Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a313331313a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a313331313a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          ruoxltnQ5a0jnfJx1JQm7XuZfRFbrW4Dc5s9hEYiBEI=
Subject key identifier:   D9:E1:AD:F9:69:B2:7C:B6:FE:70:D1:85:01:AB:6C:8F:03:7C:60:F8
Certificate issuer:       /CN=0AAD221E4070989D4939FACA0F0981AB26E93895
Certificate serial:       611E1FE8E3CF41221BF8B09053452836C05B34D5
Authority key identifier: 0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a313331313a3a2f34382d313238203d3e203532303235.roa
Signing time:             Wed 01 Jan 2025 07:57:14 +0000
ROA not before:           Wed 01 Jan 2025 07:52:14 +0000
ROA not after:            Wed 31 Dec 2025 07:57:14 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:1311::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Feb 2025 20:07:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:1e:1f:e8:e3:cf:41:22:1b:f8:b0:90:53:45:28:36:c0:5b:34:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AAD221E4070989D4939FACA0F0981AB26E93895
        Validity
            Not Before: Jan  1 07:52:14 2025 GMT
            Not After : Dec 31 07:57:14 2025 GMT
        Subject: CN=D9E1ADF969B27CB6FE70D18501AB6C8F037C60F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:bd:3c:74:70:fe:6f:00:fc:07:5e:84:8f:0e:
                    a1:99:26:22:24:a7:a6:36:e3:6b:db:2e:73:27:c3:
                    e7:fd:21:96:12:b1:e5:a6:85:77:21:1e:1d:62:36:
                    e0:08:42:ac:b0:18:a1:37:ac:f2:6f:3e:d0:4a:79:
                    c7:4e:b7:a9:62:56:32:25:db:62:b6:18:00:61:d4:
                    bf:76:1b:e4:1b:65:51:08:db:d9:09:54:c7:91:41:
                    08:cc:bf:1d:cf:f7:49:0f:df:77:bb:1b:b1:24:d7:
                    fa:95:4b:e8:30:5c:04:e7:44:97:f7:e2:77:7c:12:
                    b8:b5:ca:52:6a:75:70:4d:05:c4:c5:8f:d2:95:a1:
                    e7:69:a0:c7:d6:15:50:a6:77:78:8e:7b:d7:7e:07:
                    c0:81:60:b7:9c:a3:43:06:5f:ce:af:36:ef:6e:3d:
                    e7:bf:31:27:1d:c5:0a:b3:00:23:37:fb:a4:f6:5f:
                    6c:3a:62:f5:b1:19:49:b8:f5:d8:fa:94:fc:ff:3a:
                    12:7b:0c:75:16:b4:eb:02:88:c0:da:0a:5e:b4:80:
                    95:c5:da:aa:d5:aa:29:57:c6:5f:a7:4c:fa:e7:1e:
                    89:bb:a2:fb:00:71:2f:d6:7d:62:36:45:ed:b1:37:
                    94:ea:f9:7d:37:12:70:fc:26:04:3d:cc:3a:f0:c6:
                    f9:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:E1:AD:F9:69:B2:7C:B6:FE:70:D1:85:01:AB:6C:8F:03:7C:60:F8
            X509v3 Authority Key Identifier:
                keyid:0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a313331313a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:1311::/48

    Signature Algorithm: sha256WithRSAEncryption
         1e:73:00:f1:2f:1f:07:ef:a2:29:cd:41:1e:8d:f7:cc:89:ae:
         61:5a:3c:99:9b:4e:5a:f7:93:6e:84:f8:77:66:61:23:d3:a2:
         a4:9a:ed:68:8e:28:79:f5:fb:4f:c6:82:ed:f3:62:25:d3:84:
         9d:28:c7:f9:4f:3e:c7:7b:f1:23:6a:48:61:5e:73:af:73:b5:
         c3:34:04:4b:44:83:f5:d2:53:af:ab:6c:94:89:6a:84:5b:6d:
         85:3c:21:d1:07:c8:6d:e0:11:d7:e3:c5:f5:d1:e4:50:28:cc:
         0d:8f:95:df:51:b9:34:4a:8f:ca:1a:8e:58:ed:d0:f3:f2:2b:
         e5:1f:2e:7f:a7:5f:9a:90:10:06:63:e4:86:df:06:4f:d3:a5:
         58:74:0f:49:4d:22:b9:d1:37:86:12:07:56:bd:4b:51:ea:b3:
         bd:06:14:c7:06:bf:44:05:bc:02:03:17:8d:55:e8:40:91:d5:
         dc:9f:ce:e6:3e:e7:8b:60:22:3c:cc:2f:89:c1:9b:4d:8c:00:
         26:ba:2a:53:fc:79:7f:8b:6f:59:c1:7b:85:91:26:57:5d:5f:
         e6:bb:f2:9e:53:29:0a:01:81:63:fe:df:c2:70:8d:2e:83:ec:
         87:89:99:1c:84:78:d9:4d:62:36:2a:59:d5:73:50:8c:f2:e0:
         98:44:e4:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:59:45 2025 by rpki-client