Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS53356.roa
File:                     AS53356.roa (raw, json)
Hash identifier:          Qo82I/PMZDFEUeHKUCE3FDC7tOTqXF9H+PrG9j6CGOQ=
Subject key identifier:   70:79:E0:30:81:45:93:0B:72:E4:93:3F:59:C4:D2:61:2A:0D:26:2B
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       556A0BD09263AE92171C7A20C642E1931CBC118A
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS53356.roa
Signing time:             Fri 03 May 2024 22:07:38 +0000
ROA not before:           Fri 03 May 2024 22:02:38 +0000
ROA not after:            Fri 02 May 2025 22:07:38 +0000
asID:                     53356
IP address blocks:        23.129.32.0/24 maxlen: 24
                          23.133.64.0/24 maxlen: 24
                          161.129.60.0/24 maxlen: 24
                          167.88.48.0/24 maxlen: 24
                          167.88.50.0/24 maxlen: 24
                          167.88.51.0/24 maxlen: 24
                          206.83.40.0/24 maxlen: 24
                          206.83.41.0/24 maxlen: 24
                          2602:fed2:31::/48 maxlen: 48
                          2602:fed2:3e9::/48 maxlen: 48
                          2602:fed2:3eb::/48 maxlen: 48
                          2602:fed2:3ec::/48 maxlen: 48
                          2602:fed2:3ed::/48 maxlen: 48
                          2602:fed2:3ee::/48 maxlen: 49
                          2602:fed2:fa0::/44 maxlen: 46
                          2602:fed2:fb0::/44 maxlen: 46
                          2602:fed2:fc0::/44 maxlen: 45
                          2602:fed2:fe0::/44 maxlen: 45
                          2602:fed2:ff0::/48 maxlen: 48
                          2602:fed2:ff3::/48 maxlen: 48
                          2602:fed2:ff4::/48 maxlen: 48
                          2602:fed2:7000::/44 maxlen: 48
                          2602:fed2:7060::/44 maxlen: 48
                          2602:fed2:7080::/48 maxlen: 48
                          2602:fed2:7084::/48 maxlen: 48
                          2602:fed2:7088::/48 maxlen: 48
                          2602:fed2:708c::/48 maxlen: 48
                          2602:fed2:708d::/48 maxlen: 48
                          2602:fed2:7102::/48 maxlen: 48
                          2602:fed2:7109::/48 maxlen: 48
                          2602:fed2:710d::/48 maxlen: 48
                          2602:fed2:7113::/48 maxlen: 48
                          2602:fed2:7118::/48 maxlen: 48
                          2602:fed2:711c::/48 maxlen: 48
                          2602:fed2:7123::/48 maxlen: 48
                          2602:fed2:712d::/48 maxlen: 48
                          2602:fed2:712e::/48 maxlen: 48
                          2602:fed2:7181::/48 maxlen: 48
