Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS53356.roa
File:                     AS53356.roa (raw, json)
Hash identifier:          NxyvuhDbiiXRTzdJCyWnZrr4wFPsMDcrt1FdPuiChnI=
Subject key identifier:   E6:79:B6:D5:E7:F4:C7:EE:7D:F5:6A:EF:FC:1E:D2:62:FE:E9:88:E5
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       0D5CC6045E300F389B868492CCF1DC90B40E1DA4
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS53356.roa
Signing time:             Mon 21 Jul 2025 04:12:45 +0000
ROA not before:           Mon 21 Jul 2025 04:07:45 +0000
ROA not after:            Mon 20 Jul 2026 04:12:45 +0000
asID:                     53356
IP address blocks:        23.129.32.0/24 maxlen: 24
                          23.133.64.0/24 maxlen: 24
                          161.129.60.0/24 maxlen: 24
                          167.88.50.0/24 maxlen: 24
                          206.83.40.0/24 maxlen: 24
                          206.83.41.0/24 maxlen: 24
                          2602:fed2:31::/48 maxlen: 48
                          2602:fed2:3e9::/48 maxlen: 48
                          2602:fed2:3eb::/48 maxlen: 48
                          2602:fed2:3ec::/48 maxlen: 48
                          2602:fed2:3ed::/48 maxlen: 48
                          2602:fed2:3ee::/48 maxlen: 49
                          2602:fed2:fa0::/44 maxlen: 46
                          2602:fed2:fb0::/44 maxlen: 46
                          2602:fed2:fc0::/44 maxlen: 45
                          2602:fed2:fe0::/44 maxlen: 45
                          2602:fed2:ff0::/48 maxlen: 48
                          2602:fed2:ff3::/48 maxlen: 48
                          2602:fed2:ff4::/48 maxlen: 48
                          2602:fed2:7000::/44 maxlen: 48
                          2602:fed2:7080::/48 maxlen: 48
                          2602:fed2:7088::/48 maxlen: 48
                          2602:fed2:708b::/48 maxlen: 48
                          2602:fed2:708c::/48 maxlen: 48
                          2602:fed2:7102::/48 maxlen: 48
                          2602:fed2:7109::/48 maxlen: 48
                          2602:fed2:710d::/48 maxlen: 48
                          2602:fed2:7113::/48 maxlen: 48
                          2602:fed2:7118::/48 maxlen: 48
                          2602:fed2:712d::/48 maxlen: 48
                          2602:fed2:712e::/48 maxlen: 48
                          2602:fed2:7181::/48 maxlen: 48
                          2602:fed2:7184::/48 maxlen: 48
                          2602:fed2:7187::/48 maxlen: 48
                          2602:fed2:7190::/48 maxlen: 48
                          2602:fed2:7305::/48 maxlen: 48
                          2602:fed2:7306::/48 maxlen: 48
                          2602:fed2:730c::/48 maxlen: 48
                          2602:fed2:730f::/48 maxlen: 48
                          2602:fed2:7311::/48 maxlen: 48
                          2602:fed2:7313::/48 maxlen: 48
                          2602:fed2:7315::/48 maxlen: 48
                          2602:fed2:731a::/48 maxlen: 48
                          2602:fed2:770a::/48 maxlen: 48
                          2602:fed2:7900::/40 maxlen: 40
                          2602:fed2:7e84::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Jul 2025 08:17:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:5c:c6:04:5e:30:0f:38:9b:86:84:92:cc:f1:dc:90:b4:0e:1d:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Jul 21 04:07:45 2025 GMT
            Not After : Jul 20 04:12:45 2026 GMT
        Subject: CN=E679B6D5E7F4C7EE7DF56AEFFC1ED262FEE988E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:5c:83:2d:e2:72:0b:07:a3:d4:86:bb:30:7c:
                    f3:d5:83:53:4a:95:2d:ef:03:e5:b5:e2:f2:d5:19:
                    54:e3:fa:fb:0d:e1:f5:3b:18:62:11:56:1b:69:da:
