Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/7/32332e3139312e38302e302f32342d3234203d3e203533333536.roa
File:                     32332e3139312e38302e302f32342d3234203d3e203533333536.roa (raw, json)
Hash identifier:          OUMn9QjNnTJvEprbT5Ckq5soLY7Ip5eP/Z+b+vs+JnQ=
Subject key identifier:   57:85:07:16:74:01:52:02:77:0F:9B:76:AC:40:AF:92:FF:5C:AC:EC
Certificate issuer:       /CN=46abb15c5b3d343c97c09f99907da1dccd4c3a215af59e8233
Certificate serial:       7B4B41AE9EB0F8EB8778B34B05A0B0349EAC47
Authority key identifier: FA:04:8A:F3:EA:62:E5:57:5B:46:98:C5:CC:24:03:98:28:93:F0:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a4f730e-74f5-4c41-9c06-be5d40c9917d/46abb15c5b3d343c97c09f99907da1dccd4c3a215af59e8233.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/7/32332e3139312e38302e302f32342d3234203d3e203533333536.roa
Signing time:             Tue 19 May 2026 04:03:16 +0000
ROA not before:           Tue 19 May 2026 03:58:16 +0000
ROA not after:            Tue 18 May 2027 04:03:16 +0000
asID:                     53356
IP address blocks:        23.191.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/7/FA048AF3EA62E5575B4698C5CC2403982893F0C5.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/7/FA048AF3EA62E5575B4698C5CC2403982893F0C5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a4f730e-74f5-4c41-9c06-be5d40c9917d/46abb15c5b3d343c97c09f99907da1dccd4c3a215af59e8233.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a4f730e-74f5-4c41-9c06-be5d40c9917d/0a4f730e-74f5-4c41-9c06-be5d40c9917d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a4f730e-74f5-4c41-9c06-be5d40c9917d/0a4f730e-74f5-4c41-9c06-be5d40c9917d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a4f730e-74f5-4c41-9c06-be5d40c9917d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:4b:41:ae:9e:b0:f8:eb:87:78:b3:4b:05:a0:b0:34:9e:ac:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46abb15c5b3d343c97c09f99907da1dccd4c3a215af59e8233
        Validity
            Not Before: May 19 03:58:16 2026 GMT
            Not After : May 18 04:03:16 2027 GMT
        Subject: CN=5785071674015202770F9B76AC40AF92FF5CACEC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b7:cd:f2:88:7e:ee:6a:8e:dc:95:30:14:02:
                    0d:b7:79:43:99:22:93:06:4f:fe:93:ac:98:36:14:
                    c4:e2:d2:95:84:3c:f8:8a:09:49:9d:7f:ae:f2:d3:
                    1a:19:6e:7d:58:84:5a:45:8b:73:75:67:b1:fa:53:
                    4c:5a:06:2e:d1:0e:32:69:08:56:ea:31:f0:c7:3a:
                    5d:e4:d9:d0:dc:d7:e4:1a:2c:b8:1c:ef:75:67:1e:
                    65:7f:e8:92:e9:0b:f8:fb:f6:14:05:83:c9:12:c5:
                    50:fe:95:eb:16:6f:27:d6:68:b9:47:06:5c:ba:2c:
                    27:05:68:c4:55:8a:69:66:27:04:49:6a:0c:31:23:
                    21:6b:d6:4f:1e:b5:bc:dc:8c:a6:86:6f:51:41:9c:
                    09:8b:ba:da:e1:88:13:04:19:b1:68:8b:e3:47:d1:
                    f5:7d:69:34:65:3e:17:a9:7e:cd:e1:6f:53:b7:5c:
                    6c:fe:94:15:b7:cb:b9:c6:9b:c2:ba:a0:83:99:47:
                    a3:ff:12:4a:d9:57:97:95:66:c6:82:18:7b:68:ae:
                    9c:c4:23:1c:d6:01:c6:f8:2a:e1:61:e1:e8:99:b1:
                    ad:5a:47:d6:91:1e:02:4c:3e:fd:e7:9d:2a:97:f5:
                    43:24:89:d2:2a:93:64:4f:94:3e:8d:05:89:f6:39:
                    3e:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:85:07:16:74:01:52:02:77:0F:9B:76:AC:40:AF:92:FF:5C:AC:EC
            X509v3 Authority Key Identifier:
                keyid:FA:04:8A:F3:EA:62:E5:57:5B:46:98:C5:CC:24:03:98:28:93:F0:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/7/FA048AF3EA62E5575B4698C5CC2403982893F0C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a4f730e-74f5-4c41-9c06-be5d40c9917d/46abb15c5b3d343c97c09f99907da1dccd4c3a215af59e8233.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/7/32332e3139312e38302e302f32342d3234203d3e203533333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.191.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:26:62:d6:56:cc:5d:6f:ab:33:7a:20:58:53:08:18:be:7e:
         25:01:3d:42:b3:ef:4d:d7:b0:66:58:3a:dd:06:13:e5:1c:06:
         5b:45:1f:56:d6:10:82:d5:8f:4d:ef:b6:e5:12:94:48:f9:17:
         80:79:53:d6:2a:e0:c3:57:da:91:fe:95:56:e4:b4:bb:07:f5:
         3d:bf:bb:21:07:90:45:cf:9b:74:84:0f:e1:4b:c7:91:b2:db:
         3b:ae:52:69:3a:a3:e9:2e:22:b9:61:0b:18:43:9b:e2:74:e9:
         7d:46:d5:f3:30:71:57:ac:fc:7e:02:41:cc:54:18:2b:c7:a7:
         60:e2:3c:c8:47:95:e7:d1:4f:c1:11:ea:a3:f4:97:4e:14:52:
         41:f7:87:05:cf:74:82:aa:ad:c5:94:41:6d:af:11:6d:a3:fa:
         1f:9a:36:3e:5d:16:6e:f3:57:fc:7a:d4:71:d9:fe:d8:a1:79:
         b7:c7:1b:42:41:e3:81:65:a1:32:9f:80:8c:f0:16:c3:80:ca:
         95:da:aa:88:61:12:02:bc:80:3d:e4:28:7b:5e:8e:0c:f7:44:
         c0:db:8e:70:0e:64:d1:77:c1:2b:69:98:87:77:7a:f6:2a:01:
         8e:4e:a9:6f:52:06:4a:3b:7b:bb:43:0c:80:d7:4a:98:dd:af:
         05:3c:27:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:24:33 2026 by rpki-client