                          2602:fed2:7184::/48 maxlen: 48
                          2602:fed2:7186::/48 maxlen: 48
                          2602:fed2:7187::/48 maxlen: 48
                          2602:fed2:7190::/48 maxlen: 48
                          2602:fed2:7200::/40 maxlen: 40
                          2602:fed2:7301::/48 maxlen: 48
                          2602:fed2:7305::/48 maxlen: 48
                          2602:fed2:7306::/48 maxlen: 48
                          2602:fed2:7308::/48 maxlen: 48
                          2602:fed2:730a::/48 maxlen: 48
                          2602:fed2:730c::/48 maxlen: 48
                          2602:fed2:730f::/48 maxlen: 48
                          2602:fed2:7311::/48 maxlen: 48
                          2602:fed2:7315::/48 maxlen: 48
                          2602:fed2:731a::/48 maxlen: 48
                          2602:fed2:7400::/40 maxlen: 40
                          2602:fed2:7601::/48 maxlen: 48
                          2602:fed2:7900::/40 maxlen: 40
                          2602:fed2:7e84::/48 maxlen: 48
                          2602:fed2:7e90::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 02 Jun 2024 00:30:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:6a:0b:d0:92:63:ae:92:17:1c:7a:20:c6:42:e1:93:1c:bc:11:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: May  3 22:02:38 2024 GMT
            Not After : May  2 22:07:38 2025 GMT
        Subject: CN=7079E0308145930B72E4933F59C4D2612A0D262B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ca:d1:4c:01:32:aa:82:c0:c3:08:58:41:aa:
                    a0:42:67:80:84:99:47:5b:8a:00:4c:a1:88:27:f8:
                    93:07:f3:35:f4:04:b0:4d:60:8e:0b:24:c9:e1:ac:
                    89:a1:62:bf:84:7a:fe:c0:b6:71:0a:ec:3c:57:aa:
                    95:d4:04:89:93:6c:36:0a:6c:88:ca:07:d1:c8:aa:
                    7c:76:f9:5b:da:a1:27:47:a1:1e:7d:ca:39:b4:bc:
                    d6:22:9b:e1:68:b4:6c:44:ec:84:72:39:16:0a:39:
                    94:b1:ee:68:08:62:31:4a:2d:a1:cc:fa:f2:71:b3:
                    32:9a:68:48:52:84:e7:a5:2c:ea:10:01:12:43:a9:
                    5f:0d:f4:53:ed:1a:43:a3:c2:2c:38:16:0c:ac:a1:
                    aa:61:d0:be:00:21:26:25:e0:93:00:c9:f5:00:5d:
                    b3:fd:15:30:16:a5:9f:f9:5b:95:9e:97:d7:af:10:
                    7e:42:b2:5c:05:2c:b2:08:3b:20:3f:cc:2b:16:ad:
                    c1:77:5b:0c:0d:b5:4e:1a:ea:35:aa:4f:26:02:07:
                    75:38:a2:97:71:2e:36:be:61:3b:81:bb:c4:20:7b:
                    fe:5d:13:5f:2f:ec:76:d2:58:d2:4f:90:19:00:55:
                    34:06:12:11:3d:1e:d0:50:0c:6f:27:73:a4:98:23:
                    c0:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:79:E0:30:81:45:93:0B:72:E4:93:3F:59:C4:D2:61:2A:0D:26:2B
