Route Origin Authorization

$ rpki-client -vvvf rpki.admin.freerangecloud.com/repo/FRC-CA/7/3139392e3234352e3137362e302f32342d3234203d3e20323133313836.roa
File:                     3139392e3234352e3137362e302f32342d3234203d3e20323133313836.roa (raw, json)
Hash identifier:          qtEOU604XBNY7sDL+mxGcjRHBKiy/s9wl3s9xPGQ0DA=
Subject key identifier:   9B:E3:0A:D2:77:35:87:FE:D6:3E:67:DF:68:F1:8E:31:AC:C0:B8:57
Certificate issuer:       /CN=46abb15c5b3d343c97c09f99907da1dccd4c3a215af59e8233
Certificate serial:       34185C7FBDC4BFB0CC60A8C7C6C92753678A58B1
Authority key identifier: FA:04:8A:F3:EA:62:E5:57:5B:46:98:C5:CC:24:03:98:28:93:F0:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a4f730e-74f5-4c41-9c06-be5d40c9917d/46abb15c5b3d343c97c09f99907da1dccd4c3a215af59e8233.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/7/3139392e3234352e3137362e302f32342d3234203d3e20323133313836.roa
Signing time:             Thu 17 Sep 2026 02:31:30 +0000
ROA not before:           Thu 17 Sep 2026 02:26:30 +0000
ROA not after:            Thu 16 Sep 2027 02:31:30 +0000
asID:                     213186
IP address blocks:        199.245.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/7/FA048AF3EA62E5575B4698C5CC2403982893F0C5.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/7/FA048AF3EA62E5575B4698C5CC2403982893F0C5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a4f730e-74f5-4c41-9c06-be5d40c9917d/46abb15c5b3d343c97c09f99907da1dccd4c3a215af59e8233.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a4f730e-74f5-4c41-9c06-be5d40c9917d/0a4f730e-74f5-4c41-9c06-be5d40c9917d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a4f730e-74f5-4c41-9c06-be5d40c9917d/0a4f730e-74f5-4c41-9c06-be5d40c9917d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a4f730e-74f5-4c41-9c06-be5d40c9917d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:18:5c:7f:bd:c4:bf:b0:cc:60:a8:c7:c6:c9:27:53:67:8a:58:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46abb15c5b3d343c97c09f99907da1dccd4c3a215af59e8233
        Validity
            Not Before: Sep 17 02:26:30 2026 GMT
            Not After : Sep 16 02:31:30 2027 GMT
        Subject: CN=9BE30AD2773587FED63E67DF68F18E31ACC0B857
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:06:d7:43:40:32:6f:d0:07:51:8e:78:5a:53:
                    80:c7:23:e4:03:cf:d1:6a:f5:4d:62:56:f3:0b:6d:
                    6a:2f:88:c4:b2:e8:88:7d:94:b8:5a:9f:af:63:5e:
                    38:61:b1:36:5a:0a:c1:9a:99:b5:3b:28:d5:21:f5:
                    2c:57:11:98:ac:ef:e3:6d:3d:f7:b0:fd:70:a3:f2:
                    44:0c:47:34:c0:39:23:e2:14:35:e1:87:64:b2:75:
                    71:95:47:63:dc:6e:f8:38:b0:60:36:23:f9:16:46:
                    4b:de:ce:99:83:16:db:5d:37:ee:69:0e:57:ec:ba:
                    8c:6d:03:26:7a:88:31:ca:03:8f:e5:ef:65:27:72:
                    db:4e:5b:9b:41:da:84:e8:f7:b3:b5:e7:f7:23:95:
                    f1:67:e0:4c:27:6a:30:6f:bd:63:f6:53:14:68:73:
                    4e:8d:9c:a3:0d:ff:88:29:5d:41:1c:4f:be:de:a3:
                    93:fd:7e:5d:f2:a9:43:b4:d3:67:a6:e0:fd:72:31:
                    80:f1:32:86:19:81:4e:0e:f8:bf:62:d8:96:3f:8c:
                    22:a6:27:a1:54:22:79:d1:08:33:70:ea:a2:69:d6:
                    c4:3f:49:42:bf:cd:35:cf:37:44:90:ae:a3:bd:40:
                    30:e5:43:38:cb:2d:f1:64:c1:4e:63:4b:bc:f4:21:
                    a8:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:E3:0A:D2:77:35:87:FE:D6:3E:67:DF:68:F1:8E:31:AC:C0:B8:57
            X509v3 Authority Key Identifier:
                keyid:FA:04:8A:F3:EA:62:E5:57:5B:46:98:C5:CC:24:03:98:28:93:F0:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/7/FA048AF3EA62E5575B4698C5CC2403982893F0C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a4f730e-74f5-4c41-9c06-be5d40c9917d/46abb15c5b3d343c97c09f99907da1dccd4c3a215af59e8233.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/7/3139392e3234352e3137362e302f32342d3234203d3e20323133313836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.245.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:6c:e4:98:d6:71:fc:95:8c:d2:ea:b5:bb:27:6d:89:74:e4:
         fb:40:d3:e0:9c:db:ae:62:d8:fd:a9:e3:06:7c:49:56:e9:08:
         2a:79:c6:12:b8:7b:50:1b:67:45:9a:e3:ab:64:6a:96:45:92:
         d8:b1:7a:84:56:78:f0:9b:01:db:bf:74:4c:68:d6:a9:71:d5:
         a9:f4:d8:94:cc:93:74:e0:c3:f3:51:b4:b9:81:de:02:f6:48:
         5c:77:ad:fc:3c:6f:7c:22:2e:09:80:86:d5:65:3d:2f:05:1c:
         fb:00:60:72:34:74:a4:33:f4:04:88:2a:d1:cc:0a:4f:ee:0b:
         48:fc:95:f9:b8:6c:d4:4b:a0:41:ea:55:4e:42:bc:7d:c9:0c:
         94:e8:44:aa:0e:aa:03:92:ac:84:56:a6:dc:6c:73:3b:1b:d6:
         54:81:0d:34:7c:af:5d:2c:c2:70:cc:c5:7a:c6:19:b3:11:c8:
         82:19:9a:d6:ff:e0:da:d8:a2:cd:66:a2:fc:2d:42:81:f5:7d:
         4b:88:df:de:3c:ab:36:2b:e7:2e:c7:1a:29:f6:82:40:81:7a:
         22:6c:ce:41:d1:3c:3d:76:6c:1c:eb:c8:19:e4:1e:8f:53:90:
         df:d7:dc:9f:ac:98:97:60:9c:57:40:11:7a:39:60:e1:54:a5:
         f2:19:77:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 23:51:42 2026 by rpki-client