56:
                    6d:56:3f:8e:6e:02:26:8c:a4:f0:21:af:33:04:10:
                    3e:14:ac:c5:71:b9:49:8e:54:6a:46:d6:73:bd:2a:
                    4c:a9:4f:72:f5:06:6d:51:22:75:05:56:29:2c:f0:
                    28:a0:0c:bf:e7:43:71:2a:c1:2a:11:86:50:45:a6:
                    66:1f:06:00:d2:d0:4e:19:b1:ba:9d:5e:77:91:d5:
                    a7:4d:8b:3f:ee:00:d1:e4:62:ff:03:5f:c4:5b:9b:
                    b4:e7:2e:a0:c7:ce:fb:a1:4a:7b:a8:45:2f:06:2c:
                    88:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:FE:B5:D7:73:AB:91:D2:C0:3C:3D:83:2A:7F:75:56:76:6C:6E:48
            X509v3 Authority Key Identifier:
                keyid:FA:04:8A:F3:EA:62:E5:57:5B:46:98:C5:CC:24:03:98:28:93:F0:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/7/FA048AF3EA62E5575B4698C5CC2403982893F0C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a4f730e-74f5-4c41-9c06-be5d40c9917d/46abb15c5b3d343c97c09f99907da1dccd4c3a215af59e8233.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/7/3134322e3230322e39302e302f32332d3234203d3e203533333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.202.90.0/23

    Signature Algorithm: sha256WithRSAEncryption
         25:ff:b7:08:c1:b3:97:83:44:38:86:a9:cf:33:04:49:5e:f3:
         ea:99:8b:30:f4:65:e2:f2:fa:8f:03:65:a2:a7:3f:b4:63:ed:
         e5:08:35:a7:78:e0:db:fc:cd:00:c2:37:be:b5:fd:77:a4:e6:
         5a:8f:28:47:8d:e3:80:3f:05:82:2c:f8:f4:83:7e:4f:29:35:
         91:3f:3b:4b:ff:d5:2b:33:9e:34:04:2b:a3:91:6c:c5:92:58:
         ec:46:d7:34:b8:e9:27:3b:45:40:b1:5f:8a:83:d1:85:ae:09:
         1a:ee:2e:e8:39:2c:a5:81:7a:ce:21:3b:62:aa:2f:6d:b4:f6:
         81:31:b2:eb:92:f3:f6:4f:b9:ac:9a:03:12:77:1b:38:3e:7b:
         7e:ce:5c:d6:fc:31:71:d0:37:c0:a6:ff:18:e0:9d:76:c5:89:
         d4:2b:35:80:1c:bb:b4:e6:6b:1f:b8:04:fc:d2:a0:f6:5f:05:
         85:57:fb:5e:f8:f9:46:81:3f:31:56:55:71:8a:3a:2b:66:8e:
         94:2e:5c:2a:53:ca:88:02:f6:26:5b:f6:aa:d4:65:8e:8a:ff:
         10:ea:3c:51:e8:e0:d3:74:2e:e8:a2:4c:28:61:26:77:97:c6:
         f7:4a:c3:71:de:0f:49:a2:02:12:03:42:e4:53:25:4f:42:99:
         30:c4:f5:45
-----BEGIN CERTIFICATE-----
MIIFhTCCBG2gAwIBAgIUcA0JEDnuP7a71r3qtY7XdnI0mYcwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNDZhYmIxNWM1YjNkMzQzYzk3YzA5Zjk5OTA3ZGExZGNj
ZDRjM2EyMTVhZjU5ZTgyMzMwHhcNMjYwNTE5MDM1ODE2WhcNMjcwNTE4MDQwMzE2
WjAzMTEwLwYDVQQDEygyN0ZFQjVENzczQUI5MUQyQzAzQzNEODMyQTdGNzU1Njc2
NkM2RTQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA03q/iqr0pHHJ
RQ/8l+2z+AcsOE10SvoK+EiS5OyhXZYp7xwXGDTB02j5y3WlzC874ZOv8ejHF3eD
6cOg2/4jYDpOq5kcsDooAHLVVaWINLu+aLQQbNRzLCWnDxWaTuAhRkCcaRh3Shxd
hcTVtjAZC/eRIWBeSCg0PkkIW8gNl3O3Opvhtb+vRfog8vqAxEX6tcHhrVZtVj+O
bgImjKTwIa8zBBA+FKzFcblJjlRqRtZzvSpMqU9y9QZtUSJ1BVYpLPAooAy/50Nx
KsEqEYZQRaZmHwYA0tBOGbG6nV53kdWnTYs/7gDR5GL/A1/EW5u05y6gx877oUp7
qEUvBiyINwIDAQABo4IChTCCAoEwHQYDVR0OBBYEFCf+tddzq5HSwDw9gyp/dVZ2
bG5IMB8GA1UdIwQYMBaAFPoEivPqYuVXW0aYxcwkA5gok/DFMA4GA1UdDwEB/wQE
AwIHgDBxBgNVHR8EajBoMGagZKBihmByc3luYzovL3Jwa2kuYWRtaW4uZnJlZXJh
bmdlY2xvdWQuY29tL3JlcG8vRlJDLUNBLzcvRkEwNDhBRjNFQTYyRTU1NzVCNDY5
OEM1Q0MyNDAzOTgyODkzRjBDNS5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIx
ZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzBhNGY3MzBlLTc0ZjUt
NGM0MS05YzA2LWJlNWQ0MGM5OTE3ZC80NmFiYjE1YzViM2QzNDNjOTdjMDlmOTk5
MDdkYTFkY2NkNGMzYTIxNWFmNTllODIzMy5jZXIwgYoGCCsGAQUFBwELBH4wfDB6
BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLmFkbWluLmZyZWVyYW5nZWNsb3VkLmNv
bS9yZXBvL0ZSQy1DQS83LzMxMzQzMjJlMzIzMDMyMmUzOTMwMmUzMDJmMzIzMzJk
MzIzNDIwM2QzZTIwMzUzMzMzMzUzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAY7KWjANBgkqhkiG9w0B
AQsFAAOCAQEAJf+3CMGzl4NEOIapzzMESV7z6pmLMPRl4vL6jwNloqc/tGPt5Qg1
p3jg2/zNAMI3vrX9d6TmWo8oR43jgD8Fgiz49IN+Tyk1kT87S//VKzOeNAQro5Fs
xZJY7EbXNLjpJztFQLFfioPRha4JGu4u6DkspYF6ziE7YqovbbT2gTGy65Lz9k+5
rJoDEncbOD57fs5c1vwxcdA3wKb/GOCddsWJ1Cs1gBy7tOZrH7gE/NKg9l8FhVf7
Xvj5RoE/MVZVcYo6K2aOlC5cKlPKiAL2Jlv2qtRljor/EOo8Uejg03Qu6KJMKGEm
d5fG90rDcd4PSaICEgNC5FMlT0KZMMT1RQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 08:02:00 2026 by rpki-client