Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a316532303a3a2f34382d3438203d3e203532303235.roa
File:                     326130353a646663343a316532303a3a2f34382d3438203d3e203532303235.roa (raw, json)
Hash identifier:          jk2cAXQN7gAmEs6HA40AnTcLNuGLJLfizIZCoZ7E4ZI=
Subject key identifier:   57:3B:3C:31:A6:8A:30:BE:D9:D4:97:3C:DA:37:43:F9:10:8F:26:5F
Certificate issuer:       /CN=0AAD221E4070989D4939FACA0F0981AB26E93895
Certificate serial:       38D46174B29E81B78EDB41175926E61E7153B058
Authority key identifier: 0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a316532303a3a2f34382d3438203d3e203532303235.roa
Signing time:             Thu 30 Nov 2023 05:26:04 +0000
ROA not before:           Thu 30 Nov 2023 05:21:04 +0000
ROA not after:            Thu 28 Nov 2024 05:26:04 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:1e20::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 19:28:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:d4:61:74:b2:9e:81:b7:8e:db:41:17:59:26:e6:1e:71:53:b0:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AAD221E4070989D4939FACA0F0981AB26E93895
        Validity
            Not Before: Nov 30 05:21:04 2023 GMT
            Not After : Nov 28 05:26:04 2024 GMT
        Subject: CN=573B3C31A68A30BED9D4973CDA3743F9108F265F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ed:27:22:06:e9:86:e9:5a:a3:e2:ca:e4:d5:
                    4a:b9:45:a9:f9:6b:0f:56:14:7d:d5:c6:8f:70:34:
                    e0:34:e2:61:db:4a:40:1a:70:c5:5f:f2:af:7c:b9:
                    5e:49:67:fd:b9:12:0a:13:d6:a1:be:f6:6b:e2:77:
                    0f:08:e0:37:90:7c:31:d8:85:bf:da:24:81:47:d4:
                    c1:40:da:d4:9e:c9:1e:8a:7d:e2:87:13:25:33:46:
                    ac:6d:fe:af:44:a6:46:3a:3c:1f:81:d5:11:34:cc:
                    03:3f:b9:f6:ef:1b:47:aa:4a:d3:c3:2c:47:03:df:
                    e4:c1:8e:da:fa:2c:46:61:3a:d7:03:13:fc:e2:77:
                    1e:17:04:38:ae:bd:19:b3:7d:fe:1b:56:89:70:5c:
                    4b:79:c4:79:68:ca:2f:2b:07:a1:93:d8:95:98:0f:
                    2e:31:26:37:2f:78:35:e7:a2:68:2c:6f:36:c6:be:
                    f1:6d:d0:75:6f:3a:b3:d0:ed:c8:65:6a:ac:f9:77:
                    49:2a:a3:81:00:be:56:d6:e8:20:48:71:0f:98:b1:
                    c6:02:b5:ae:4a:f2:97:e1:07:e1:bd:fc:b0:a4:83:
                    92:42:7b:b4:74:d7:e5:a3:54:6d:40:66:91:de:a8:
                    7d:de:04:cc:c7:44:f0:92:5e:d3:1c:89:d9:ae:e6:
                    a8:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:3B:3C:31:A6:8A:30:BE:D9:D4:97:3C:DA:37:43:F9:10:8F:26:5F
            X509v3 Authority Key Identifier:
                keyid:0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a316532303a3a2f34382d3438203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:1e20::/48

    Signature Algorithm: sha256WithRSAEncryption
