Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a313831303a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a313831303a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          weQBPo8RYgdnQiBeUhMIV8EfsGXAUyxEn1c8vKYDxq0=
Subject key identifier:   65:15:1B:36:E0:CE:AA:0C:C3:7C:B6:5D:26:69:F1:E2:70:E0:E0:13
Certificate issuer:       /CN=0AAD221E4070989D4939FACA0F0981AB26E93895
Certificate serial:       2A4E656230EB165AEAA69C6561646C7359D47F25
Authority key identifier: 0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a313831303a3a2f34382d313238203d3e203532303235.roa
Signing time:             Mon 20 Jan 2025 04:28:25 +0000
ROA not before:           Mon 20 Jan 2025 04:23:25 +0000
ROA not after:            Mon 19 Jan 2026 04:28:25 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:1810::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Feb 2025 20:07:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:4e:65:62:30:eb:16:5a:ea:a6:9c:65:61:64:6c:73:59:d4:7f:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AAD221E4070989D4939FACA0F0981AB26E93895
        Validity
            Not Before: Jan 20 04:23:25 2025 GMT
            Not After : Jan 19 04:28:25 2026 GMT
        Subject: CN=65151B36E0CEAA0CC37CB65D2669F1E270E0E013
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:98:21:04:0d:8d:35:ab:34:07:fc:36:c3:14:
                    bb:e8:d6:21:b3:b0:2e:f4:ea:79:73:03:a7:ff:1e:
                    e9:00:b8:4e:42:1f:31:05:e4:97:1b:bc:a9:e4:3a:
                    38:ff:20:0f:8f:9c:34:c2:67:2f:da:09:9d:73:e6:
                    a0:70:e2:41:6e:be:7b:cc:c4:aa:6c:0b:7c:8f:94:
                    05:73:5d:c0:d4:51:24:8d:53:18:eb:2e:22:a4:ef:
                    00:1b:36:01:69:fd:39:59:a1:1d:03:77:bf:bd:91:
                    72:1f:09:71:ac:2f:43:e6:ff:32:cd:d3:4c:b0:18:
                    ae:26:95:08:b0:c0:f3:ce:75:ab:ed:de:0a:6e:eb:
                    28:ae:8a:90:b6:f8:35:ca:33:44:af:85:59:3f:3a:
                    ce:72:92:cd:8c:e8:41:c5:9f:dd:a9:b7:cd:70:ba:
                    7f:0b:42:f3:a3:5c:3a:e8:81:fc:e5:64:11:72:aa:
                    7c:fa:87:68:5f:f3:f5:5a:7e:2e:f5:1f:3b:26:ab:
                    22:2a:24:a8:17:0e:8c:eb:1d:c8:16:ab:5a:9c:64:
                    d9:2d:6d:41:66:a0:49:6f:8d:fc:60:8d:fa:6c:59:
                    57:69:e4:28:65:4e:2b:10:8c:30:13:43:93:05:b1:
                    e4:9d:98:23:0e:8f:4b:f3:9f:9f:4c:2f:51:b3:e3:
                    78:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:15:1B:36:E0:CE:AA:0C:C3:7C:B6:5D:26:69:F1:E2:70:E0:E0:13
            X509v3 Authority Key Identifier:
                keyid:0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a313831303a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:1810::/48

    Signature Algorithm: sha256WithRSAEncryption
         7a:d7:e9:1a:dd:bf:c7:e3:08:c4:94:d5:f7:76:4c:d5:87:8a:
         ae:d6:91:9d:e4:3e:2a:04:2a:ee:7e:f2:8a:5d:23:bb:af:3b:
         e1:ef:43:3f:40:e0:3f:ca:89:b9:14:f6:f0:0c:e4:b7:91:45:
         6f:61:b5:d2:47:60:65:3b:d4:e9:ba:a0:0c:7e:4b:d6:49:a2:
         a0:a9:18:4b:49:56:0a:7d:af:12:bf:0b:d1:90:b4:ba:25:2b:
         d2:06:3c:67:c0:6b:bf:97:61:2d:0d:47:f5:ad:4e:f9:04:cf:
         b9:a5:a0:6e:e1:b1:23:e9:a7:38:7c:60:3c:7b:82:64:ca:fa:
         b0:e6:0b:9d:84:73:50:3c:91:42:82:5c:94:ee:c9:33:13:ef:
         09:aa:7d:23:3d:93:b0:81:1e:07:19:5f:3c:66:06:a2:43:1a:
         54:fb:4e:cc:99:58:45:36:ac:8b:ac:2e:45:cb:47:c9:52:5d:
         62:df:97:3c:c8:1b:66:19:ac:fb:5c:63:45:61:12:69:31:ee:
         f1:ea:74:99:df:a9:25:f7:d8:6b:a4:20:90:0b:ae:94:78:0c:
         83:05:ef:f7:bc:56:b5:db:0a:35:65:f7:85:54:c1:08:67:2c:
         88:a7:4f:74:4e:c7:4f:de:eb:ca:bf:eb:26:28:d0:4b:80:2a:
         4f:dc:2b:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:52:50 2025 by rpki-client