Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS53356.roa
File:                     AS53356.roa (raw, json)
Hash identifier:          6+Qt0qx0FeCPo/3ePAZJtu6LWs1ySnLSr49rGFnAUDk=
Subject key identifier:   20:D8:B9:87:BD:89:B1:DF:A7:C0:45:4B:29:2A:55:1A:05:BA:EC:EF
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       120F84E95E5582C66CA3F4960403BF3ED0BB9ED1
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS53356.roa
Signing time:             Tue 22 Oct 2024 01:35:32 +0000
ROA not before:           Tue 22 Oct 2024 01:30:32 +0000
ROA not after:            Tue 21 Oct 2025 01:35:32 +0000
asID:                     53356
IP address blocks:        23.129.32.0/24 maxlen: 24
                          23.133.64.0/24 maxlen: 24
                          161.129.60.0/24 maxlen: 24
                          167.88.50.0/24 maxlen: 24
                          206.83.40.0/24 maxlen: 24
                          206.83.41.0/24 maxlen: 24
                          2602:fed2:31::/48 maxlen: 48
                          2602:fed2:3e9::/48 maxlen: 48
                          2602:fed2:3eb::/48 maxlen: 48
                          2602:fed2:3ec::/48 maxlen: 48
                          2602:fed2:3ed::/48 maxlen: 48
                          2602:fed2:3ee::/48 maxlen: 49
                          2602:fed2:fa0::/44 maxlen: 46
                          2602:fed2:fb0::/44 maxlen: 46
                          2602:fed2:fc0::/44 maxlen: 45
                          2602:fed2:fe0::/44 maxlen: 45
                          2602:fed2:ff0::/48 maxlen: 48
                          2602:fed2:ff3::/48 maxlen: 48
                          2602:fed2:ff4::/48 maxlen: 48
                          2602:fed2:7000::/44 maxlen: 48
                          2602:fed2:7080::/48 maxlen: 48
                          2602:fed2:7084::/48 maxlen: 48
                          2602:fed2:7088::/48 maxlen: 48
                          2602:fed2:708b::/48 maxlen: 48
                          2602:fed2:708c::/48 maxlen: 48
                          2602:fed2:7102::/48 maxlen: 48
                          2602:fed2:7109::/48 maxlen: 48
                          2602:fed2:710d::/48 maxlen: 48
                          2602:fed2:7113::/48 maxlen: 48
                          2602:fed2:7118::/48 maxlen: 48
                          2602:fed2:711c::/48 maxlen: 48
                          2602:fed2:7123::/48 maxlen: 48
                          2602:fed2:712d::/48 maxlen: 48
                          2602:fed2:712e::/48 maxlen: 48
                          2602:fed2:7181::/48 maxlen: 48
                          2602:fed2:7184::/48 maxlen: 48
                          2602:fed2:7186::/48 maxlen: 48
                          2602:fed2:7187::/48 maxlen: 48
                          2602:fed2:7190::/48 maxlen: 48
                          2602:fed2:7301::/48 maxlen: 48
                          2602:fed2:7305::/48 maxlen: 48
                          2602:fed2:7306::/48 maxlen: 48
                          2602:fed2:730a::/48 maxlen: 48
                          2602:fed2:730c::/48 maxlen: 48
                          2602:fed2:730f::/48 maxlen: 48
                          2602:fed2:7311::/48 maxlen: 48
                          2602:fed2:7313::/48 maxlen: 48
                          2602:fed2:7315::/48 maxlen: 48
                          2602:fed2:731a::/48 maxlen: 48
                          2602:fed2:731b::/48 maxlen: 48
                          2602:fed2:7400::/40 maxlen: 40
                          2602:fed2:7900::/40 maxlen: 40
                          2602:fed2:7e84::/48 maxlen: 48
                          2602:fed2:7e90::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 22:07:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:0f:84:e9:5e:55:82:c6:6c:a3:f4:96:04:03:bf:3e:d0:bb:9e:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Oct 22 01:30:32 2024 GMT
            Not After : Oct 21 01:35:32 2025 GMT
        Subject: CN=20D8B987BD89B1DFA7C0454B292A551A05BAECEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:52:65:f1:f4:8a:90:61:ce:1e:9a:b6:56:7d:
