Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a383136663a3a2f34382d3438203d3e203532303235.roa
File:                     326130353a646663343a383136663a3a2f34382d3438203d3e203532303235.roa (raw, json)
Hash identifier:          6QvyruwmpKpN1QvkTsGXBB/nvzBWfGO9k/6UM8HabFE=
Subject key identifier:   36:BA:09:04:4F:9E:AF:F5:5E:6B:A3:CF:59:86:B2:84:54:2F:EC:4F
Certificate issuer:       /CN=0AAD221E4070989D4939FACA0F0981AB26E93895
Certificate serial:       32A015DD2D5080EBC0D15B0DA162BF57F534F6C7
Authority key identifier: 0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a383136663a3a2f34382d3438203d3e203532303235.roa
Signing time:             Thu 23 May 2024 12:49:02 +0000
ROA not before:           Thu 23 May 2024 12:44:02 +0000
ROA not after:            Thu 22 May 2025 12:49:02 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:816f::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 21 Nov 2024 15:27:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:a0:15:dd:2d:50:80:eb:c0:d1:5b:0d:a1:62:bf:57:f5:34:f6:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AAD221E4070989D4939FACA0F0981AB26E93895
        Validity
            Not Before: May 23 12:44:02 2024 GMT
            Not After : May 22 12:49:02 2025 GMT
        Subject: CN=36BA09044F9EAFF55E6BA3CF5986B284542FEC4F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:e2:70:23:43:34:0a:85:3e:99:3a:99:b8:67:
                    d7:93:82:6b:89:94:2f:b9:ac:81:cb:b7:cf:74:40:
                    e2:aa:e7:05:b3:78:17:e3:59:3b:bd:36:ab:69:0f:
                    43:3b:42:fe:0d:44:14:69:ae:8c:94:11:ab:df:00:
                    9b:3e:b4:25:b6:b3:97:da:5d:15:1b:ae:6d:b1:b6:
                    42:a7:64:4c:50:3a:19:e3:4c:7b:a0:d9:a2:4a:3e:
                    1f:10:b7:aa:88:2e:33:10:d4:8b:6c:3d:f2:e1:a0:
                    80:1c:5b:51:1e:fd:af:3b:02:4d:c7:b6:3b:13:5f:
                    65:56:cf:81:da:cf:7a:40:b1:2e:72:7e:63:16:8d:
                    3f:48:15:ba:ef:80:9c:22:22:34:85:f7:b9:a0:81:
                    8f:7d:fe:d0:9f:5f:7c:08:06:f9:84:1b:cf:55:1c:
                    a8:dc:35:7c:15:9c:9c:69:62:d8:e2:44:84:14:d6:
                    fd:f7:c6:6e:6f:fc:56:8c:3f:82:5e:04:56:f4:34:
                    9e:96:b1:99:a1:45:ea:f5:5f:58:91:5f:ea:6d:89:
                    c8:8f:79:f5:96:e9:0c:90:2a:10:a7:6a:54:8b:90:
                    13:74:88:c1:23:fb:2b:a0:95:da:0f:b1:ff:ea:c5:
                    5d:64:67:36:55:2c:81:15:ad:82:92:36:67:87:9b:
                    35:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:BA:09:04:4F:9E:AF:F5:5E:6B:A3:CF:59:86:B2:84:54:2F:EC:4F
            X509v3 Authority Key Identifier:
                keyid:0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a383136663a3a2f34382d3438203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:816f::/48

    Signature Algorithm: sha256WithRSAEncryption
