Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a3739663a3a2f34382d3438203d3e203532303235.roa
File:                     326130353a646663343a3739663a3a2f34382d3438203d3e203532303235.roa (raw, json)
Hash identifier:          XRSKo1hKkcFw2FkB9v5KpBw5ueUICSITHmmBfayLNpY=
Subject key identifier:   20:56:A4:33:9B:C7:E0:8D:94:F9:47:33:B1:1A:42:BB:79:83:D8:BB
Certificate issuer:       /CN=0AAD221E4070989D4939FACA0F0981AB26E93895
Certificate serial:       2BA70EF1A5433D789B89480AEBD2F503764E479A
Authority key identifier: 0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a3739663a3a2f34382d3438203d3e203532303235.roa
Signing time:             Thu 10 Aug 2023 22:48:31 +0000
ROA not before:           Thu 10 Aug 2023 22:43:31 +0000
ROA not after:            Thu 08 Aug 2024 22:48:31 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:79f::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 19:28:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:a7:0e:f1:a5:43:3d:78:9b:89:48:0a:eb:d2:f5:03:76:4e:47:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AAD221E4070989D4939FACA0F0981AB26E93895
        Validity
            Not Before: Aug 10 22:43:31 2023 GMT
            Not After : Aug  8 22:48:31 2024 GMT
        Subject: CN=2056A4339BC7E08D94F94733B11A42BB7983D8BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:9a:59:b0:9b:7c:53:83:a8:a2:40:ae:53:55:
                    82:81:ff:0b:1d:43:dc:4f:98:e4:75:2d:ae:13:5d:
                    ae:c4:7f:dd:1a:44:b3:9e:9a:b6:8d:83:e3:25:a3:
                    98:d4:27:d2:12:9b:e9:23:e8:24:f3:a4:23:7a:0f:
                    e9:c7:4d:bb:67:e6:ab:04:e3:63:4a:84:40:9a:b6:
                    4d:76:2f:21:11:73:6b:90:e4:70:cb:79:6f:b1:d8:
                    d6:1d:de:cd:b5:1d:24:b6:86:7d:2b:3f:57:13:2a:
                    d8:f7:48:55:1a:46:81:08:c8:ea:e3:9f:f5:60:5c:
                    70:d1:05:24:d9:4d:92:ae:6d:dd:ca:9e:03:35:3d:
                    df:ac:a0:ed:ce:83:0b:c7:f0:df:1a:aa:72:e4:e5:
                    73:cc:2f:77:cc:1d:7b:79:cc:eb:35:32:d1:0a:43:
                    83:e9:4e:7e:d7:e0:93:18:27:17:a4:9d:09:fa:3b:
                    9e:f5:04:8b:7c:28:8f:7c:a6:d7:c3:de:a9:d5:1f:
                    b5:d3:ab:e3:2e:e3:b8:2c:ed:c9:4d:30:fd:ff:b0:
                    4d:58:15:52:60:43:44:6a:13:3e:1a:aa:36:6f:b3:
                    2e:25:ca:18:06:4d:23:d5:ee:79:33:56:26:b0:cc:
                    28:99:3d:19:52:c7:35:32:30:1a:2d:fe:57:f8:0c:
                    bf:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:56:A4:33:9B:C7:E0:8D:94:F9:47:33:B1:1A:42:BB:79:83:D8:BB
            X509v3 Authority Key Identifier:
                keyid:0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a3739663a3a2f34382d3438203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:79f::/48

    Signature Algorithm: sha256WithRSAEncryption
         46:82:e7:0f:7b:7f:10:e1:a0:32:59:d0:76:80:76:29:ae:3d:
