Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a3831363a3a2f34382d3438203d3e203532303235.roa
File:                     326130353a646663343a3831363a3a2f34382d3438203d3e203532303235.roa (raw, json)
Hash identifier:          mOjJkw/iiQ1Cky59oBtcelLtgGHwSA6+okmOdsqWCCI=
Subject key identifier:   DE:8A:ED:25:BC:9E:16:E1:9D:EB:55:47:83:E2:13:29:15:7F:89:2F
Certificate issuer:       /CN=0AAD221E4070989D4939FACA0F0981AB26E93895
Certificate serial:       1AACB62FED53C5734A245957668D07E1F331AC
Authority key identifier: 0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a3831363a3a2f34382d3438203d3e203532303235.roa
Signing time:             Sun 08 Oct 2023 02:59:11 +0000
ROA not before:           Sun 08 Oct 2023 02:54:11 +0000
ROA not after:            Sun 06 Oct 2024 02:59:11 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:816::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 19:28:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:ac:b6:2f:ed:53:c5:73:4a:24:59:57:66:8d:07:e1:f3:31:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AAD221E4070989D4939FACA0F0981AB26E93895
        Validity
            Not Before: Oct  8 02:54:11 2023 GMT
            Not After : Oct  6 02:59:11 2024 GMT
        Subject: CN=DE8AED25BC9E16E19DEB554783E21329157F892F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:6a:c4:17:7f:a8:41:ed:cf:c4:d6:f8:ab:7e:
                    0e:bb:5c:b2:a5:45:af:88:b6:7b:93:ea:4f:25:7e:
                    92:e7:41:23:9d:81:22:0e:57:a2:c3:9c:cf:6d:24:
                    ba:ad:2f:e9:cb:79:c9:f4:8a:21:35:f0:78:95:9d:
                    54:6b:cd:07:9b:e6:f1:3d:ed:30:fd:8f:c0:3e:3e:
                    65:d5:ce:74:5c:3b:d9:4f:13:73:de:bc:18:5f:f5:
                    58:6c:cd:86:bf:4e:14:28:90:df:d4:bf:74:cf:14:
                    e1:bc:c3:63:fa:dd:0f:53:79:08:f2:95:48:d7:d3:
                    78:42:df:66:71:87:e4:4c:fe:8d:d2:aa:a2:c1:88:
                    70:54:16:64:76:4d:0a:3d:26:ca:8b:d8:11:79:b7:
                    e3:1c:e6:12:d1:4d:d9:13:79:1b:f4:b5:9f:62:03:
                    32:ef:f9:ed:88:37:6f:9a:08:22:a9:c9:65:ac:16:
                    dd:57:35:bd:62:5d:b5:07:ae:99:21:8b:31:ae:ee:
                    e1:33:8b:93:24:90:d4:e0:7e:33:3f:6a:02:26:51:
                    ac:d4:4f:a6:4a:4a:f3:7c:82:c7:7c:77:91:75:6c:
                    bb:40:3b:77:b1:83:46:cb:70:2e:95:9d:08:55:a1:
                    b0:aa:59:ea:84:66:70:52:d9:1f:c4:29:a9:f1:94:
                    de:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:8A:ED:25:BC:9E:16:E1:9D:EB:55:47:83:E2:13:29:15:7F:89:2F
            X509v3 Authority Key Identifier:
                keyid:0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a3831363a3a2f34382d3438203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:816::/48

    Signature Algorithm: sha256WithRSAEncryption
         92:23:20:c0:11:f9:9e:5b:c7:ea:38:02:21:cb:d7:1d:fb:c6:
         b9:c7:dc:6e:ac:71:8a:df:7d:f6:65:f1:5d:8e:45:28:3e:4a:
         cd:b0:cc:a3:fb:06:6b:54:b8:e7:53:94:b6:a6:46:8d:98:48:
         2f:05:44:1f:91:0f:d4:fe:f9:d8:62:97:b3:6d:67:15:5a:0d:
         3c:0f:fe:e4:d6:43:4e:8c:cd:26:f0:2b:09:66:2a:8d:35:81:
         b3:e2:fc:7c:c1:a0:08:70:81:47:6a:08:8c:c7:e3:e6:3b:74:
         1a:c0:86:ed:da:d9:27:9b:e2:b0:dc:68:ae:3f:d8:88:77:b6:
         42:e4:41:c4:bf:2c:55:79:f1:7b:0f:c5:2b:7f:9c:f2:ce:c9:
         eb:a3:74:d4:0e:7a:57:93:0c:3e:cb:58:8e:8f:48:9d:6e:65:
         05:1c:d4:eb:31:c4:53:96:28:aa:e2:d6:43:45:2c:1a:8d:23:
         2f:79:ea:fa:d3:57:39:35:44:7c:5c:f2:8b:cb:17:10:41:19:
         74:81:36:d1:54:c2:01:eb:0d:a4:aa:87:74:f1:33:e3:ea:c2:
         3b:26:31:6f:85:d8:c8:cb:9e:a1:23:e3:da:54:23:e3:59:c2:
         bd:13:3a:00:47:f9:77:14:ac:3f:75:95:3f:3a:22:3f:a1:43:
         cb:de:af:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 03:05:13 2024 by rpki-client on console-ams.rpki-client.org