         38:3c:f9:3b:da:3f:77:77:f3:18:be:53:ea:17:65:10:a8:e4:
         66:71:52:6e:08:7a:99:c2:41:b0:ae:43:d6:38:81:d6:38:87:
         24:d9:d4:f2:0c:c7:09:c7:67:29:7b:41:8c:9b:45:ff:51:3a:
         25:45:52:3a:62:b7:db:40:85:04:c1:25:23:a3:e2:45:93:2e:
         e0:de:c4:e9:6c:c8:06:ff:58:6b:3b:a7:d5:d5:e9:f6:7b:08:
         f2:b9:55:4e:a6:8a:78:0f:a9:9f:79:47:e2:4d:2c:0c:ab:ba:
         81:e1:76:51:e1:0b:fe:63:5c:fc:6b:94:f3:49:b4:0a:c0:f9:
         d5:81:6f:d5:b0:e3:66:fe:ad:9c:e6:79:3a:55:2c:d3:cd:1b:
         de:c2:3c:1f:8c:3a:2d:93:2d:c8:1d:ee:94:1f:f2:ec:b9:ee:
         7b:41:79:29:5f:aa:c3:d2:8f:2a:77:81:35:6e:ef:7c:30:6a:
         a9:20:3c:86:65:8e:16:20:eb:44:d1:9b:6f:ab:9a:35:2c:82:
         41:bc:03:bb:bf:cb:07:5c:24:df:36:8c:03:95:3c:a2:05:9d:
         7a:8b:7a:94:f7:d7:2d:8a:21:0a:db:7d:41:24:ca:4a:9b:b3:
         93:f2:11:72:b3:bb:9f:93:04:62:f2:18:69:a5:f0:e2:36:2e:
         de:f5:1b:26
-----BEGIN CERTIFICATE-----
MIIFIjCCBAqgAwIBAgIUMqAV3S1QgOvA0VsNoWK/V/U09scwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEFBRDIyMUU0MDcwOTg5RDQ5MzlGQUNBMEYwOTgxQUIy
NkU5Mzg5NTAeFw0yNDA1MjMxMjQ0MDJaFw0yNTA1MjIxMjQ5MDJaMDMxMTAvBgNV
BAMTKDM2QkEwOTA0NEY5RUFGRjU1RTZCQTNDRjU5ODZCMjg0NTQyRkVDNEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ4nAjQzQKhT6ZOpm4Z9eTgmuJ
lC+5rIHLt890QOKq5wWzeBfjWTu9NqtpD0M7Qv4NRBRproyUEavfAJs+tCW2s5fa
XRUbrm2xtkKnZExQOhnjTHug2aJKPh8Qt6qILjMQ1ItsPfLhoIAcW1Ee/a87Ak3H
tjsTX2VWz4Haz3pAsS5yfmMWjT9IFbrvgJwiIjSF97mggY99/tCfX3wIBvmEG89V
HKjcNXwVnJxpYtjiRIQU1v33xm5v/FaMP4JeBFb0NJ6WsZmhRer1X1iRX+pticiP
efWW6QyQKhCnalSLkBN0iMEj+yugldoPsf/qxV1kZzZVLIEVrYKSNmeHmzW1AgMB
AAGjggIsMIICKDAdBgNVHQ4EFgQUNroJBE+er/Vea6PPWYayhFQv7E8wHwYDVR0j
BBgwFoAUCq0iHkBwmJ1JOfrKDwmBqybpOJUwDgYDVR0PAQH/BAQDAgeAMG4GA1Ud
HwRnMGUwY6BhoF+GXXJzeW5jOi8vcnBraS0wMS5wZHhuZXQudWsvcmVwby9wYXJh
ZG94bmV0d29ya3MvMi8wQUFEMjIxRTQwNzA5ODlENDkzOUZBQ0EwRjA5ODFBQjI2
RTkzODk1LmNybDCBkwYIKwYBBQUHAQEEgYYwgYMwgYAGCCsGAQUFBzAChnRyc3lu
YzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYz
ZTAxODU3NTVjOTFiZTNmOWQvMi8wQUFEMjIxRTQwNzA5ODlENDkzOUZBQ0EwRjA5
ODFBQjI2RTkzODk1LmNlcjCBkQYIKwYBBQUHAQsEgYQwgYEwfwYIKwYBBQUHMAuG
c3JzeW5jOi8vcnBraS0wMS5wZHhuZXQudWsvcmVwby9wYXJhZG94bmV0d29ya3Mv
Mi8zMjYxMzAzNTNhNjQ2NjYzMzQzYTM4MzEzNjY2M2EzYTJmMzQzODJkMzQzODIw
M2QzZTIwMzUzMjMwMzIzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF38SBbzANBgkqhkiG9w0BAQsF
AAOCAQEAODz5O9o/d3fzGL5T6hdlEKjkZnFSbgh6mcJBsK5D1jiB1jiHJNnU8gzH
CcdnKXtBjJtF/1E6JUVSOmK320CFBMElI6PiRZMu4N7E6WzIBv9Yazun1dXp9nsI
8rlVTqaKeA+pn3lH4k0sDKu6geF2UeEL/mNc/GuU80m0CsD51YFv1bDjZv6tnOZ5
OlUs080b3sI8H4w6LZMtyB3ulB/y7Lnue0F5KV+qw9KPKneBNW7vfDBqqSA8hmWO
FiDrRNGbb6uaNSyCQbwDu7/LB1wk3zaMA5U8ogWdeot6lPfXLYohCtt9QSTKSpuz
k/IRcrO7n5MEYvIYaaXw4jYu3vUbJg==
-----END CERTIFICATE-----
Generated at Wed Nov 20 20:04:46 2024 by rpki-client on console-fra.rpki-client.org