Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS53356.roa
File:                     AS53356.roa (raw, json)
Hash identifier:          MEmOe28h2Kkg9iw6WbvrxXoplpFtpQdNR5rqtTBKjkU=
Subject key identifier:   B2:43:32:63:BF:9A:C5:0A:7F:8F:C5:2A:FD:AA:56:99:CE:7E:99:DC
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       466E568BB4B0641BDA08B399DE763C002E81C20D
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS53356.roa
Signing time:             Tue 22 Jul 2025 09:26:15 +0000
ROA not before:           Tue 22 Jul 2025 09:21:15 +0000
ROA not after:            Tue 21 Jul 2026 09:26:15 +0000
asID:                     53356
IP address blocks:        23.129.32.0/24 maxlen: 24
                          23.133.64.0/24 maxlen: 24
                          161.129.60.0/24 maxlen: 24
                          167.88.50.0/24 maxlen: 24
                          206.83.40.0/24 maxlen: 24
                          206.83.41.0/24 maxlen: 24
                          2602:fed2:31::/48 maxlen: 48
                          2602:fed2:3e9::/48 maxlen: 48
                          2602:fed2:3eb::/48 maxlen: 48
                          2602:fed2:3ec::/48 maxlen: 48
                          2602:fed2:3ed::/48 maxlen: 48
                          2602:fed2:3ee::/48 maxlen: 49
                          2602:fed2:fa0::/44 maxlen: 46
                          2602:fed2:fb0::/44 maxlen: 46
                          2602:fed2:fc0::/44 maxlen: 45
                          2602:fed2:fe0::/44 maxlen: 45
                          2602:fed2:ff0::/48 maxlen: 48
                          2602:fed2:ff3::/48 maxlen: 48
                          2602:fed2:ff4::/48 maxlen: 48
                          2602:fed2:7000::/44 maxlen: 48
                          2602:fed2:7080::/48 maxlen: 48
                          2602:fed2:7088::/48 maxlen: 48
                          2602:fed2:708b::/48 maxlen: 48
                          2602:fed2:708c::/48 maxlen: 48
                          2602:fed2:7102::/48 maxlen: 48
                          2602:fed2:7109::/48 maxlen: 48
                          2602:fed2:710d::/48 maxlen: 48
                          2602:fed2:7113::/48 maxlen: 48
                          2602:fed2:7118::/48 maxlen: 48
                          2602:fed2:712d::/48 maxlen: 48
                          2602:fed2:712e::/48 maxlen: 48
                          2602:fed2:7181::/48 maxlen: 48
                          2602:fed2:7184::/48 maxlen: 48
                          2602:fed2:7187::/48 maxlen: 48
                          2602:fed2:7190::/48 maxlen: 48
                          2602:fed2:7305::/48 maxlen: 48
                          2602:fed2:7306::/48 maxlen: 48
                          2602:fed2:730c::/48 maxlen: 48
                          2602:fed2:730f::/48 maxlen: 48
                          2602:fed2:7311::/48 maxlen: 48
                          2602:fed2:7313::/48 maxlen: 48
                          2602:fed2:7315::/48 maxlen: 48
                          2602:fed2:731a::/48 maxlen: 48
                          2602:fed2:7900::/40 maxlen: 40
                          2602:fed2:7e84::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 02:44:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:6e:56:8b:b4:b0:64:1b:da:08:b3:99:de:76:3c:00:2e:81:c2:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Jul 22 09:21:15 2025 GMT
            Not After : Jul 21 09:26:15 2026 GMT
        Subject: CN=B2433263BF9AC50A7F8FC52AFDAA5699CE7E99DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:2e:fa:51:be:f1:e9:05:b8:2c:37:43:7a:f0:
                    fa:48:e0:6b:e0:83:d5:57:62:5e:07:d5:52:31:71:
                    61:19:e3:4c:7c:af:7d:8c:a2:bc:08:02:e8:b4:c2:
                    42:e1:56:d1:06:27:04:70:0b:a0:1d:b1:70:9f:dc:
                    ba:68:b3:8d:af:cd:94:a4:4f:cf:ba:63:05:a3:98:
                    d2:a4:a2:a3:98:ca:d2:74:88:c5:8f:11:c3:cb:49:
                    88:b8:09:94:4c:ad:41:1d:76:7e:0b:91:d8:02:7c:
                    66:85:f1:13:8b:18:68:ef:2e:58:e6:2b:89:fd:70:
                    10:74:d1:1c:63:a1:12:a0:09:8e:f7:a2:06:b1:9f:
                    40:1d:b0:2d:83:b6:bd:22:77:22:42:bc:c1:7e:bb:
                    85:60:55:bf:ca:c8:e6:13:fb:5f:22:21:e9:37:1f:
                    1b:f9:e6:7e:4a:cf:74:11:3f:d6:f9:a2:b0:0d:cf:
                    ac:19:ea:18:5c:6f:f2:2d:17:17:b0:2d:de:96:16:
                    2b:60:0f:74:e7:31:e2:a2:7e:6a:46:e6:d8:f5:47:
                    12:a7:d3:7c:68:73:7e:6f:e4:0d:cd:ce:3a:76:51:
                    24:b6:b4:29:21:ad:21:a0:a2:c2:8c:31:64:ce:45:
                    54:99:cb:fc:65:1c:73:9c:67:2e:27:6d:6e:a4:84:
                    be:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:43:32:63:BF:9A:C5:0A:7F:8F:C5:2A:FD:AA:56:99:CE:7E:99:DC
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS53356.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.129.32.0/24
                  23.133.64.0/24
                  161.129.60.0/24
                  167.88.50.0/24
                  206.83.40.0/23
                IPv6:
                  2602:fed2:31::/48
                  2602:fed2:3e9::/48
                  2602:fed2:3eb::-2602:fed2:3ee:ffff:ffff:ffff:ffff:ffff
                  2602:fed2:fa0::-2602:fed2:fcf:ffff:ffff:ffff:ffff:ffff
                  2602:fed2:fe0::-2602:fed2:ff0:ffff:ffff:ffff:ffff:ffff
                  2602:fed2:ff3::-2602:fed2:ff4:ffff:ffff:ffff:ffff:ffff
                  2602:fed2:7000::/44
                  2602:fed2:7080::/48
                  2602:fed2:7088::/48
                  2602:fed2:708b::-2602:fed2:708c:ffff:ffff:ffff:ffff:ffff
                  2602:fed2:7102::/48
                  2602:fed2:7109::/48
                  2602:fed2:710d::/48
                  2602:fed2:7113::/48
                  2602:fed2:7118::/48
                  2602:fed2:712d::-2602:fed2:712e:ffff:ffff:ffff:ffff:ffff
                  2602:fed2:7181::/48
                  2602:fed2:7184::/48
                  2602:fed2:7187::/48
                  2602:fed2:7190::/48
                  2602:fed2:7305::-2602:fed2:7306:ffff:ffff:ffff:ffff:ffff
                  2602:fed2:730c::/48
                  2602:fed2:730f::/48
                  2602:fed2:7311::/48
                  2602:fed2:7313::/48
                  2602:fed2:7315::/48
                  2602:fed2:731a::/48
                  2602:fed2:7900::/40
                  2602:fed2:7e84::/48

    Signature Algorithm: sha256WithRSAEncryption
         76:fe:f2:e3:3e:41:fc:d5:27:d4:98:06:05:f5:5f:61:85:00:
         77:61:ee:5a:42:55:80:b2:4a:30:65:82:8b:fa:de:b4:b0:1a:
         69:f2:24:d8:bc:86:54:22:3e:14:85:b6:7a:8e:e4:d3:69:54:
         37:0f:8c:ae:ba:17:e3:5b:96:db:32:67:48:18:fb:e8:e4:38:
         1b:d8:8c:2f:f1:0d:cc:95:d4:fa:b5:0b:24:7f:27:4e:61:5f:
         af:a6:f3:f9:39:b0:4a:51:c5:e1:8e:99:28:8e:14:89:63:c6:
         70:68:b5:dd:0c:bc:f5:c6:96:c8:82:ac:63:6e:a8:bb:4b:f0:
         21:14:fc:18:8e:bc:86:6f:2c:18:01:33:55:44:de:97:15:27:
         34:88:f3:05:d6:14:d3:9b:db:57:e9:62:34:1c:d8:be:f7:0c:
         77:cb:0e:d6:df:bb:72:f9:02:79:5e:f3:18:a5:bc:ed:f6:19:
         ae:96:d7:cb:85:f2:e9:87:99:05:37:a2:6f:13:98:23:79:9f:
         0b:50:e8:94:15:9f:8f:d6:c7:69:cd:be:45:d8:14:60:c7:93:
         4d:00:5a:ed:b4:e7:16:1c:cc:95:08:e8:51:b3:51:f6:1c:12:
         88:e0:52:48:f0:36:f0:0f:3e:13:6c:e3:c4:6a:e4:3a:c5:b7:
         29:1e:17:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:08:37 2025 by rpki-client