Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a3133333a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a3133333a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          qCBwD/N45DNdCLarTBXVKdqitvxU1I2eDjkosFlYI0c=
Subject key identifier:   4C:1A:85:85:8E:AB:0A:4C:6C:14:C5:43:B7:1D:B7:A3:03:DD:A6:64
Certificate issuer:       /CN=0AAD221E4070989D4939FACA0F0981AB26E93895
Certificate serial:       25F650A1987752257B544BCE469BC1E5A0A19752
Authority key identifier: 0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a3133333a3a2f34382d313238203d3e203532303235.roa
Signing time:             Thu 23 May 2024 12:56:59 +0000
ROA not before:           Thu 23 May 2024 12:51:59 +0000
ROA not after:            Thu 22 May 2025 12:56:59 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:133::/48 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:f6:50:a1:98:77:52:25:7b:54:4b:ce:46:9b:c1:e5:a0:a1:97:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AAD221E4070989D4939FACA0F0981AB26E93895
        Validity
            Not Before: May 23 12:51:59 2024 GMT
            Not After : May 22 12:56:59 2025 GMT
        Subject: CN=4C1A85858EAB0A4C6C14C543B71DB7A303DDA664
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:1d:53:9e:b0:d5:49:49:95:b8:df:a8:84:ce:
                    df:b6:5b:d0:15:94:59:49:17:c7:c1:f1:43:05:d9:
                    c9:25:00:13:7c:40:c1:45:70:0c:d7:fd:84:37:cd:
                    c9:64:a5:b1:05:57:08:f7:8a:9f:b8:12:83:8a:21:
                    3d:50:9f:ad:41:ce:dc:b3:2d:2d:bc:df:fb:81:c6:
                    6c:59:d1:fe:92:32:a0:3a:d9:d7:41:b7:4b:74:33:
                    31:2d:a7:6a:2d:67:17:70:74:de:cb:d1:21:1d:57:
                    2c:ef:51:f0:e0:15:b0:17:4f:8e:b6:70:da:44:ea:
                    1b:65:13:e6:3f:16:2e:ae:e8:b8:a5:7f:71:13:de:
                    6a:1f:63:40:4f:1a:c5:90:de:56:53:bf:17:2b:02:
                    f1:89:18:5b:57:26:e5:f3:88:10:a6:c0:9f:58:65:
                    0c:33:cc:f3:53:99:2b:17:33:41:90:5c:6c:17:36:
                    2e:c6:3e:e6:03:6c:60:99:6c:8b:5c:2e:fa:f8:be:
                    1a:c0:2c:0b:6f:92:87:ee:96:6b:8d:06:ad:d1:71:
                    d0:81:c2:20:80:3c:a8:c9:19:f7:52:fc:3b:b1:a2:
                    dc:de:8f:12:fe:2a:09:83:a1:8e:ed:75:78:5f:92:
                    45:40:16:90:5a:c2:6a:79:6b:70:0e:ce:d1:06:4f:
                    9f:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:1A:85:85:8E:AB:0A:4C:6C:14:C5:43:B7:1D:B7:A3:03:DD:A6:64
            X509v3 Authority Key Identifier:
                keyid:0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a3133333a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:133::/48

    Signature Algorithm: sha256WithRSAEncryption
         4a:52:f9:fd:bb:1f:8b:7a:be:58:2b:a6:89:c5:b0:da:1d:37:
         59:fa:35:f8:e9:64:ee:5f:2d:4c:d4:bf:49:c6:48:24:1c:10:
         be:98:f1:b3:48:12:5b:33:7e:ea:0c:00:9b:63:dd:d7:9b:db:
         31:df:73:eb:cc:8f:83:f3:95:4b:58:b5:b5:ac:d2:a6:2d:54:
         87:e6:d8:30:de:58:bc:e9:3f:9c:16:17:25:77:ff:08:ef:e8:
         bf:59:65:71:0a:47:71:5a:16:bd:d9:9e:89:e8:51:c0:78:e6:
         5e:ee:f1:0e:a3:cf:06:a1:1c:ff:f1:df:75:3b:22:d4:04:8b:
         b1:bb:f6:d1:b4:e1:68:38:30:f2:b9:30:39:b5:06:81:8c:75:
         f3:6a:66:3b:d3:a6:cf:3f:62:68:7f:4a:a4:65:26:6a:ed:06:
         7e:94:0e:b0:7d:af:d5:43:90:d9:4c:02:30:70:1f:42:15:43:
         b6:35:b1:09:0d:a7:0e:d7:44:1a:26:ae:5f:98:79:09:10:99:
         97:39:c0:c5:db:1c:28:e8:1b:30:dc:32:9a:3a:60:04:1b:c0:
         98:b2:d1:6d:ff:df:c1:fe:c1:4b:b9:23:f5:2b:8d:6a:97:a9:
         99:04:5a:89:1d:27:30:f8:78:7c:0f:4c:a7:75:ff:29:ce:d4:
         86:d0:f5:b8
-----BEGIN CERTIFICATE-----
MIIFIjCCBAqgAwIBAgIUJfZQoZh3UiV7VEvORpvB5aChl1IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEFBRDIyMUU0MDcwOTg5RDQ5MzlGQUNBMEYwOTgxQUIy
NkU5Mzg5NTAeFw0yNDA1MjMxMjUxNTlaFw0yNTA1MjIxMjU2NTlaMDMxMTAvBgNV
BAMTKDRDMUE4NTg1OEVBQjBBNEM2QzE0QzU0M0I3MURCN0EzMDNEREE2NjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvHVOesNVJSZW436iEzt+2W9AV
lFlJF8fB8UMF2cklABN8QMFFcAzX/YQ3zclkpbEFVwj3ip+4EoOKIT1Qn61Bztyz
LS283/uBxmxZ0f6SMqA62ddBt0t0MzEtp2otZxdwdN7L0SEdVyzvUfDgFbAXT462
cNpE6htlE+Y/Fi6u6Lilf3ET3mofY0BPGsWQ3lZTvxcrAvGJGFtXJuXziBCmwJ9Y
ZQwzzPNTmSsXM0GQXGwXNi7GPuYDbGCZbItcLvr4vhrALAtvkofulmuNBq3RcdCB
wiCAPKjJGfdS/DuxotzejxL+KgmDoY7tdXhfkkVAFpBawmp5a3AOztEGT5+zAgMB
AAGjggIsMIICKDAdBgNVHQ4EFgQUTBqFhY6rCkxsFMVDtx23owPdpmQwHwYDVR0j
BBgwFoAUCq0iHkBwmJ1JOfrKDwmBqybpOJUwDgYDVR0PAQH/BAQDAgeAMG4GA1Ud
HwRnMGUwY6BhoF+GXXJzeW5jOi8vcnBraS0wMS5wZHhuZXQudWsvcmVwby9wYXJh
ZG94bmV0d29ya3MvMi8wQUFEMjIxRTQwNzA5ODlENDkzOUZBQ0EwRjA5ODFBQjI2
RTkzODk1LmNybDCBkwYIKwYBBQUHAQEEgYYwgYMwgYAGCCsGAQUFBzAChnRyc3lu
YzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYz
ZTAxODU3NTVjOTFiZTNmOWQvMi8wQUFEMjIxRTQwNzA5ODlENDkzOUZBQ0EwRjA5
ODFBQjI2RTkzODk1LmNlcjCBkQYIKwYBBQUHAQsEgYQwgYEwfwYIKwYBBQUHMAuG
c3JzeW5jOi8vcnBraS0wMS5wZHhuZXQudWsvcmVwby9wYXJhZG94bmV0d29ya3Mv
Mi8zMjYxMzAzNTNhNjQ2NjYzMzQzYTMxMzMzMzNhM2EyZjM0MzgyZDMxMzIzODIw
M2QzZTIwMzUzMjMwMzIzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF38QBMzANBgkqhkiG9w0BAQsF
AAOCAQEASlL5/bsfi3q+WCumicWw2h03Wfo1+Olk7l8tTNS/ScZIJBwQvpjxs0gS
WzN+6gwAm2Pd15vbMd9z68yPg/OVS1i1tazSpi1Uh+bYMN5YvOk/nBYXJXf/CO/o
v1llcQpHcVoWvdmeiehRwHjmXu7xDqPPBqEc//HfdTsi1ASLsbv20bThaDgw8rkw
ObUGgYx182pmO9Omzz9iaH9KpGUmau0GfpQOsH2v1UOQ2UwCMHAfQhVDtjWxCQ2n
DtdEGiauX5h5CRCZlznAxdscKOgbMNwymjpgBBvAmLLRbf/fwf7BS7kj9SuNapep
mQRaiR0nMPh4fA9Mp3X/Kc7UhtD1uA==
-----END CERTIFICATE-----
Generated at Sat Nov 23 05:00:48 2024 by rpki-client on console-fra.rpki-client.org