         0d:7b:4d:2d:64:f2:ff:4d:e8:a5:37:47:50:0d:5d:79:34:53:
         01:5c:c3:4c:7d:c8:55:89:1a:d3:06:d5:f3:40:36:46:1d:3f:
         9c:66:d4:e2:65:20:41:d7:f9:81:59:bd:1b:68:e4:57:44:91:
         84:76:9a:32:16:b8:5f:43:0d:7c:89:f4:b9:50:d1:fb:5c:33:
         1f:61:16:63:51:df:83:bd:6d:7b:90:97:20:d2:f0:09:18:45:
         c0:29:4b:cd:4d:62:07:6b:4a:ea:7b:e6:35:3e:d8:53:db:5d:
         31:21:5f:dc:ac:e3:e6:91:69:9d:88:71:b9:e1:44:60:5f:ab:
         82:a9:1d:31:6f:0a:25:f0:be:b9:b2:f0:a5:65:b6:0f:fa:4a:
         51:67:28:93:ae:3e:10:eb:8f:a2:de:3c:d9:7f:5d:d8:d7:38:
         f2:71:a7:fc:09:f4:52:0b:ed:f0:7a:40:c9:26:fd:d2:cd:91:
         6a:15:ae:37:d1:c4:07:bb:5b:cb:40:23:65:8c:c3:f0:df:80:
         00:1e:84:cf:de:72:55:21:c1:22:34:9c:ee:7a:f5:69:e6:40:
         38:b6:da:11:b3:ae:5f:f6:61:37:54:52:98:10:1e:cf:f5:7c:
         d1:e7:d7:30
-----BEGIN CERTIFICATE-----
MIIFHzCCBAegAwIBAgIUK6cO8aVDPXibiUgK69L1A3ZOR5owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEFBRDIyMUU0MDcwOTg5RDQ5MzlGQUNBMEYwOTgxQUIy
NkU5Mzg5NTAeFw0yMzA4MTAyMjQzMzFaFw0yNDA4MDgyMjQ4MzFaMDMxMTAvBgNV
BAMTKDIwNTZBNDMzOUJDN0UwOEQ5NEY5NDczM0IxMUE0MkJCNzk4M0Q4QkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCmlmwm3xTg6iiQK5TVYKB/wsd
Q9xPmOR1La4TXa7Ef90aRLOemraNg+Mlo5jUJ9ISm+kj6CTzpCN6D+nHTbtn5qsE
42NKhECatk12LyERc2uQ5HDLeW+x2NYd3s21HSS2hn0rP1cTKtj3SFUaRoEIyOrj
n/VgXHDRBSTZTZKubd3KngM1Pd+soO3OgwvH8N8aqnLk5XPML3fMHXt5zOs1MtEK
Q4PpTn7X4JMYJxeknQn6O571BIt8KI98ptfD3qnVH7XTq+Mu47gs7clNMP3/sE1Y
FVJgQ0RqEz4aqjZvsy4lyhgGTSPV7nkzViawzCiZPRlSxzUyMBot/lf4DL/lAgMB
AAGjggIpMIICJTAdBgNVHQ4EFgQUIFakM5vH4I2U+UczsRpCu3mD2LswHwYDVR0j
BBgwFoAUCq0iHkBwmJ1JOfrKDwmBqybpOJUwDgYDVR0PAQH/BAQDAgeAMG4GA1Ud
HwRnMGUwY6BhoF+GXXJzeW5jOi8vcnBraS0wMS5wZHhuZXQudWsvcmVwby9wYXJh
ZG94bmV0d29ya3MvMi8wQUFEMjIxRTQwNzA5ODlENDkzOUZBQ0EwRjA5ODFBQjI2
RTkzODk1LmNybDCBkwYIKwYBBQUHAQEEgYYwgYMwgYAGCCsGAQUFBzAChnRyc3lu
YzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYz
ZTAxODU3NTVjOTFiZTNmOWQvMi8wQUFEMjIxRTQwNzA5ODlENDkzOUZBQ0EwRjA5
ODFBQjI2RTkzODk1LmNlcjCBjgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4Zx
cnN5bmM6Ly9ycGtpLTAxLnBkeG5ldC51ay9yZXBvL3BhcmFkb3huZXR3b3Jrcy8y
LzMyNjEzMDM1M2E2NDY2NjMzNDNhMzczOTY2M2EzYTJmMzQzODJkMzQzODIwM2Qz
ZTIwMzUzMjMwMzIzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggr
BgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF38QHnzANBgkqhkiG9w0BAQsFAAOC
AQEARoLnD3t/EOGgMlnQdoB2Ka49DXtNLWTy/03opTdHUA1deTRTAVzDTH3IVYka
0wbV80A2Rh0/nGbU4mUgQdf5gVm9G2jkV0SRhHaaMha4X0MNfIn0uVDR+1wzH2EW
Y1Hfg71te5CXINLwCRhFwClLzU1iB2tK6nvmNT7YU9tdMSFf3Kzj5pFpnYhxueFE
YF+rgqkdMW8KJfC+ubLwpWW2D/pKUWcok64+EOuPot482X9d2Nc48nGn/An0Ugvt
8HpAySb90s2RahWuN9HEB7tby0AjZYzD8N+AAB6Ez95yVSHBIjSc7nr1aeZAOLba
EbOuX/ZhN1RSmBAez/V80efXMA==
-----END CERTIFICATE-----
Generated at Sat May 4 02:34:41 2024 by rpki-client on console-fra.rpki-client.org