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS53356.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.129.32.0/24
                  23.133.64.0/24
                  161.129.60.0/24
                  167.88.48.0/24
                  167.88.50.0/23
                  206.83.40.0/23
                IPv6:
                  2602:fed2:31::/48
                  2602:fed2:3e9::/48
                  2602:fed2:3eb::-2602:fed2:3ee:ffff:ffff:ffff:ffff:ffff
                  2602:fed2:fa0::-2602:fed2:fcf:ffff:ffff:ffff:ffff:ffff
                  2602:fed2:fe0::-2602:fed2:ff0:ffff:ffff:ffff:ffff:ffff
                  2602:fed2:ff3::-2602:fed2:ff4:ffff:ffff:ffff:ffff:ffff
                  2602:fed2:7000::/44
                  2602:fed2:7060::/44
                  2602:fed2:7080::/48
                  2602:fed2:7084::/48
                  2602:fed2:7088::/48
                  2602:fed2:708c::/47
                  2602:fed2:7102::/48
                  2602:fed2:7109::/48
                  2602:fed2:710d::/48
                  2602:fed2:7113::/48
                  2602:fed2:7118::/48
                  2602:fed2:711c::/48
                  2602:fed2:7123::/48
                  2602:fed2:712d::-2602:fed2:712e:ffff:ffff:ffff:ffff:ffff
                  2602:fed2:7181::/48
                  2602:fed2:7184::/48
                  2602:fed2:7186::/47
                  2602:fed2:7190::/48
                  2602:fed2:7200::/40
                  2602:fed2:7301::/48
                  2602:fed2:7305::-2602:fed2:7306:ffff:ffff:ffff:ffff:ffff
                  2602:fed2:7308::/48
                  2602:fed2:730a::/48
                  2602:fed2:730c::/48
                  2602:fed2:730f::/48
                  2602:fed2:7311::/48
                  2602:fed2:7315::/48
                  2602:fed2:731a::/48
                  2602:fed2:7400::/40
                  2602:fed2:7601::/48
                  2602:fed2:7900::/40
                  2602:fed2:7e84::/48
                  2602:fed2:7e90::/44

    Signature Algorithm: sha256WithRSAEncryption
         51:91:3a:1a:f8:ab:68:19:44:70:86:85:bd:76:9e:cd:2f:dc:
         61:f9:49:47:1b:a1:cf:9b:8e:e5:d6:0a:35:30:ab:46:4c:6a:
         04:81:1e:f7:a4:70:8c:06:7c:18:97:b2:88:17:57:72:03:8e:
         09:f1:ff:bd:07:77:2d:d0:65:61:b8:fc:de:3e:7c:ce:2c:83:
         e6:84:20:cf:33:9b:64:da:7a:8f:f2:15:06:25:37:17:ec:91:
         bf:be:86:64:b7:43:e4:60:99:cb:17:e1:7c:a8:de:b3:46:a8:
         8d:ae:84:ca:41:95:bb:6f:67:2f:b1:a8:94:8c:d4:17:7b:bc:
         e5:f0:f0:b6:81:98:51:76:d0:d5:4d:1b:25:e7:50:32:bd:b4:
         1d:4e:b6:db:47:2c:d2:9c:cc:cb:f4:f0:2d:7c:0a:7b:59:28:
         4c:97:f8:54:9b:5d:9c:0e:b9:2f:88:74:bb:7b:6d:e5:e4:2a:
         e0:85:31:fc:28:79:c7:d5:75:4f:7a:ca:1c:4e:21:bc:b3:24:
