Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/7/3134322e3230322e39302e302f32342d3234203d3e20323135303033.roa
File:                     3134322e3230322e39302e302f32342d3234203d3e20323135303033.roa (raw, json)
Hash identifier:          iqGcSyxC6RIJHc+OBv2Upb0ld+dUl5XqNAZaWZ4MbZg=
Subject key identifier:   9E:4C:92:8E:E0:DD:1E:0D:15:8A:0F:CA:DC:8B:8B:78:04:31:10:6A
Certificate issuer:       /CN=46abb15c5b3d343c97c09f99907da1dccd4c3a215af59e8233
Certificate serial:       5E9B95E7FBB1E9905AE1E2089EC84F95C404A056
Authority key identifier: FA:04:8A:F3:EA:62:E5:57:5B:46:98:C5:CC:24:03:98:28:93:F0:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a4f730e-74f5-4c41-9c06-be5d40c9917d/46abb15c5b3d343c97c09f99907da1dccd4c3a215af59e8233.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/7/3134322e3230322e39302e302f32342d3234203d3e20323135303033.roa
Signing time:             Sun 03 Aug 2025 22:48:07 +0000
ROA not before:           Sun 03 Aug 2025 22:43:07 +0000
ROA not after:            Sun 02 Aug 2026 22:48:07 +0000
asID:                     215003
IP address blocks:        142.202.90.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/7/FA048AF3EA62E5575B4698C5CC2403982893F0C5.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/7/FA048AF3EA62E5575B4698C5CC2403982893F0C5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a4f730e-74f5-4c41-9c06-be5d40c9917d/46abb15c5b3d343c97c09f99907da1dccd4c3a215af59e8233.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a4f730e-74f5-4c41-9c06-be5d40c9917d/0a4f730e-74f5-4c41-9c06-be5d40c9917d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a4f730e-74f5-4c41-9c06-be5d40c9917d/0a4f730e-74f5-4c41-9c06-be5d40c9917d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a4f730e-74f5-4c41-9c06-be5d40c9917d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 05:12:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:9b:95:e7:fb:b1:e9:90:5a:e1:e2:08:9e:c8:4f:95:c4:04:a0:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46abb15c5b3d343c97c09f99907da1dccd4c3a215af59e8233
        Validity
            Not Before: Aug  3 22:43:07 2025 GMT
            Not After : Aug  2 22:48:07 2026 GMT
        Subject: CN=9E4C928EE0DD1E0D158A0FCADC8B8B780431106A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:83:a2:a3:28:5d:31:89:57:30:3d:b8:3d:b4:
                    4c:f2:9f:cd:e3:8f:18:82:3c:3c:89:8d:f0:61:c9:
                    3d:2d:f6:f8:4d:03:7c:02:08:b1:62:26:36:bc:aa:
                    4c:97:03:38:f1:54:35:70:1f:88:66:ba:8d:ad:e5:
                    74:e5:dc:dd:7b:f3:92:f2:e7:3e:2d:de:e7:af:88:
                    08:13:c0:ee:0c:c6:61:eb:cc:11:a5:6b:0b:6f:2f:
                    0f:5a:7b:36:cd:9c:d4:c5:e2:33:07:5f:3e:0c:c0:
                    65:68:00:9d:8a:c7:94:97:20:15:89:29:8d:ca:2e:
                    db:d6:5f:73:1d:85:40:ec:f3:24:64:21:0d:60:e2:
                    d0:a2:6a:de:41:a0:fb:87:12:d5:35:ed:85:9a:af:
                    1e:62:32:60:4a:46:74:d6:1a:aa:4b:7d:af:8d:97:
                    d1:8e:33:24:dd:05:69:e5:57:9e:ed:0e:53:77:19:
                    2e:90:fd:b1:f6:59:ed:35:f0:12:4f:a8:dc:21:1d:
                    05:a5:40:47:9d:c7:2b:f1:59:52:01:92:c2:48:59:
                    9f:32:44:47:57:65:82:0c:ec:07:ec:1b:f0:a3:65:
                    65:a0:9c:3f:47:83:64:2b:11:c2:31:50:34:91:bb:
                    6d:bf:9b:8d:d4:f4:f1:94:08:dd:77:e9:32:c1:21:
                    65:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:4C:92:8E:E0:DD:1E:0D:15:8A:0F:CA:DC:8B:8B:78:04:31:10:6A
            X509v3 Authority Key Identifier:
                keyid:FA:04:8A:F3:EA:62:E5:57:5B:46:98:C5:CC:24:03:98:28:93:F0:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/7/FA048AF3EA62E5575B4698C5CC2403982893F0C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a4f730e-74f5-4c41-9c06-be5d40c9917d/46abb15c5b3d343c97c09f99907da1dccd4c3a215af59e8233.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/7/3134322e3230322e39302e302f32342d3234203d3e20323135303033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.202.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:d2:f4:de:67:9c:3b:29:6a:48:b1:f2:e0:4f:50:45:f0:b9:
         8b:7b:40:94:29:30:c0:8a:7f:08:e5:18:79:7b:a6:54:d7:9a:
         07:49:1d:df:9b:8a:82:85:b2:aa:47:b5:ff:fd:1e:b0:79:75:
         27:89:61:6b:34:5e:08:e4:96:0c:58:ef:d7:7c:d6:f4:76:a9:
         f2:0a:f5:63:33:aa:cc:81:f1:18:6f:b4:49:66:e0:e8:5c:f5:
         cb:9f:09:d6:79:44:cf:c8:25:b2:4d:2d:be:5e:47:96:44:73:
         f1:c0:9e:44:8b:79:a1:b6:72:88:c7:05:d2:cd:dc:47:04:d4:
         a7:3a:ff:e6:86:00:1e:22:04:db:73:d6:76:30:0e:39:59:81:
         96:69:a1:dc:94:8d:b2:3e:77:f0:71:5d:60:31:91:12:75:42:
         4c:9e:38:df:76:0d:28:f7:c6:90:d0:cf:e0:82:82:2b:05:18:
         3d:dc:4a:78:52:3b:86:0f:87:b2:d1:85:42:0a:cb:ea:a7:35:
         58:2b:27:bd:b8:39:44:3e:dc:92:06:46:8a:1e:79:eb:53:3d:
         7a:2e:3b:65:c3:de:65:6c:6a:aa:81:8a:c7:ac:74:d1:57:09:
         bf:9c:f0:84:91:91:bd:05:02:5b:36:2c:f0:30:83:7a:b9:81:
         a3:d3:71:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:42:56 2025 by rpki-client