         05:af:00:a0:9a:f6:7b:a9:16:70:da:34:9a:60:fa:aa:a9:a9:
         2c:34:fc:c7:fb:52:e4:0f:a8:aa:fd:da:96:24:c7:25:81:34:
         a1:65:67:70:bc:d9:9e:e6:04:03:f3:f3:f6:c3:53:ef:4a:f3:
         b8:b7:4a:27:ae:39:2c:87:84:d4:03:d2:1f:93:22:d2:d5:8c:
         50:88:22:1d:33:5c:e7:be:65:79:16:dd:b9:3f:de:17:8d:23:
         98:1f:f5:dd:6d:a5:75:2b:98:3a:3d:f1:72:99:f5:ee:c5:c2:
         88:4f:ca:b8:42:21:8d:09:87:8c:e6:d4:1a:97:b5:4e:15:1a:
         2f:68:90:99:92:9c:de:db:c8:dc:a2:ee:00:47:b9:43:82:69:
         c6:df:c5:7e:39:20:f9:de:ca:a8:4a:35:18:32:f9:c7:9b:d1:
         75:b2:d3:1e:fb:e3:15:29:8d:29:8c:77:53:ac:d4:96:c9:fc:
         46:26:fb:2d:43:32:89:9b:af:87:d7:0b:58:55:f0:6c:f9:3c:
         1c:81:2a:c2:c8:f7:08:e5:6e:c4:a6:f8:8a:52:71:00:ef:a8:
         ac:a1:a3:9a:e6:1a:6e:93:b9:00:01:65:7e:b1:73:bc:41:9b:
         26:fb:40:9e:a6:0a:d0:63:52:0d:cd:99:a9:64:0b:5a:5d:cb:
         74:65:7c:6d
-----BEGIN CERTIFICATE-----
MIIFIjCCBAqgAwIBAgIUONRhdLKegbeO20EXWSbmHnFTsFgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEFBRDIyMUU0MDcwOTg5RDQ5MzlGQUNBMEYwOTgxQUIy
NkU5Mzg5NTAeFw0yMzExMzAwNTIxMDRaFw0yNDExMjgwNTI2MDRaMDMxMTAvBgNV
BAMTKDU3M0IzQzMxQTY4QTMwQkVEOUQ0OTczQ0RBMzc0M0Y5MTA4RjI2NUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO7SciBumG6Vqj4srk1Uq5Ran5
aw9WFH3Vxo9wNOA04mHbSkAacMVf8q98uV5JZ/25EgoT1qG+9mvidw8I4DeQfDHY
hb/aJIFH1MFA2tSeyR6KfeKHEyUzRqxt/q9EpkY6PB+B1RE0zAM/ufbvG0eqStPD
LEcD3+TBjtr6LEZhOtcDE/zidx4XBDiuvRmzff4bVolwXEt5xHloyi8rB6GT2JWY
Dy4xJjcveDXnomgsbzbGvvFt0HVvOrPQ7chlaqz5d0kqo4EAvlbW6CBIcQ+YscYC
ta5K8pfhB+G9/LCkg5JCe7R01+WjVG1AZpHeqH3eBMzHRPCSXtMcidmu5qhnAgMB
AAGjggIsMIICKDAdBgNVHQ4EFgQUVzs8MaaKML7Z1Jc82jdD+RCPJl8wHwYDVR0j
BBgwFoAUCq0iHkBwmJ1JOfrKDwmBqybpOJUwDgYDVR0PAQH/BAQDAgeAMG4GA1Ud
HwRnMGUwY6BhoF+GXXJzeW5jOi8vcnBraS0wMS5wZHhuZXQudWsvcmVwby9wYXJh
ZG94bmV0d29ya3MvMi8wQUFEMjIxRTQwNzA5ODlENDkzOUZBQ0EwRjA5ODFBQjI2
RTkzODk1LmNybDCBkwYIKwYBBQUHAQEEgYYwgYMwgYAGCCsGAQUFBzAChnRyc3lu
YzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYz
ZTAxODU3NTVjOTFiZTNmOWQvMi8wQUFEMjIxRTQwNzA5ODlENDkzOUZBQ0EwRjA5
ODFBQjI2RTkzODk1LmNlcjCBkQYIKwYBBQUHAQsEgYQwgYEwfwYIKwYBBQUHMAuG
c3JzeW5jOi8vcnBraS0wMS5wZHhuZXQudWsvcmVwby9wYXJhZG94bmV0d29ya3Mv
Mi8zMjYxMzAzNTNhNjQ2NjYzMzQzYTMxNjUzMjMwM2EzYTJmMzQzODJkMzQzODIw
M2QzZTIwMzUzMjMwMzIzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF38QeIDANBgkqhkiG9w0BAQsF
AAOCAQEABa8AoJr2e6kWcNo0mmD6qqmpLDT8x/tS5A+oqv3aliTHJYE0oWVncLzZ
nuYEA/Pz9sNT70rzuLdKJ645LIeE1APSH5Mi0tWMUIgiHTNc575leRbduT/eF40j
mB/13W2ldSuYOj3xcpn17sXCiE/KuEIhjQmHjObUGpe1ThUaL2iQmZKc3tvI3KLu
AEe5Q4Jpxt/Ffjkg+d7KqEo1GDL5x5vRdbLTHvvjFSmNKYx3U6zUlsn8Rib7LUMy
iZuvh9cLWFXwbPk8HIEqwsj3COVuxKb4ilJxAO+orKGjmuYabpO5AAFlfrFzvEGb
JvtAnqYK0GNSDc2ZqWQLWl3LdGV8bQ==
-----END CERTIFICATE-----
Generated at Sat May 4 03:05:13 2024 by rpki-client on console-ams.rpki-client.org