Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS53356.roa
File:                     AS53356.roa (raw, json)
Hash identifier:          XMLxKzc1Yo2J93NqnWChbevC3jXaQ7dW0rgJPNzmQo4=
Subject key identifier:   F0:FA:05:22:E4:F7:90:65:EA:43:5E:C3:BF:E3:E3:52:B1:B4:05:74
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       6A0914E55413AF7C603FAAEF7138EAA90F9FE42C
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS53356.roa
Signing time:             Wed 22 Jul 2026 02:27:59 +0000
ROA not before:           Wed 22 Jul 2026 02:22:59 +0000
ROA not after:            Wed 21 Jul 2027 02:27:59 +0000
asID:                     53356
IP address blocks:        23.129.32.0/24 maxlen: 24
                          23.133.64.0/24 maxlen: 24
                          167.88.50.0/24 maxlen: 24
                          206.83.40.0/24 maxlen: 24
                          206.83.41.0/24 maxlen: 24
                          2602:fed2:31::/48 maxlen: 48
                          2602:fed2:3e9::/48 maxlen: 48
                          2602:fed2:3eb::/48 maxlen: 48
                          2602:fed2:3ec::/48 maxlen: 48
                          2602:fed2:3ed::/48 maxlen: 48
                          2602:fed2:3ee::/48 maxlen: 49
                          2602:fed2:f80::/44 maxlen: 44
                          2602:fed2:fa0::/44 maxlen: 46
                          2602:fed2:fb0::/44 maxlen: 46
                          2602:fed2:fc0::/44 maxlen: 45
                          2602:fed2:fe0::/44 maxlen: 45
                          2602:fed2:ff0::/48 maxlen: 48
                          2602:fed2:ff3::/48 maxlen: 48
                          2602:fed2:ff4::/48 maxlen: 48
                          2602:fed2:7087::/48 maxlen: 48
                          2602:fed2:7088::/48 maxlen: 48
                          2602:fed2:7102::/48 maxlen: 48
                          2602:fed2:7109::/48 maxlen: 48
                          2602:fed2:710d::/48 maxlen: 48
                          2602:fed2:7113::/48 maxlen: 48
                          2602:fed2:7118::/48 maxlen: 48
                          2602:fed2:711d::/48 maxlen: 48
                          2602:fed2:7120::/48 maxlen: 48
                          2602:fed2:7129::/48 maxlen: 48
                          2602:fed2:712d::/48 maxlen: 48
                          2602:fed2:712e::/48 maxlen: 48
                          2602:fed2:7181::/48 maxlen: 48
                          2602:fed2:7187::/48 maxlen: 48
                          2602:fed2:7190::/48 maxlen: 48
                          2602:fed2:7305::/48 maxlen: 48
                          2602:fed2:7306::/48 maxlen: 48
                          2602:fed2:730c::/48 maxlen: 48
                          2602:fed2:730f::/48 maxlen: 48
                          2602:fed2:7311::/48 maxlen: 48
                          2602:fed2:7313::/48 maxlen: 48
                          2602:fed2:7315::/48 maxlen: 48
                          2602:fed2:7316::/48 maxlen: 48
                          2602:fed2:7500::/40 maxlen: 40
                          2602:fed2:770c::/48 maxlen: 48
                          2602:fed2:770f::/48 maxlen: 48
                          2602:fed2:7800::/40 maxlen: 40
                          2602:fed2:7900::/40 maxlen: 40
                          2602:fed2:7e08::/48 maxlen: 48
                          2602:fed2:7e09::/48 maxlen: 48
                          2602:fed2:7e84::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:09:14:e5:54:13:af:7c:60:3f:aa:ef:71:38:ea:a9:0f:9f:e4:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Jul 22 02:22:59 2026 GMT
            Not After : Jul 21 02:27:59 2027 GMT
        Subject: CN=F0FA0522E4F79065EA435EC3BFE3E352B1B40574
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:6e:12:23:0a:7b:5c:8b:c5:f1:a0:12:09:ff:
                    7d:90:60:e8:c1:04:d8:3a:86:d1:d6:80:43:70:c8:
                    7d:45:a9:a6:21:f3:22:a5:e7:0f:80:38:fd:58:ef:
                    1e:52:1b:0a:13:84:e8:90:2e:a7:4d:73:d0:a4:7d:
                    9d:e4:48:ef:36:32:93:d4:11:80:9b:ea:e9:a9:0b:
                    82:f8:3b:4d:0e:60:66:a9:c5:c7:30:eb:75:3d:d4:
                    46:76:08:b8:92:8b:d4:40:a3:e5:ce:06:00:8f:0d:
                    6b:1f:c6:4c:88:ec:22:ff:1b:57:7d:14:95:75:d9:
                    f6:e6:7e:c0:e1:8c:f7:15:db:b0:20:cd:0f:11:dc:
                    2c:6a:93:f7:68:e8:cb:53:df:77:12:d5:25:f7:8a:
                    09:0b:fe:e5:79:e4:29:fe:a0:84:f7:0c:c0:b0:a3:
                    ab:84:73:e9:ce:8d:65:00:d7:26:01:84:e6:10:ec:
                    9c:49:3a:14:ff:88:82:91:35:ae:8d:62:fa:a8:18:
                    c5:4a:cb:d7:7c:f5:c2:ff:84:8e:02:38:83:8a:3d:
                    40:9c:b6:c1:a9:5a:5f:9e:93:03:d5:b9:df:73:37:
                    4a:7b:1b:be:b5:10:fc:c1:4b:2f:79:4a:02:d1:70:
                    ff:97:dc:f9:fa:ce:5c:4e:d0:f3:52:91:ae:09:51:
                    29:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:FA:05:22:E4:F7:90:65:EA:43:5E:C3:BF:E3:E3:52:B1:B4:05:74
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS53356.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.129.32.0/24
                  23.133.64.0/24
                  167.88.50.0/24
                  206.83.40.0/23
                IPv6:
                  2602:fed2:31::/48
                  2602:fed2:3e9::/48
                  2602:fed2:3eb::-2602:fed2:3ee:ffff:ffff:ffff:ffff:ffff
                  2602:fed2:f80::/44
                  2602:fed2:fa0::-2602:fed2:fcf:ffff:ffff:ffff:ffff:ffff
                  2602:fed2:fe0::-2602:fed2:ff0:ffff:ffff:ffff:ffff:ffff
                  2602:fed2:ff3::-2602:fed2:ff4:ffff:ffff:ffff:ffff:ffff
                  2602:fed2:7087::-2602:fed2:7088:ffff:ffff:ffff:ffff:ffff
                  2602:fed2:7102::/48
                  2602:fed2:7109::/48
                  2602:fed2:710d::/48
                  2602:fed2:7113::/48
                  2602:fed2:7118::/48
                  2602:fed2:711d::/48
                  2602:fed2:7120::/48
                  2602:fed2:7129::/48
                  2602:fed2:712d::-2602:fed2:712e:ffff:ffff:ffff:ffff:ffff
                  2602:fed2:7181::/48
                  2602:fed2:7187::/48
                  2602:fed2:7190::/48
                  2602:fed2:7305::-2602:fed2:7306:ffff:ffff:ffff:ffff:ffff
                  2602:fed2:730c::/48
                  2602:fed2:730f::/48
                  2602:fed2:7311::/48
                  2602:fed2:7313::/48
                  2602:fed2:7315::-2602:fed2:7316:ffff:ffff:ffff:ffff:ffff
                  2602:fed2:7500::/40
                  2602:fed2:770c::/48
                  2602:fed2:770f::/48
                  2602:fed2:7800::/39
                  2602:fed2:7e08::/47
                  2602:fed2:7e84::/48

    Signature Algorithm: sha256WithRSAEncryption
         4b:64:2b:ab:99:05:99:c8:66:32:2d:8b:6e:f8:58:39:f8:d1:
         73:72:81:79:5b:7d:aa:1c:44:f6:76:fb:f3:7c:3b:92:a9:b9:
         a0:e3:ff:92:a6:29:61:ec:66:b2:00:d9:4e:be:79:b2:73:95:
         a2:0e:2f:75:e4:36:28:d5:af:8c:66:51:ee:16:bc:71:b4:ba:
         da:08:34:20:bb:70:6d:c4:77:71:80:5a:d3:ad:8d:04:96:7e:
         d9:21:2e:dd:02:3c:32:eb:09:e3:51:a0:86:27:30:6b:be:c7:
         93:6b:01:db:4d:55:c4:d6:c8:3f:5e:01:16:c6:ee:c8:ec:c2:
         90:47:f2:b5:4c:82:db:75:df:f6:ab:87:fc:71:61:bc:b1:da:
         45:f9:3b:92:40:81:ab:c1:f6:8c:51:64:fa:65:04:4c:7f:78:
         de:08:b1:c8:ea:64:7a:5e:6c:5b:82:c2:6c:e1:ba:b8:26:4b:
         f2:b4:6c:45:f8:30:bf:63:99:a3:9b:b8:29:be:64:a6:13:ce:
         70:48:bd:c7:78:bd:cf:00:ee:72:82:60:1f:c5:c2:09:ae:05:
         41:97:b7:70:06:bd:cb:db:52:a9:fa:01:7a:d9:49:08:02:e7:
         e1:d2:55:52:87:36:4b:aa:d5:2a:00:e1:76:f1:2a:de:55:5f:
         62:d5:e9:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:04:43 2026 by rpki-client