Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a34353a3a2f34382d3438203d3e203532303235.roa
File:                     326130353a646663343a34353a3a2f34382d3438203d3e203532303235.roa (raw, json)
Hash identifier:          x/iIHzaeYZZpvoUovpRa6rXE77gzWadJtqZMqeM+SWA=
Subject key identifier:   D5:EB:3D:F4:10:E0:53:5F:97:3A:05:45:7B:A9:DA:8B:D6:04:81:5A
Certificate issuer:       /CN=0AAD221E4070989D4939FACA0F0981AB26E93895
Certificate serial:       7EEC7920AD39535DC597ACB8187D05877F7F1A52
Authority key identifier: 0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a34353a3a2f34382d3438203d3e203532303235.roa
Signing time:             Thu 10 Aug 2023 22:47:47 +0000
ROA not before:           Thu 10 Aug 2023 22:42:47 +0000
ROA not after:            Thu 08 Aug 2024 22:47:47 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:45::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 19:28:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:ec:79:20:ad:39:53:5d:c5:97:ac:b8:18:7d:05:87:7f:7f:1a:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AAD221E4070989D4939FACA0F0981AB26E93895
        Validity
            Not Before: Aug 10 22:42:47 2023 GMT
            Not After : Aug  8 22:47:47 2024 GMT
        Subject: CN=D5EB3DF410E0535F973A05457BA9DA8BD604815A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:84:14:08:e9:1d:e5:86:7c:9a:7f:88:fb:a5:
                    64:04:51:ac:b5:9b:4f:f9:c0:b4:54:f5:5d:5f:65:
                    7a:44:0a:a0:46:01:25:0a:c4:e1:c1:21:d5:c4:44:
                    0b:b3:8e:d7:fd:56:4f:00:7a:fd:02:60:04:1f:b6:
                    b0:5f:2d:5f:b0:fc:c4:72:33:57:74:c4:d6:25:1d:
                    31:39:79:bd:e3:ff:d3:2e:9e:51:d4:36:5f:b2:cf:
                    93:d6:5a:ae:03:87:cf:49:51:db:33:7c:5a:d2:03:
                    2c:f9:b2:39:9d:f2:e7:25:cb:e8:8c:be:3e:32:58:
                    64:50:3b:13:d7:00:7e:91:56:c2:07:36:a7:42:1a:
                    91:26:76:26:8c:8f:dd:2a:5a:af:21:06:9b:ac:88:
                    5e:e9:0a:1e:3c:dc:ec:fa:6e:88:11:6a:dc:9c:0e:
                    ef:df:20:47:a0:d7:bd:ba:19:2a:6c:21:4f:96:36:
                    1f:f0:f0:f5:59:99:81:69:b0:0e:e0:12:14:00:b8:
                    7e:f6:e4:1c:0f:fe:dd:46:71:37:66:f8:ca:11:2c:
                    1a:5d:66:75:58:5c:fa:e8:e7:07:f7:d0:8f:6c:ff:
                    cc:97:bd:ec:a4:d6:79:0d:30:78:e9:ce:5f:cf:e3:
                    d4:a0:c9:ac:57:53:dd:ce:7d:60:83:5a:c9:8d:88:
                    99:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:EB:3D:F4:10:E0:53:5F:97:3A:05:45:7B:A9:DA:8B:D6:04:81:5A
            X509v3 Authority Key Identifier:
                keyid:0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a34353a3a2f34382d3438203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:45::/48

    Signature Algorithm: sha256WithRSAEncryption
