Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a3133333a3a2f34382d3438203d3e203532303235.roa
File:                     326130353a646663343a3133333a3a2f34382d3438203d3e203532303235.roa (raw, json)
Hash identifier:          1WQdKPrYp7KQQrenFEcMSrTsWTxzi0bnaZHtMMox/48=
Subject key identifier:   EA:63:A2:39:D2:5D:8D:EC:11:91:77:7A:6E:77:4E:5B:30:E6:BF:25
Certificate issuer:       /CN=0AAD221E4070989D4939FACA0F0981AB26E93895
Certificate serial:       5A77D40D3100B0A351584F5E8B72B1DD4ECDDF3D
Authority key identifier: 0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a3133333a3a2f34382d3438203d3e203532303235.roa
Signing time:             Sat 16 Sep 2023 13:04:50 +0000
ROA not before:           Sat 16 Sep 2023 12:59:50 +0000
ROA not after:            Sat 14 Sep 2024 13:04:50 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:133::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 19:28:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:77:d4:0d:31:00:b0:a3:51:58:4f:5e:8b:72:b1:dd:4e:cd:df:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AAD221E4070989D4939FACA0F0981AB26E93895
        Validity
            Not Before: Sep 16 12:59:50 2023 GMT
            Not After : Sep 14 13:04:50 2024 GMT
        Subject: CN=EA63A239D25D8DEC1191777A6E774E5B30E6BF25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f2:8f:15:55:38:60:0e:79:4c:cd:37:ea:e4:
                    76:5f:54:62:96:a9:07:bf:93:b8:18:6d:65:78:7e:
                    92:a7:f4:29:df:89:fd:ad:d8:40:65:94:cc:3a:d6:
                    21:16:bc:5a:08:f3:40:f8:dd:61:b9:05:2b:06:80:
                    65:6e:4b:57:13:33:9b:36:7e:f6:76:bb:ff:37:43:
                    da:bd:e8:da:20:f9:3b:5d:2d:93:b2:4e:33:dd:01:
                    68:90:de:3e:f7:c0:af:48:f3:33:3f:5c:49:43:21:
                    19:7c:fa:f9:dd:de:0c:4d:46:97:ad:5d:25:b2:89:
                    26:ec:5a:cb:fa:38:26:d8:9f:49:a2:f3:a7:75:dc:
                    da:36:88:06:48:7b:8e:4f:7b:63:e5:11:09:97:ec:
                    9d:90:88:0a:46:c1:65:d6:05:f5:f7:b1:89:1e:29:
                    e9:f9:51:f4:71:81:65:31:aa:bf:7e:14:fb:d1:50:
                    f9:d8:10:db:f5:4f:6d:f8:b9:4f:17:4e:96:64:ac:
                    ec:1b:ac:ff:8d:73:5c:10:95:e9:bd:28:6c:1d:cc:
                    21:bf:05:77:ad:9b:98:82:d3:1d:59:35:87:89:35:
                    30:fe:f9:fd:ce:f3:cf:3a:49:43:08:a4:d2:01:f7:
                    d0:69:79:c6:04:a8:cf:7d:66:d6:cd:09:1a:ae:6f:
                    2c:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:63:A2:39:D2:5D:8D:EC:11:91:77:7A:6E:77:4E:5B:30:E6:BF:25
            X509v3 Authority Key Identifier:
                keyid:0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a3133333a3a2f34382d3438203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:133::/48

    Signature Algorithm: sha256WithRSAEncryption
         69:8d:52:c3:c6:8c:3b:f1:a0:04:e7:f4:36:44:89:bf:fc:66:
         f6:61:9f:b3:15:9a:74:a9:e4:c2:6c:33:b5:ab:12:6b:64:74:
         4e:35:ec:27:80:77:5a:ec:22:89:8c:96:98:8c:92:5a:36:04:
         25:27:63:c0:de:bd:ec:2f:0d:4b:56:e5:d4:c0:e2:26:1c:01:
         4c:d0:b7:7b:ec:f6:b9:ea:70:bb:7f:2d:ef:cb:1d:30:ee:eb:
         38:33:53:2f:f3:f3:82:06:a2:d2:56:c6:55:b0:d2:28:65:0b:
         10:3b:91:b4:85:13:ee:01:25:a5:9a:bc:db:5e:ee:2e:a8:ca:
         93:8b:6d:33:7d:02:db:02:31:9c:d0:4a:ae:6b:4d:4b:d8:14:
         7f:c1:9f:f6:b7:f4:58:9a:80:c6:2c:5f:94:08:d7:b4:09:ea:
         20:18:2b:57:db:6c:c6:ea:3d:48:ee:e6:4b:87:21:59:68:6d:
         9e:17:43:a2:95:50:8f:25:7b:ec:9f:b1:0c:72:4b:52:b0:16:
         7b:14:ec:ea:71:dd:43:23:ac:ab:b1:c7:ad:02:01:67:08:82:
         11:a7:a8:e0:eb:93:8a:2c:0b:b1:ee:9f:a9:40:9d:74:6e:7a:
         c7:51:23:40:5e:9a:0d:f6:a9:f6:da:80:0a:e8:f0:63:1a:48:
         05:53:7e:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 03:05:13 2024 by rpki-client on console-ams.rpki-client.org