Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS53356.roa
File:                     AS53356.roa (raw, json)
Hash identifier:          jdkkABoEj3gF3qzFOmnxv3FLuTZovSHwrYL1/wcGOzU=
Subject key identifier:   74:DD:C4:DE:D0:C6:7C:28:DE:07:0A:E5:14:16:9E:38:E6:D0:92:DA
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       29E99645D649D22BEEE53FE67FEA7B0B32C35AC0
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS53356.roa
Signing time:             Sat 27 Apr 2024 19:29:46 +0000
ROA not before:           Sat 27 Apr 2024 19:24:46 +0000
ROA not after:            Sat 26 Apr 2025 19:29:46 +0000
asID:                     53356
IP address blocks:        23.129.32.0/24 maxlen: 24
                          23.133.64.0/24 maxlen: 24
                          161.129.60.0/24 maxlen: 24
                          167.88.48.0/24 maxlen: 24
                          167.88.50.0/24 maxlen: 24
                          167.88.51.0/24 maxlen: 24
                          206.83.40.0/24 maxlen: 24
                          206.83.41.0/24 maxlen: 24
                          2602:fed2:31::/48 maxlen: 48
                          2602:fed2:3e9::/48 maxlen: 48
                          2602:fed2:3eb::/48 maxlen: 48
                          2602:fed2:3ec::/48 maxlen: 48
                          2602:fed2:3ed::/48 maxlen: 48
                          2602:fed2:3ee::/48 maxlen: 49
                          2602:fed2:fa0::/44 maxlen: 46
                          2602:fed2:fb0::/44 maxlen: 46
                          2602:fed2:fc0::/44 maxlen: 45
                          2602:fed2:fe0::/44 maxlen: 45
                          2602:fed2:ff0::/48 maxlen: 48
                          2602:fed2:ff3::/48 maxlen: 48
                          2602:fed2:ff4::/48 maxlen: 48
                          2602:fed2:7000::/48 maxlen: 48
                          2602:fed2:7001::/48 maxlen: 48
                          2602:fed2:7002::/48 maxlen: 48
                          2602:fed2:7060::/44 maxlen: 48
                          2602:fed2:7080::/48 maxlen: 48
                          2602:fed2:7084::/48 maxlen: 48
                          2602:fed2:7088::/48 maxlen: 48
                          2602:fed2:708c::/48 maxlen: 48
                          2602:fed2:708d::/48 maxlen: 48
                          2602:fed2:7102::/48 maxlen: 48
                          2602:fed2:7109::/48 maxlen: 48
                          2602:fed2:710d::/48 maxlen: 48
                          2602:fed2:7113::/48 maxlen: 48
                          2602:fed2:7118::/48 maxlen: 48
                          2602:fed2:711c::/48 maxlen: 48
                          2602:fed2:7123::/48 maxlen: 48
                          2602:fed2:712d::/48 maxlen: 48
                          2602:fed2:712e::/48 maxlen: 48
                          2602:fed2:7181::/48 maxlen: 48
                          2602:fed2:7184::/48 maxlen: 48
                          2602:fed2:7186::/48 maxlen: 48
                          2602:fed2:7187::/48 maxlen: 48
                          2602:fed2:7190::/48 maxlen: 48
                          2602:fed2:7200::/40 maxlen: 40
                          2602:fed2:7301::/48 maxlen: 48
                          2602:fed2:7305::/48 maxlen: 48
                          2602:fed2:7306::/48 maxlen: 48
                          2602:fed2:7308::/48 maxlen: 48
                          2602:fed2:730a::/48 maxlen: 48
                          2602:fed2:730c::/48 maxlen: 48
                          2602:fed2:730f::/48 maxlen: 48
                          2602:fed2:7311::/48 maxlen: 48
                          2602:fed2:7315::/48 maxlen: 48
                          2602:fed2:731a::/48 maxlen: 48
                          2602:fed2:7400::/40 maxlen: 40
                          2602:fed2:7601::/48 maxlen: 48
                          2602:fed2:7900::/40 maxlen: 40
                          2602:fed2:7e84::/48 maxlen: 48
                          2602:fed2:7e90::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 18:22:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:e9:96:45:d6:49:d2:2b:ee:e5:3f:e6:7f:ea:7b:0b:32:c3:5a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Apr 27 19:24:46 2024 GMT
            Not After : Apr 26 19:29:46 2025 GMT
        Subject: CN=74DDC4DED0C67C28DE070AE514169E38E6D092DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:0e:ef:b6:d5:42:20:c8:1b:e8:bd:5c:cb:88:
                    8c:a5:35:0f:88:65:dd:98:c7:49:74:ce:ef:e0:2a:
                    2c:de:7a:62:6e:68:26:18:79:e5:a8:ef:2e:31:e2:
                    3e:cf:a7:76:3c:03:d6:8e:7d:02:53:09:47:94:41:
                    c1:a9:55:32:e1:8d:73:75:53:47:c8:26:16:d5:47:
                    63:5e:fd:0e:f5:d3:d0:d3:97:b6:6d:5a:72:79:57:
                    6e:40:4a:6b:12:6a:a5:03:84:39:01:d4:a8:70:b7:
                    4c:fb:fb:80:34:11:f0:ce:e5:03:45:1e:16:33:37:
                    fe:eb:20:2a:5a:04:33:99:77:88:f1:2b:61:ba:a9:
                    97:d8:e3:80:fa:60:be:60:69:c6:a4:23:8c:91:b6:
                    fc:0d:14:4d:db:91:be:4d:08:a1:62:e0:55:53:e6:
                    1c:43:df:41:e3:3a:9f:0e:b3:71:a5:d0:5c:f3:a8:
                    51:48:ce:96:8e:51:b3:01:f4:10:e8:a5:17:23:4f:
                    78:68:63:45:90:9c:10:98:a6:f6:68:42:12:49:21:
                    d9:6c:6f:22:da:38:ee:63:e0:cf:9b:ea:7b:a2:03:
                    ba:86:80:3b:1c:e8:e4:bd:ae:2b:80:13:f8:86:57:
                    17:4a:11:01:31:b8:c4:9a:e6:b9:f2:a8:77:ea:3e:
                    af:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:DD:C4:DE:D0:C6:7C:28:DE:07:0A:E5:14:16:9E:38:E6:D0:92:DA
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS53356.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.129.32.0/24
                  23.133.64.0/24
                  161.129.60.0/24
                  167.88.48.0/24
                  167.88.50.0/23
                  206.83.40.0/23
                IPv6:
                  2602:fed2:31::/48
                  2602:fed2:3e9::/48
                  2602:fed2:3eb::-2602:fed2:3ee:ffff:ffff:ffff:ffff:ffff
                  2602:fed2:fa0::-2602:fed2:fcf:ffff:ffff:ffff:ffff:ffff
                  2602:fed2:fe0::-2602:fed2:ff0:ffff:ffff:ffff:ffff:ffff
                  2602:fed2:ff3::-2602:fed2:ff4:ffff:ffff:ffff:ffff:ffff
                  2602:fed2:7000::-2602:fed2:7002:ffff:ffff:ffff:ffff:ffff
                  2602:fed2:7060::/44
                  2602:fed2:7080::/48
                  2602:fed2:7084::/48
                  2602:fed2:7088::/48
                  2602:fed2:708c::/47
                  2602:fed2:7102::/48
                  2602:fed2:7109::/48
                  2602:fed2:710d::/48
                  2602:fed2:7113::/48
                  2602:fed2:7118::/48
                  2602:fed2:711c::/48
                  2602:fed2:7123::/48
                  2602:fed2:712d::-2602:fed2:712e:ffff:ffff:ffff:ffff:ffff
                  2602:fed2:7181::/48
                  2602:fed2:7184::/48
                  2602:fed2:7186::/47
                  2602:fed2:7190::/48
                  2602:fed2:7200::/40
                  2602:fed2:7301::/48
                  2602:fed2:7305::-2602:fed2:7306:ffff:ffff:ffff:ffff:ffff
                  2602:fed2:7308::/48
                  2602:fed2:730a::/48
                  2602:fed2:730c::/48
                  2602:fed2:730f::/48
                  2602:fed2:7311::/48
                  2602:fed2:7315::/48
                  2602:fed2:731a::/48
                  2602:fed2:7400::/40
                  2602:fed2:7601::/48
                  2602:fed2:7900::/40
                  2602:fed2:7e84::/48
                  2602:fed2:7e90::/44

    Signature Algorithm: sha256WithRSAEncryption
         09:85:6e:bc:12:20:af:d0:0a:6b:7a:9b:c1:d1:81:1b:be:f0:
         e6:77:ce:be:3b:dd:ef:15:42:da:05:aa:44:de:6b:21:9b:66:
         b2:86:50:62:53:7d:6b:ab:66:cc:c2:c1:a9:15:ba:3d:ac:c3:
         fe:55:27:97:2f:e1:15:98:ae:92:f5:95:5d:b7:a0:18:0b:5a:
         ca:cc:19:86:a8:cf:da:f9:7c:23:1f:bb:66:d2:2f:a1:88:82:
         44:f8:c3:83:96:fa:ad:32:6f:39:b9:1c:8d:a7:c6:01:ae:4c:
         db:39:cf:15:b3:e2:26:44:6f:ad:54:2a:dd:b6:62:6e:5a:ea:
         af:7b:49:92:70:48:46:e8:6b:f2:c5:9c:f1:e9:f5:a1:9d:d1:
         9e:72:79:d7:ef:55:65:4b:2b:02:83:c0:89:35:06:a4:f4:de:
         db:c1:74:3b:e2:a6:2b:3a:30:df:84:d0:01:f2:b7:c6:32:cd:
         36:3a:67:63:2a:2c:6b:31:37:f9:8f:6d:73:77:ce:a7:f8:34:
         fa:76:04:37:fd:00:64:a1:64:22:bc:ae:97:18:f7:39:14:82:
         36:a4:a0:75:8c:07:b6:26:8e:d6:01:16:5c:ad:1e:d3:81:93:
         34:f6:18:b2:d9:30:dc:f1:02:de:2e:50:ea:2b:b5:58:b3:b4:
         5e:45:ff:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 17:42:17 2024 by rpki-client on console-fra.rpki-client.org