         5a:8c:91:cf:b6:e0:e2:85:b2:c7:5e:50:22:bd:1e:06:78:47:
         dd:2f:74:80:16:c9:4a:3f:42:f4:ba:69:c9:ea:45:40:46:23:
         ef:bd:c9:90:30:c4:64:ff:ad:a4:40:9e:c2:d3:b4:fc:6c:7e:
         3b:78:f6:83:6d:72:28:37:fb:ab:be:23:4c:bf:29:9e:8c:f3:
         4b:4d:69:37:2d:6f:ba:50:f0:38:39:52:fe:9b:54:fd:4a:0d:
         ab:b0:ea:20:80:d6:d0:81:eb:26:1d:2e:78:6e:7c:a3:36:a3:
         4b:6b:bd:ce:4e:22:0b:0f:5d:e9:7b:17:ca:46:8e:8f:c9:d4:
         88:f1:93:86:7b:4c:24:92:31:48:f9:c2:41:4a:a8:27:5a:df:
         68:96:27:f8:64:a2:a2:73:f7:38:09:82:85:0e:e4:85:f5:ca:
         22:38:b0:55:6b:3d:d1:0d:6b:d7:ce:ce:82:3d:99:12:d7:01:
         41:1c:f5:d4:1e:23:0a:f9:e9:8f:b3:ee:28:a7:e2:67:18:57:
         ba:64:89:08:80:f5:86:5a:aa:2c:03:83:e6:12:26:82:96:cc:
         4b:04:17:10:9b:96:68:d4:0b:d8:fa:ca:88:90:49:73:4a:9b:
         7b:98:bc:ae:65:94:b1:d8:80:16:18:45:b5:d1:c7:39:3e:ba:
         fc:af:a9:9a
-----BEGIN CERTIFICATE-----
MIIFHDCCBASgAwIBAgIUfux5IK05U13Fl6y4GH0Fh39/GlIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEFBRDIyMUU0MDcwOTg5RDQ5MzlGQUNBMEYwOTgxQUIy
NkU5Mzg5NTAeFw0yMzA4MTAyMjQyNDdaFw0yNDA4MDgyMjQ3NDdaMDMxMTAvBgNV
BAMTKEQ1RUIzREY0MTBFMDUzNUY5NzNBMDU0NTdCQTlEQThCRDYwNDgxNUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDphBQI6R3lhnyaf4j7pWQEUay1
m0/5wLRU9V1fZXpECqBGASUKxOHBIdXERAuzjtf9Vk8Aev0CYAQftrBfLV+w/MRy
M1d0xNYlHTE5eb3j/9MunlHUNl+yz5PWWq4Dh89JUdszfFrSAyz5sjmd8ucly+iM
vj4yWGRQOxPXAH6RVsIHNqdCGpEmdiaMj90qWq8hBpusiF7pCh483Oz6bogRatyc
Du/fIEeg1726GSpsIU+WNh/w8PVZmYFpsA7gEhQAuH725BwP/t1GcTdm+MoRLBpd
ZnVYXPro5wf30I9s/8yXveyk1nkNMHjpzl/P49SgyaxXU93OfWCDWsmNiJn7AgMB
AAGjggImMIICIjAdBgNVHQ4EFgQU1es99BDgU1+XOgVFe6nai9YEgVowHwYDVR0j
BBgwFoAUCq0iHkBwmJ1JOfrKDwmBqybpOJUwDgYDVR0PAQH/BAQDAgeAMG4GA1Ud
HwRnMGUwY6BhoF+GXXJzeW5jOi8vcnBraS0wMS5wZHhuZXQudWsvcmVwby9wYXJh
ZG94bmV0d29ya3MvMi8wQUFEMjIxRTQwNzA5ODlENDkzOUZBQ0EwRjA5ODFBQjI2
RTkzODk1LmNybDCBkwYIKwYBBQUHAQEEgYYwgYMwgYAGCCsGAQUFBzAChnRyc3lu
YzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYz
ZTAxODU3NTVjOTFiZTNmOWQvMi8wQUFEMjIxRTQwNzA5ODlENDkzOUZBQ0EwRjA5
ODFBQjI2RTkzODk1LmNlcjCBiwYIKwYBBQUHAQsEfzB9MHsGCCsGAQUFBzALhm9y
c3luYzovL3Jwa2ktMDEucGR4bmV0LnVrL3JlcG8vcGFyYWRveG5ldHdvcmtzLzIv
MzI2MTMwMzUzYTY0NjY2MzM0M2EzNDM1M2EzYTJmMzQzODJkMzQzODIwM2QzZTIw
MzUzMjMwMzIzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEF
BQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF38QARTANBgkqhkiG9w0BAQsFAAOCAQEA
WoyRz7bg4oWyx15QIr0eBnhH3S90gBbJSj9C9LppyepFQEYj773JkDDEZP+tpECe
wtO0/Gx+O3j2g21yKDf7q74jTL8pnozzS01pNy1vulDwODlS/ptU/UoNq7DqIIDW
0IHrJh0ueG58ozajS2u9zk4iCw9d6XsXykaOj8nUiPGThntMJJIxSPnCQUqoJ1rf
aJYn+GSionP3OAmChQ7khfXKIjiwVWs90Q1r187Ogj2ZEtcBQRz11B4jCvnpj7Pu
KKfiZxhXumSJCID1hlqqLAOD5hImgpbMSwQXEJuWaNQL2PrKiJBJc0qbe5i8rmWU
sdiAFhhFtdHHOT66/K+pmg==
-----END CERTIFICATE-----
Generated at Sat May 4 02:34:41 2024 by rpki-client on console-fra.rpki-client.org