Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS53356.roa
File:                     AS53356.roa (raw, json)
Hash identifier:          EpVnOmiq/k0d0QTR548lh50IcANFLT0oDSmj2eJ7zvM=
Subject key identifier:   2B:88:1C:E3:0A:C0:CE:7C:8C:56:29:BD:BF:74:8C:46:C7:C3:62:17
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       20480E58DF7B9F4A6D653FC20C018E71CBF4535F
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS53356.roa
Signing time:             Sun 24 Aug 2025 15:05:02 +0000
ROA not before:           Sun 24 Aug 2025 15:00:02 +0000
ROA not after:            Sun 23 Aug 2026 15:05:02 +0000
asID:                     53356
IP address blocks:        23.129.32.0/24 maxlen: 24
                          23.133.64.0/24 maxlen: 24
                          161.129.60.0/24 maxlen: 24
                          167.88.50.0/24 maxlen: 24
                          206.83.40.0/24 maxlen: 24
                          206.83.41.0/24 maxlen: 24
                          2602:fed2:31::/48 maxlen: 48
                          2602:fed2:3e9::/48 maxlen: 48
                          2602:fed2:3eb::/48 maxlen: 48
                          2602:fed2:3ec::/48 maxlen: 48
                          2602:fed2:3ed::/48 maxlen: 48
                          2602:fed2:3ee::/48 maxlen: 49
                          2602:fed2:fa0::/44 maxlen: 46
                          2602:fed2:fb0::/44 maxlen: 46
                          2602:fed2:fc0::/44 maxlen: 45
                          2602:fed2:fe0::/44 maxlen: 45
                          2602:fed2:ff0::/48 maxlen: 48
                          2602:fed2:ff3::/48 maxlen: 48
                          2602:fed2:ff4::/48 maxlen: 48
                          2602:fed2:7080::/48 maxlen: 48
                          2602:fed2:7088::/48 maxlen: 48
                          2602:fed2:708b::/48 maxlen: 48
                          2602:fed2:708c::/48 maxlen: 48
                          2602:fed2:7102::/48 maxlen: 48
                          2602:fed2:7109::/48 maxlen: 48
                          2602:fed2:710d::/48 maxlen: 48
                          2602:fed2:7113::/48 maxlen: 48
                          2602:fed2:7118::/48 maxlen: 48
                          2602:fed2:712d::/48 maxlen: 48
                          2602:fed2:712e::/48 maxlen: 48
                          2602:fed2:7181::/48 maxlen: 48
                          2602:fed2:7184::/48 maxlen: 48
                          2602:fed2:7187::/48 maxlen: 48
                          2602:fed2:7190::/48 maxlen: 48
                          2602:fed2:7305::/48 maxlen: 48
                          2602:fed2:7306::/48 maxlen: 48
                          2602:fed2:730c::/48 maxlen: 48
                          2602:fed2:730f::/48 maxlen: 48
                          2602:fed2:7311::/48 maxlen: 48
                          2602:fed2:7313::/48 maxlen: 48
                          2602:fed2:7315::/48 maxlen: 48
                          2602:fed2:731a::/48 maxlen: 48
                          2602:fed2:7900::/40 maxlen: 40
                          2602:fed2:7e84::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Sep 2025 11:37:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:48:0e:58:df:7b:9f:4a:6d:65:3f:c2:0c:01:8e:71:cb:f4:53:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Aug 24 15:00:02 2025 GMT