         b0:de:2b:4b:a4:d9:62:d4:39:60:6d:11:1c:54:89:1f:cd:cf:
         2a:ea:87:e7:9b:ff:71:b3:63:f7:37:53:15:1e:39:4f:43:b6:
         db:e8:0c:38:ca:37:e8:f5:63:4e:95:51:41:30:5e:da:48:5b:
         23:bb:c4:85
-----BEGIN CERTIFICATE-----
MIIHIzCCBgugAwIBAgIUVWoL0JJjrpIXHHogxkLhkxy8EYowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZmQ3N2Y1NWVmZTNhOTNjNTNjYTNkYzhhNmY4Mzc0ZmU3
MGZlYzU1NjdkZDFlOGM4NTUwHhcNMjQwNTAzMjIwMjM4WhcNMjUwNTAyMjIwNzM4
WjAzMTEwLwYDVQQDEyg3MDc5RTAzMDgxNDU5MzBCNzJFNDkzM0Y1OUM0RDI2MTJB
MEQyNjJCMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxcrRTAEyqoLA
wwhYQaqgQmeAhJlHW4oATKGIJ/iTB/M19ASwTWCOCyTJ4ayJoWK/hHr+wLZxCuw8
V6qV1ASJk2w2CmyIygfRyKp8dvlb2qEnR6Eefco5tLzWIpvhaLRsROyEcjkWCjmU
se5oCGIxSi2hzPrycbMymmhIUoTnpSzqEAESQ6lfDfRT7RpDo8IsOBYMrKGqYdC+
ACEmJeCTAMn1AF2z/RUwFqWf+VuVnpfXrxB+QrJcBSyyCDsgP8wrFq3Bd1sMDbVO
Guo1qk8mAgd1OKKXcS42vmE7gbvEIHv+XRNfL+x20ljST5AZAFU0BhIRPR7QUAxv
J3OkmCPACwIDAQABo4IEIzCCBB8wHQYDVR0OBBYEFHB54DCBRZMLcuSTP1nE0mEq
DSYrMB8GA1UdIwQYMBaAFMiTX9ylAoroIJ/sgq2K6M+3xud2MA4GA1UdDwEB/wQE
AwIHgDBxBgNVHR8EajBoMGagZKBihmByc3luYzovL3Jwa2kuYWRtaW4uZnJlZXJh
bmdlY2xvdWQuY29tL3JlcG8vRlJDLUNBLzAvQzg5MzVGRENBNTAyOEFFODIwOUZF
QzgyQUQ4QUU4Q0ZCN0M2RTc3Ni5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYw
YzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzZlNWQ5NjExLWZkMzMt
NDg4Yy05YWVjLWY0ZGYyYTI1MzUxZS9mZDc3ZjU1ZWZlM2E5M2M1M2NhM2RjOGE2
ZjgzNzRmZTcwZmVjNTU2N2RkMWU4Yzg1NS5jZXIwWwYIKwYBBQUHAQsETzBNMEsG
CCsGAQUFBzALhj9yc3luYzovL3Jwa2kuYWRtaW4uZnJlZXJhbmdlY2xvdWQuY29t
L3JlcG8vRlJDLUNBLzAvQVM1MzM1Ni5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjCCAesGCCsGAQUFBwEHAQH/BIIB2jCCAdYwKgQCAAEwJAMEABeBIAMEABeF
QAMEAKGBPAMEAKdYMAMEAadYMgMEAc5TKDCCAaYEAgACMIIBngMHACYC/tIAMQMH
ACYC/tID6TASAwcAJgL+0gPrAwcAJgL+0gPuMBIDBwUmAv7SD6ADBwQmAv7SD8Aw
EgMHBSYC/tIP4AMHACYC/tIP8DASAwcAJgL+0g/zAwcAJgL+0g/0AwcEJgL+0nAA
AwcEJgL+0nBgAwcAJgL+0nCAAwcAJgL+0nCEAwcAJgL+0nCIAwcBJgL+0nCMAwcA
JgL+0nECAwcAJgL+0nEJAwcAJgL+0nENAwcAJgL+0nETAwcAJgL+0nEYAwcAJgL+
0nEcAwcAJgL+0nEjMBIDBwAmAv7ScS0DBwAmAv7ScS4DBwAmAv7ScYEDBwAmAv7S
cYQDBwEmAv7ScYYDBwAmAv7ScZADBgAmAv7ScgMHACYC/tJzATASAwcAJgL+0nMF
AwcAJgL+0nMGAwcAJgL+0nMIAwcAJgL+0nMKAwcAJgL+0nMMAwcAJgL+0nMPAwcA
JgL+0nMRAwcAJgL+0nMVAwcAJgL+0nMaAwYAJgL+0nQDBwAmAv7SdgEDBgAmAv7S
eQMHACYC/tJ+hAMHBCYC/tJ+kDANBgkqhkiG9w0BAQsFAAOCAQEAUZE6GviraBlE
cIaFvXaezS/cYflJRxuhz5uO5dYKNTCrRkxqBIEe96RwjAZ8GJeyiBdXcgOOCfH/
vQd3LdBlYbj83j58ziyD5oQgzzObZNp6j/IVBiU3F+yRv76GZLdD5GCZyxfhfKje
s0aoja6EykGVu29nL7GolIzUF3u85fDwtoGYUXbQ1U0bJedQMr20HU6220cs0pzM
y/TwLXwKe1koTJf4VJtdnA65L4h0u3tt5eQq4IUx/Ch5x9V1T3rKHE4hvLMksN4r
S6TZYtQ5YG0RHFSJH83PKuqH55v/cbNj9zdTFR45T0O22+gMOMo36PVjTpVRQTBe
2khbI7vEhQ==
-----END CERTIFICATE-----
Generated at Fri May 31 23:53:04 2024 by rpki-client on console-fra.rpki-client.org