                    8a:ab:29:1d:41:52:b0:6e:77:50:d5:3e:69:2f:b2:
                    ac:58:28:7c:11:7c:57:34:c7:e8:7f:b1:74:a4:04:
                    77:6d:57:1d:50:97:40:c2:b3:fa:ba:6f:1c:0d:34:
                    0c:f3:f1:76:1d:f1:c5:fd:d9:ec:4f:12:e9:8a:e4:
                    f4:c3:f7:f3:dc:3c:75:be:92:af:c2:81:85:03:87:
                    1b:be:51:7f:cd:04:a6:77:26:11:ea:a3:6b:f6:dd:
                    c8:f4:86:13:92:3f:87:81:8b:27:89:9a:a3:f3:25:
                    63:b1:ec:47:0a:b0:58:5e:05:3b:61:40:9e:65:7f:
                    23:a6:c9:00:ab:fc:40:23:99:ac:96:39:0f:f3:b0:
                    40:3c:b6:60:3a:b4:e1:3a:01:78:35:6c:f2:d4:a7:
                    b3:4a:a2:e2:bb:48:40:77:60:15:3d:e0:86:0a:b4:
                    f0:e2:6c:ec:f2:35:2e:23:ec:78:71:8f:dc:06:6d:
                    b1:20:f1:17:ef:9e:f6:e6:33:0e:e7:89:c2:c3:e7:
                    2a:db:e9:da:74:5f:c6:df:de:7e:f4:1d:3f:ef:e1:
                    93:8a:e1:bf:87:b4:31:d0:4b:79:9d:70:3c:9b:81:
                    12:ba:bb:0a:ba:76:fe:22:e4:fb:7b:af:e9:4d:48:
                    c6:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:D8:B9:87:BD:89:B1:DF:A7:C0:45:4B:29:2A:55:1A:05:BA:EC:EF
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS53356.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.129.32.0/24
                  23.133.64.0/24
                  161.129.60.0/24
                  167.88.50.0/24
                  206.83.40.0/23
                IPv6:
                  2602:fed2:31::/48
                  2602:fed2:3e9::/48
                  2602:fed2:3eb::-2602:fed2:3ee:ffff:ffff:ffff:ffff:ffff
                  2602:fed2:fa0::-2602:fed2:fcf:ffff:ffff:ffff:ffff:ffff
                  2602:fed2:fe0::-2602:fed2:ff0:ffff:ffff:ffff:ffff:ffff
                  2602:fed2:ff3::-2602:fed2:ff4:ffff:ffff:ffff:ffff:ffff
                  2602:fed2:7000::/44
                  2602:fed2:7080::/48
                  2602:fed2:7084::/48
                  2602:fed2:7088::/48
                  2602:fed2:708b::-2602:fed2:708c:ffff:ffff:ffff:ffff:ffff
                  2602:fed2:7102::/48
                  2602:fed2:7109::/48
                  2602:fed2:710d::/48
                  2602:fed2:7113::/48
                  2602:fed2:7118::/48
                  2602:fed2:711c::/48
                  2602:fed2:7123::/48
                  2602:fed2:712d::-2602:fed2:712e:ffff:ffff:ffff:ffff:ffff
                  2602:fed2:7181::/48
                  2602:fed2:7184::/48
                  2602:fed2:7186::/47
                  2602:fed2:7190::/48
                  2602:fed2:7301::/48
                  2602:fed2:7305::-2602:fed2:7306:ffff:ffff:ffff:ffff:ffff
                  2602:fed2:730a::/48
                  2602:fed2:730c::/48
                  2602:fed2:730f::/48
                  2602:fed2:7311::/48
                  2602:fed2:7313::/48
                  2602:fed2:7315::/48
                  2602:fed2:731a::/47
                  2602:fed2:7400::/40
                  2602:fed2:7900::/40
                  2602:fed2:7e84::/48
                  2602:fed2:7e90::/44

    Signature Algorithm: sha256WithRSAEncryption
         4a:9c:b3:00:14:9a:df:19:72:fa:5c:1e:59:bc:5e:c9:aa:27:
         13:e3:a5:0b:a0:48:e6:13:e3:79:99:97:9f:f6:31:42:03:cd:
         79:0a:35:be:60:09:d8:5a:cb:03:8c:c6:8e:f3:c8:3a:6d:03:
         13:f0:71:e4:c3:14:02:5b:1a:f2:dd:12:3b:18:32:1c:b7:9e:
         de:89:9f:7b:2a:47:eb:65:40:9a:90:7e:f2:de:e1:fb:04:1b:
         98:9c:96:4b:ce:44:ee:4b:b1:6b:b4:85:17:84:db:34:c7:4a:
         7b:38:4a:9b:b4:ef:6a:4c:b9:ef:0d:f7:3b:7b:c0:1a:77:26:
         db:81:18:26:2a:03:54:b5:20:36:14:9c:0c:dc:10:4d:15:37:
         09:f0:7d:0d:55:6a:34:60:a4:eb:e5:60:db:76:8d:ed:90:5b:
         1d:6f:08:15:50:5c:4a:54:fd:a7:f2:67:1d:67:ea:ea:b3:12:
         d9:fb:10:7b:56:7a:00:73:bd:9b:0d:47:24:ee:1b:90:f3:93:
         e7:33:3c:a6:74:7d:05:19:03:c1:9e:39:6e:cb:c8:ca:fc:47:
         43:b3:24:6f:f3:54:04:8a:56:17:f1:c6:f5:c2:a4:45:35:91:
         34:22:2f:26:ac:ce:8b:30:87:33:84:2a:24:7c:8d:8e:c3:89:
         6c:ff:6d:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:34:43 2024 by rpki-client on console-fra.rpki-client.org