                    b9:84:55:46:81:cf:9f:b3:63:2e:f2:ea:3e:72:01:
                    b5:b0:86:3b:9e:56:8a:36:77:9a:bf:2e:53:17:0a:
                    71:39:2d:b4:6e:ab:59:de:7b:51:26:88:33:31:aa:
                    d5:00:0d:13:37:60:9d:93:98:29:3a:ff:51:92:ab:
                    66:48:82:2b:b4:ae:50:67:9b:5a:cf:0a:a7:86:f9:
                    90:e0:ff:c3:b7:90:6e:ef:10:fb:01:1a:d0:2c:49:
                    f7:a0:04:70:76:46:82:c8:65:b8:1a:43:66:f0:5c:
                    8e:dd:88:f3:f3:6e:42:31:cc:92:b9:ba:c3:c4:8c:
                    fb:f8:ec:cc:99:14:69:4a:a1:dc:7d:4e:f5:c7:53:
                    01:92:8c:77:47:54:60:f6:8c:db:53:8c:3a:99:36:
                    e4:5e:32:f7:ee:ee:11:35:3a:45:3c:87:26:32:af:
                    fe:72:ab:75:a2:9a:ef:f6:cb:4f:24:c6:16:2f:61:
                    e3:f3:43:2c:ae:82:b5:66:d2:7d:d0:d7:1d:9a:6a:
                    08:53:2a:25:4d:70:e0:dd:22:84:47:2c:c3:31:f6:
                    ad:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:79:B6:D5:E7:F4:C7:EE:7D:F5:6A:EF:FC:1E:D2:62:FE:E9:88:E5
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS53356.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.129.32.0/24
                  23.133.64.0/24
                  161.129.60.0/24
                  167.88.50.0/24
                  206.83.40.0/23
                IPv6:
                  2602:fed2:31::/48
                  2602:fed2:3e9::/48
                  2602:fed2:3eb::-2602:fed2:3ee:ffff:ffff:ffff:ffff:ffff
                  2602:fed2:fa0::-2602:fed2:fcf:ffff:ffff:ffff:ffff:ffff
                  2602:fed2:fe0::-2602:fed2:ff0:ffff:ffff:ffff:ffff:ffff
                  2602:fed2:ff3::-2602:fed2:ff4:ffff:ffff:ffff:ffff:ffff
                  2602:fed2:7000::/44
                  2602:fed2:7080::/48
                  2602:fed2:7088::/48
                  2602:fed2:708b::-2602:fed2:708c:ffff:ffff:ffff:ffff:ffff
                  2602:fed2:7102::/48
                  2602:fed2:7109::/48
                  2602:fed2:710d::/48
                  2602:fed2:7113::/48
                  2602:fed2:7118::/48
                  2602:fed2:712d::-2602:fed2:712e:ffff:ffff:ffff:ffff:ffff
                  2602:fed2:7181::/48
                  2602:fed2:7184::/48
                  2602:fed2:7187::/48
                  2602:fed2:7190::/48
                  2602:fed2:7305::-2602:fed2:7306:ffff:ffff:ffff:ffff:ffff
                  2602:fed2:730c::/48
                  2602:fed2:730f::/48
                  2602:fed2:7311::/48
                  2602:fed2:7313::/48
                  2602:fed2:7315::/48
                  2602:fed2:731a::/48
                  2602:fed2:770a::/48
                  2602:fed2:7900::/40
                  2602:fed2:7e84::/48

    Signature Algorithm: sha256WithRSAEncryption
         47:5b:fc:66:a0:18:7a:4b:de:9f:44:1f:22:1f:6d:c4:b7:6d:
         6e:db:96:ce:df:d0:e8:f2:0f:5d:fd:58:68:51:b2:13:99:67:
         8d:2d:bd:23:5c:e2:ef:aa:3c:10:c9:cf:17:a2:45:fc:a1:64:
         c5:97:b4:ad:6f:44:9c:6b:b4:49:ca:e6:fc:53:1a:67:e6:25:
         5e:61:d8:ac:5c:95:7d:20:68:f0:cd:ac:37:75:28:55:2e:3a:
         ab:8c:81:3d:3f:4b:5e:70:fa:27:de:7d:46:a7:66:3a:48:1b:
         fa:9a:d8:7f:5f:ab:30:c3:07:e5:82:77:67:04:99:47:0e:83:
         73:73:04:d5:e9:94:1f:f8:06:95:60:3f:aa:dc:6b:f8:94:88:
         7c:05:57:a4:4e:b1:51:7d:e1:00:f6:2a:47:22:a4:90:cf:a8:
         eb:d3:3d:db:95:fd:7e:07:87:3c:dd:9f:d2:e1:fb:38:47:c8:
         b4:47:72:ec:62:d3:18:ae:41:46:64:8a:d6:3a:be:de:56:dd:
         49:be:f2:ee:17:94:96:b3:f1:3d:55:61:d7:10:7d:e4:65:61:
         22:4a:1c:f1:27:e0:b8:80:93:9a:24:44:15:3f:7d:06:39:40:
         59:bb:1a:b0:53:80:b2:26:97:ff:78:ee:16:b6:4c:3e:40:8d:
         e9:e1:e2:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 00:34:50 2025 by rpki-client