Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a32343a3a2f34382d3438203d3e203532303235.roa
File:                     326130353a646663343a32343a3a2f34382d3438203d3e203532303235.roa (raw, json)
Hash identifier:          MF/eluU+1h7gT7hCIZln6c39jmogAWnmmOuCjTl9I60=
Subject key identifier:   1F:1F:9D:24:F2:82:19:CE:D5:66:D1:33:C8:6F:22:B1:E1:AA:53:2F
Certificate issuer:       /CN=0AAD221E4070989D4939FACA0F0981AB26E93895
Certificate serial:       13F60244B3828E7DD247E1064D785F36FD331560
Authority key identifier: 0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a32343a3a2f34382d3438203d3e203532303235.roa
Signing time:             Thu 10 Aug 2023 22:47:43 +0000
ROA not before:           Thu 10 Aug 2023 22:42:43 +0000
ROA not after:            Thu 08 Aug 2024 22:47:43 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:24::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 19:28:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:f6:02:44:b3:82:8e:7d:d2:47:e1:06:4d:78:5f:36:fd:33:15:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AAD221E4070989D4939FACA0F0981AB26E93895
        Validity
            Not Before: Aug 10 22:42:43 2023 GMT
            Not After : Aug  8 22:47:43 2024 GMT
        Subject: CN=1F1F9D24F28219CED566D133C86F22B1E1AA532F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ca:58:1e:15:bf:03:68:85:fc:be:1f:85:d5:
                    53:a0:df:7e:42:1b:3d:53:b1:dc:2d:e7:64:c5:79:
                    6b:26:99:1c:e6:e4:2c:d5:2a:4c:67:be:d7:76:da:
                    03:b4:ab:90:c8:1e:60:38:8c:00:7b:ef:4b:6b:a3:
                    e6:0d:9e:13:2b:3f:21:4f:48:3e:37:64:07:67:d6:
                    3d:f5:15:87:71:74:26:31:bf:f8:75:ae:79:64:e9:
                    a8:c0:3d:e5:25:fa:0f:0e:ff:19:d2:7c:ed:6d:92:
                    c0:d9:c1:7a:a6:a9:21:b9:22:6a:e0:fd:75:18:57:
                    64:cd:c2:38:10:af:f7:ff:28:3a:ce:0e:0b:af:23:
                    ce:77:2e:9b:fb:28:94:0b:09:ed:da:cb:5c:cb:a0:
                    6e:8b:01:d5:ba:59:a2:04:da:44:56:91:db:f0:e6:
                    0e:f5:5e:4e:de:89:1d:87:be:b6:49:68:63:73:a5:
                    33:b1:e9:5c:ca:74:c1:27:6e:f3:25:a6:01:12:e9:
                    cd:96:90:3c:b6:15:cd:89:e3:18:cc:d0:59:18:62:
                    0f:fa:df:78:c4:fd:99:67:3d:f6:69:e9:e5:af:ae:
                    ca:9b:c4:f0:a9:8a:71:70:47:fc:7a:2d:f7:99:a2:
                    7b:91:fd:ed:6e:4c:99:a2:b9:c4:25:80:84:db:3a:
                    73:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:1F:9D:24:F2:82:19:CE:D5:66:D1:33:C8:6F:22:B1:E1:AA:53:2F
            X509v3 Authority Key Identifier:
                keyid:0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a32343a3a2f34382d3438203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:24::/48

    Signature Algorithm: sha256WithRSAEncryption
