Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/7/3134322e3230322e39302e302f32332d3234203d3e203533333536.roa
File:                     3134322e3230322e39302e302f32332d3234203d3e203533333536.roa (raw, json)
Hash identifier:          N9g0EJmgXds5RDTVSPDoNBUYr1n9LX5gpxTky8buvYU=
Subject key identifier:   69:BC:08:10:FC:0A:AD:FF:B5:BC:B7:C3:6E:32:A1:02:95:C0:88:D9
Certificate issuer:       /CN=46abb15c5b3d343c97c09f99907da1dccd4c3a215af59e8233
Certificate serial:       3C15EC9DFD6391D27C995568C601580ED58D21B2
Authority key identifier: FA:04:8A:F3:EA:62:E5:57:5B:46:98:C5:CC:24:03:98:28:93:F0:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a4f730e-74f5-4c41-9c06-be5d40c9917d/46abb15c5b3d343c97c09f99907da1dccd4c3a215af59e8233.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/7/3134322e3230322e39302e302f32332d3234203d3e203533333536.roa
Signing time:             Tue 17 Jun 2025 03:15:01 +0000
ROA not before:           Tue 17 Jun 2025 03:10:01 +0000
ROA not after:            Tue 16 Jun 2026 03:15:01 +0000
asID:                     53356
IP address blocks:        142.202.90.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/7/FA048AF3EA62E5575B4698C5CC2403982893F0C5.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/7/FA048AF3EA62E5575B4698C5CC2403982893F0C5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a4f730e-74f5-4c41-9c06-be5d40c9917d/46abb15c5b3d343c97c09f99907da1dccd4c3a215af59e8233.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a4f730e-74f5-4c41-9c06-be5d40c9917d/0a4f730e-74f5-4c41-9c06-be5d40c9917d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a4f730e-74f5-4c41-9c06-be5d40c9917d/0a4f730e-74f5-4c41-9c06-be5d40c9917d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a4f730e-74f5-4c41-9c06-be5d40c9917d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 22:56:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:15:ec:9d:fd:63:91:d2:7c:99:55:68:c6:01:58:0e:d5:8d:21:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46abb15c5b3d343c97c09f99907da1dccd4c3a215af59e8233
        Validity
            Not Before: Jun 17 03:10:01 2025 GMT
            Not After : Jun 16 03:15:01 2026 GMT
        Subject: CN=69BC0810FC0AADFFB5BCB7C36E32A10295C088D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:3b:91:43:ca:c6:29:ea:dc:0d:66:b9:31:55:
                    26:f4:f7:6d:ca:a0:22:e5:c3:7c:c5:10:5f:56:b6:
                    d4:45:cd:41:cb:ad:f6:d1:41:99:38:67:6c:1b:cb:
                    82:10:e7:db:5a:f3:17:f3:3d:4b:7d:01:60:62:76:
                    18:29:a9:f6:49:29:4f:9a:6d:b4:db:f6:2b:d9:a8:
                    fa:9a:22:09:aa:b6:69:fd:31:9c:1b:72:e4:42:af:
                    27:e4:28:c2:d3:0d:19:ff:8f:3f:09:c8:ab:89:e3:
                    53:6b:aa:ad:96:fe:7a:5d:73:03:4e:1a:03:ee:17:
                    e0:8a:26:ae:73:77:e4:fe:ca:29:a5:c7:1c:76:6b:
                    63:48:40:66:fa:9f:9b:77:48:3b:87:ed:0d:bd:97:
                    c5:e8:83:ba:aa:54:2f:d7:b8:cd:f3:84:fd:5d:88:
                    84:39:48:86:fb:0c:3f:f0:be:d6:e6:0a:eb:58:a8:
                    37:66:bd:20:c3:e9:bc:1e:2c:54:ba:ed:32:22:f0:
                    5d:07:1c:8a:a5:cb:87:76:f2:ff:26:7e:d3:75:a9:
                    ae:a7:ab:4f:5b:97:b7:5a:c1:5d:83:a8:f6:27:d1:
                    a7:07:48:81:10:67:41:36:39:6b:90:aa:92:be:93:
                    8f:69:aa:df:4c:d1:cf:eb:8f:21:12:2e:0a:8e:fb:
                    16:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:BC:08:10:FC:0A:AD:FF:B5:BC:B7:C3:6E:32:A1:02:95:C0:88:D9
            X509v3 Authority Key Identifier:
                keyid:FA:04:8A:F3:EA:62:E5:57:5B:46:98:C5:CC:24:03:98:28:93:F0:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/7/FA048AF3EA62E5575B4698C5CC2403982893F0C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a4f730e-74f5-4c41-9c06-be5d40c9917d/46abb15c5b3d343c97c09f99907da1dccd4c3a215af59e8233.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/7/3134322e3230322e39302e302f32332d3234203d3e203533333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.202.90.0/23

    Signature Algorithm: sha256WithRSAEncryption
         04:aa:39:cc:01:64:77:11:bc:ca:42:e0:67:b3:ae:22:df:f1:
         3d:91:3a:df:be:13:6d:41:24:a0:cd:2d:5f:54:22:60:c6:17:
         ed:a2:27:82:bb:ca:d9:eb:19:3b:ad:1e:0d:38:29:7f:2f:56:
         47:fe:d8:f8:c5:df:4a:f5:66:f1:9b:c3:72:85:94:bd:af:05:
         d1:5e:1d:6e:8d:75:c3:8f:60:41:f6:19:bb:cc:ae:a9:9f:d9:
         93:70:30:5e:7d:9d:1a:45:ef:1c:f5:df:21:6a:61:4e:2e:f9:
         9f:84:f3:af:fd:d3:76:0b:22:85:51:4e:16:ba:8c:b3:f6:35:
         94:6f:f6:20:98:7c:16:66:01:2f:5e:47:11:22:1b:92:c4:08:
         83:a5:07:a5:d1:54:32:dc:b6:7b:8d:6b:0c:62:9c:25:cc:8e:
         75:ae:87:46:4e:09:80:3a:49:f6:82:f9:59:dd:e3:2b:cc:92:
         b1:a4:e1:49:5e:10:ca:1e:2b:a1:b8:9e:e8:65:49:b6:e0:69:
         b2:6e:8d:2c:89:cc:0f:14:f9:cf:e9:3e:ab:ed:ef:c9:d5:7a:
         bf:fa:55:1f:19:62:59:51:02:aa:70:7f:47:5d:36:d8:f9:b4:
         dc:88:71:93:3f:55:9e:6d:38:77:5b:9b:0f:2e:12:31:ee:bb:
         fb:3c:cd:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 16:01:29 2025 by rpki-client