            Not After : Aug 23 15:05:02 2026 GMT
        Subject: CN=2B881CE30AC0CE7C8C5629BDBF748C46C7C36217
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:96:4c:63:3c:06:be:15:db:c9:79:68:34:15:
                    58:0c:b8:95:7c:a4:d1:1d:d2:66:02:de:ac:26:0c:
                    f8:3c:f6:b7:28:70:aa:ba:a9:2b:3f:5e:d2:ae:10:
                    dd:66:ca:7e:3b:1a:0d:57:98:b3:24:77:38:91:c4:
                    91:0a:13:73:4d:7d:8d:b9:08:43:bc:fc:24:6a:d2:
                    05:7f:7b:4f:dd:09:e9:47:eb:87:ff:54:e5:df:b2:
                    c3:fc:78:45:c7:3f:5b:ef:8f:ac:44:5a:97:b8:f1:
                    97:ac:42:4f:39:e6:94:04:15:45:57:3c:20:7f:f8:
                    8f:0c:05:15:3b:2f:a7:0b:51:3f:f5:26:71:f3:dc:
                    f8:1d:36:89:ee:6b:62:49:b9:93:23:c6:0d:29:3a:
                    a5:32:45:e6:0f:4b:b3:95:05:d7:ad:e8:70:de:11:
                    80:08:86:c0:2c:0d:d1:9d:52:ad:97:07:ec:02:37:
                    48:00:7e:e8:16:4b:b9:fd:3e:5b:c2:64:94:b7:00:
                    47:10:ec:63:7e:b2:a5:22:92:a4:bd:a8:6f:08:f4:
                    95:19:0c:93:3b:a5:fe:49:86:08:f2:0d:56:94:9b:
                    44:b2:d5:4b:44:c2:29:46:72:51:f6:b9:7c:6d:43:
                    2d:05:75:cf:61:1e:40:89:80:de:cc:2d:c6:a1:49:
                    f9:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:88:1C:E3:0A:C0:CE:7C:8C:56:29:BD:BF:74:8C:46:C7:C3:62:17
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS53356.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.129.32.0/24
                  23.133.64.0/24
                  161.129.60.0/24
                  167.88.50.0/24
                  206.83.40.0/23
                IPv6:
                  2602:fed2:31::/48
                  2602:fed2:3e9::/48
                  2602:fed2:3eb::-2602:fed2:3ee:ffff:ffff:ffff:ffff:ffff
                  2602:fed2:fa0::-2602:fed2:fcf:ffff:ffff:ffff:ffff:ffff
                  2602:fed2:fe0::-2602:fed2:ff0:ffff:ffff:ffff:ffff:ffff
                  2602:fed2:ff3::-2602:fed2:ff4:ffff:ffff:ffff:ffff:ffff
                  2602:fed2:7080::/48
                  2602:fed2:7088::/48
                  2602:fed2:708b::-2602:fed2:708c:ffff:ffff:ffff:ffff:ffff
                  2602:fed2:7102::/48
                  2602:fed2:7109::/48
                  2602:fed2:710d::/48
                  2602:fed2:7113::/48
                  2602:fed2:7118::/48
                  2602:fed2:712d::-2602:fed2:712e:ffff:ffff:ffff:ffff:ffff
                  2602:fed2:7181::/48
                  2602:fed2:7184::/48
                  2602:fed2:7187::/48
                  2602:fed2:7190::/48
                  2602:fed2:7305::-2602:fed2:7306:ffff:ffff:ffff:ffff:ffff
                  2602:fed2:730c::/48
                  2602:fed2:730f::/48
                  2602:fed2:7311::/48
                  2602:fed2:7313::/48
                  2602:fed2:7315::/48
                  2602:fed2:731a::/48
                  2602:fed2:7900::/40
                  2602:fed2:7e84::/48

    Signature Algorithm: sha256WithRSAEncryption
         bf:00:51:a3:13:f2:d2:4d:f0:d3:f2:f4:b7:57:f7:5b:e2:75:
         ae:3f:a5:57:b4:6f:a0:6b:00:40:66:03:21:bc:e8:fa:ea:33:
         64:7f:31:78:dc:fe:b3:99:44:3c:ad:50:58:bd:f6:8c:25:c5:
         e5:8c:56:ed:d1:33:9e:51:b7:a0:3a:b7:05:3d:63:34:c9:bd:
         27:a5:e1:6f:fc:7c:32:17:1a:01:28:01:e6:36:47:03:95:50:
         64:1f:b8:83:77:84:95:58:fa:32:6c:03:26:ca:f4:2e:85:28:
         72:ed:55:51:72:eb:f7:fa:02:5c:bf:be:15:68:7f:f3:3d:64:
         b9:95:99:66:45:77:8e:aa:a5:94:fe:06:e8:3d:45:db:ea:d7:
         9b:ea:37:51:2d:51:18:b0:82:ff:6a:52:a9:76:58:7b:b5:14:
         59:7a:7f:02:02:98:bf:a4:26:e1:6f:49:13:fd:6f:2c:ee:0f:
         72:e0:2b:95:6e:66:35:df:55:4f:7f:58:70:72:19:f4:59:5d:
         db:df:7e:d1:96:c7:14:c3:d0:b3:2b:f6:4f:78:8e:32:22:4f:
         79:f7:8a:40:8b:e1:e7:83:ea:82:1f:ac:ff:de:1f:46:54:d7:
         72:3c:11:e1:7a:2f:a3:c1:b2:80:1d:56:05:a9:83:5c:9e:25:
         a5:18:43:2e
-----BEGIN CERTIFICATE-----
MIIGxzCCBa+gAwIBAgIUIEgOWN97n0ptZT/CDAGOccv0U18wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZmQ3N2Y1NWVmZTNhOTNjNTNjYTNkYzhhNmY4Mzc0ZmU3
MGZlYzU1NjdkZDFlOGM4NTUwHhcNMjUwODI0MTUwMDAyWhcNMjYwODIzMTUwNTAy
WjAzMTEwLwYDVQQDEygyQjg4MUNFMzBBQzBDRTdDOEM1NjI5QkRCRjc0OEM0NkM3
QzM2MjE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3JZMYzwGvhXb
yXloNBVYDLiVfKTRHdJmAt6sJgz4PPa3KHCquqkrP17SrhDdZsp+OxoNV5izJHc4
kcSRChNzTX2NuQhDvPwkatIFf3tP3QnpR+uH/1Tl37LD/HhFxz9b74+sRFqXuPGX
rEJPOeaUBBVFVzwgf/iPDAUVOy+nC1E/9SZx89z4HTaJ7mtiSbmTI8YNKTqlMkXm
D0uzlQXXrehw3hGACIbALA3RnVKtlwfsAjdIAH7oFku5/T5bwmSUtwBHEOxjfrKl
IpKkvahvCPSVGQyTO6X+SYYI8g1WlJtEstVLRMIpRnJR9rl8bUMtBXXPYR5AiYDe
zC3GoUn52QIDAQABo4IDxzCCA8MwHQYDVR0OBBYEFCuIHOMKwM58jFYpvb90jEbH
w2IXMB8GA1UdIwQYMBaAFMiTX9ylAoroIJ/sgq2K6M+3xud2MA4GA1UdDwEB/wQE
AwIHgDBxBgNVHR8EajBoMGagZKBihmByc3luYzovL3Jwa2kuYWRtaW4uZnJlZXJh
bmdlY2xvdWQuY29tL3JlcG8vRlJDLUNBLzAvQzg5MzVGRENBNTAyOEFFODIwOUZF
QzgyQUQ4QUU4Q0ZCN0M2RTc3Ni5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYw
YzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzZlNWQ5NjExLWZkMzMt
NDg4Yy05YWVjLWY0ZGYyYTI1MzUxZS9mZDc3ZjU1ZWZlM2E5M2M1M2NhM2RjOGE2
ZjgzNzRmZTcwZmVjNTU2N2RkMWU4Yzg1NS5jZXIwWwYIKwYBBQUHAQsETzBNMEsG
CCsGAQUFBzALhj9yc3luYzovL3Jwa2kuYWRtaW4uZnJlZXJhbmdlY2xvdWQuY29t
L3JlcG8vRlJDLUNBLzAvQVM1MzM1Ni5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjCCAY8GCCsGAQUFBwEHAQH/BIIBfjCCAXowJAQCAAEwHgMEABeBIAMEABeF
QAMEAKGBPAMEAKdYMgMEAc5TKDCCAVAEAgACMIIBSAMHACYC/tIAMQMHACYC/tID
6TASAwcAJgL+0gPrAwcAJgL+0gPuMBIDBwUmAv7SD6ADBwQmAv7SD8AwEgMHBSYC
/tIP4AMHACYC/tIP8DASAwcAJgL+0g/zAwcAJgL+0g/0AwcAJgL+0nCAAwcAJgL+
0nCIMBIDBwAmAv7ScIsDBwAmAv7ScIwDBwAmAv7ScQIDBwAmAv7ScQkDBwAmAv7S
cQ0DBwAmAv7ScRMDBwAmAv7ScRgwEgMHACYC/tJxLQMHACYC/tJxLgMHACYC/tJx
gQMHACYC/tJxhAMHACYC/tJxhwMHACYC/tJxkDASAwcAJgL+0nMFAwcAJgL+0nMG
AwcAJgL+0nMMAwcAJgL+0nMPAwcAJgL+0nMRAwcAJgL+0nMTAwcAJgL+0nMVAwcA
JgL+0nMaAwYAJgL+0nkDBwAmAv7SfoQwDQYJKoZIhvcNAQELBQADggEBAL8AUaMT
8tJN8NPy9LdX91vida4/pVe0b6BrAEBmAyG86PrqM2R/MXjc/rOZRDytUFi99owl
xeWMVu3RM55Rt6A6twU9YzTJvSel4W/8fDIXGgEoAeY2RwOVUGQfuIN3hJVY+jJs
AybK9C6FKHLtVVFy6/f6Aly/vhVof/M9ZLmVmWZFd46qpZT+Bug9Rdvq15vqN1Et
URiwgv9qUql2WHu1FFl6fwICmL+kJuFvSRP9byzuD3LgK5VuZjXfVU9/WHByGfRZ
XdvfftGWxxTD0LMr9k94jjIiT3n3ikCL4eeD6oIfrP/eH0ZU13I8EeF6L6PBsoAd
VgWpg1yeJaUYQy4=
-----END CERTIFICATE-----
Generated at Sat Sep 6 15:26:14 2025 by rpki-client