         07:86:97:c6:86:9b:43:b2:6f:a3:b1:f6:7b:d6:f0:15:a8:5f:
         c9:c6:97:a6:ba:c6:3e:28:55:20:28:65:a2:1e:27:4a:bc:66:
         06:8e:7f:e5:62:c0:cb:d1:b7:d8:7b:ad:00:8f:d0:9e:d7:11:
         32:a3:29:e2:ae:16:8e:be:e0:0b:eb:ac:5c:fe:f4:c5:ca:81:
         7f:b0:61:71:78:b1:62:62:43:bf:8e:21:52:18:c4:a8:cb:8b:
         40:bd:74:89:db:39:06:e9:d9:93:38:35:0a:49:c2:17:16:4c:
         b3:3f:dc:d3:15:0f:e9:d3:c9:1f:07:6f:48:d1:20:71:ac:46:
         bd:f4:07:8a:ed:00:a1:cf:fb:fa:20:63:96:52:4a:29:e5:1c:
         9c:f0:2b:d0:68:06:d4:99:48:dc:5d:3e:9b:bd:4c:49:27:ed:
         48:3c:ac:46:98:aa:b4:2a:0b:03:78:e8:41:5e:e1:d1:4e:75:
         72:4a:9a:d1:b0:b9:1c:ce:1b:38:fc:3b:0a:2a:fe:ca:1e:e4:
         0a:ba:59:77:8e:01:cf:5e:40:d4:81:d3:8a:a2:19:e0:0c:df:
         cb:17:f3:95:d7:a1:f7:01:1c:84:f1:bf:49:30:68:c4:fb:26:
         99:4c:0b:6a:6a:a1:3e:f4:b4:32:47:b7:6b:b9:42:e4:b1:d8:
         28:6d:3b:64
-----BEGIN CERTIFICATE-----
MIIFHDCCBASgAwIBAgIUE/YCRLOCjn3SR+EGTXhfNv0zFWAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEFBRDIyMUU0MDcwOTg5RDQ5MzlGQUNBMEYwOTgxQUIy
NkU5Mzg5NTAeFw0yMzA4MTAyMjQyNDNaFw0yNDA4MDgyMjQ3NDNaMDMxMTAvBgNV
BAMTKDFGMUY5RDI0RjI4MjE5Q0VENTY2RDEzM0M4NkYyMkIxRTFBQTUzMkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOylgeFb8DaIX8vh+F1VOg335C
Gz1Tsdwt52TFeWsmmRzm5CzVKkxnvtd22gO0q5DIHmA4jAB770tro+YNnhMrPyFP
SD43ZAdn1j31FYdxdCYxv/h1rnlk6ajAPeUl+g8O/xnSfO1tksDZwXqmqSG5Imrg
/XUYV2TNwjgQr/f/KDrODguvI853Lpv7KJQLCe3ay1zLoG6LAdW6WaIE2kRWkdvw
5g71Xk7eiR2HvrZJaGNzpTOx6VzKdMEnbvMlpgES6c2WkDy2Fc2J4xjM0FkYYg/6
33jE/ZlnPfZp6eWvrsqbxPCpinFwR/x6LfeZonuR/e1uTJmiucQlgITbOnMxAgMB
AAGjggImMIICIjAdBgNVHQ4EFgQUHx+dJPKCGc7VZtEzyG8iseGqUy8wHwYDVR0j
BBgwFoAUCq0iHkBwmJ1JOfrKDwmBqybpOJUwDgYDVR0PAQH/BAQDAgeAMG4GA1Ud
HwRnMGUwY6BhoF+GXXJzeW5jOi8vcnBraS0wMS5wZHhuZXQudWsvcmVwby9wYXJh
ZG94bmV0d29ya3MvMi8wQUFEMjIxRTQwNzA5ODlENDkzOUZBQ0EwRjA5ODFBQjI2
RTkzODk1LmNybDCBkwYIKwYBBQUHAQEEgYYwgYMwgYAGCCsGAQUFBzAChnRyc3lu
YzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYz
ZTAxODU3NTVjOTFiZTNmOWQvMi8wQUFEMjIxRTQwNzA5ODlENDkzOUZBQ0EwRjA5
ODFBQjI2RTkzODk1LmNlcjCBiwYIKwYBBQUHAQsEfzB9MHsGCCsGAQUFBzALhm9y
c3luYzovL3Jwa2ktMDEucGR4bmV0LnVrL3JlcG8vcGFyYWRveG5ldHdvcmtzLzIv
MzI2MTMwMzUzYTY0NjY2MzM0M2EzMjM0M2EzYTJmMzQzODJkMzQzODIwM2QzZTIw
MzUzMjMwMzIzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEF
BQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF38QAJDANBgkqhkiG9w0BAQsFAAOCAQEA
B4aXxoabQ7Jvo7H2e9bwFahfycaXprrGPihVIChloh4nSrxmBo5/5WLAy9G32Hut
AI/QntcRMqMp4q4Wjr7gC+usXP70xcqBf7BhcXixYmJDv44hUhjEqMuLQL10ids5
BunZkzg1CknCFxZMsz/c0xUP6dPJHwdvSNEgcaxGvfQHiu0Aoc/7+iBjllJKKeUc
nPAr0GgG1JlI3F0+m71MSSftSDysRpiqtCoLA3joQV7h0U51ckqa0bC5HM4bOPw7
Cir+yh7kCrpZd44Bz15A1IHTiqIZ4Azfyxfzldeh9wEchPG/STBoxPsmmUwLamqh
PvS0Mke3a7lC5LHYKG07ZA==
-----END CERTIFICATE-----
Generated at Sat May 4 02:34:41 2024 by rpki-client on console-fra.rpki-client.org