Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a61653a3a2f34382d3438203d3e203532303235.roa
File:                     326130353a646663343a61653a3a2f34382d3438203d3e203532303235.roa (raw, json)
Hash identifier:          FAXPRg0euFIk7dulA4tomeWkZwWRsoAkeAWV5DmINiQ=
Subject key identifier:   15:71:25:09:9C:EB:59:51:17:BD:40:7D:BB:49:E0:05:CC:CC:49:49
Certificate issuer:       /CN=0AAD221E4070989D4939FACA0F0981AB26E93895
Certificate serial:       1ADFD5CF3C5BC5BB3AFC6363F6AF4198C0E68793
Authority key identifier: 0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a61653a3a2f34382d3438203d3e203532303235.roa
Signing time:             Mon 08 Apr 2024 02:56:05 +0000
ROA not before:           Mon 08 Apr 2024 02:51:05 +0000
ROA not after:            Mon 07 Apr 2025 02:56:05 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:ae::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 19:28:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:df:d5:cf:3c:5b:c5:bb:3a:fc:63:63:f6:af:41:98:c0:e6:87:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AAD221E4070989D4939FACA0F0981AB26E93895
        Validity
            Not Before: Apr  8 02:51:05 2024 GMT
            Not After : Apr  7 02:56:05 2025 GMT
        Subject: CN=157125099CEB595117BD407DBB49E005CCCC4949
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:96:da:af:65:45:9b:a1:f6:94:85:45:2c:ce:
                    f1:e5:38:cb:4d:63:14:8c:d5:9c:4f:3e:7c:3f:48:
                    cd:30:45:ff:17:04:84:95:62:28:e4:ce:d9:9f:9b:
                    4d:cf:1f:0e:18:f0:f5:74:46:81:73:90:83:75:74:
                    9e:92:84:2a:13:c8:5f:25:60:49:43:9e:25:df:bb:
                    1d:b1:6e:b7:dc:88:e6:a5:8f:aa:d8:58:71:6c:cd:
                    0c:51:5b:02:75:0b:aa:9b:ff:23:d5:56:7d:1b:d7:
                    d1:d2:4b:45:26:ea:3b:c9:7e:da:31:44:ed:0e:3a:
                    af:c2:5e:65:4c:3a:67:09:9d:a3:f0:c1:ec:2b:e2:
                    f3:8c:da:39:7f:b0:36:9d:d4:e8:29:ca:9c:98:55:
                    04:02:35:52:7c:36:b3:fb:19:4c:32:0f:49:ca:bf:
                    96:4a:6d:be:b6:b5:64:1a:95:c3:5e:a7:c5:c5:df:
                    bd:a0:06:b6:8c:6b:68:1a:e6:29:06:4c:51:b9:05:
                    6f:7a:90:74:4a:b3:76:db:b1:64:7c:57:c7:2d:56:
                    96:0a:7b:6c:9e:e7:d2:91:8b:64:77:8e:3c:79:59:
                    11:d9:63:ba:dd:84:1a:de:b1:cd:4b:28:2a:a0:f7:
                    34:b3:89:52:6e:f9:71:7e:85:f4:f7:36:ce:53:e2:
                    ea:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:71:25:09:9C:EB:59:51:17:BD:40:7D:BB:49:E0:05:CC:CC:49:49
            X509v3 Authority Key Identifier:
                keyid:0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a61653a3a2f34382d3438203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:ae::/48

    Signature Algorithm: sha256WithRSAEncryption
         a2:62:c3:9e:4f:20:e3:3a:00:5b:c2:21:0c:79:79:0e:b5:7f:
         e5:ed:fa:83:fd:dc:82:1b:b3:5c:05:86:0c:a4:7f:86:57:5a:
         64:30:72:46:77:de:df:3e:64:94:ef:cb:31:c0:2d:15:21:41:
         7c:e9:91:27:cf:f1:f0:36:a9:a4:90:a8:68:d4:d0:98:d5:67:
         5f:bb:bf:39:88:1f:b4:19:ff:69:73:40:7b:53:9f:a1:5a:f2:
         62:ec:fd:9d:f5:6b:11:e0:2a:5b:a3:3a:d5:da:5d:bd:d4:d5:
         85:80:74:53:f7:c8:65:15:53:ae:63:a8:08:a1:cf:c0:24:c8:
         16:95:d5:58:81:27:22:b3:30:6f:ee:ce:84:83:56:31:aa:c2:
         b8:38:d3:ef:c9:17:44:f0:f9:4e:2f:34:c0:af:97:ef:96:0d:
         a1:d4:0a:01:f7:c3:7e:6c:2d:81:4d:4c:7e:16:21:e0:c1:14:
         7a:b2:17:e4:29:98:e6:59:2a:ea:84:df:57:06:54:40:ae:67:
         19:33:4c:af:8b:60:16:d5:f9:95:8d:0b:18:f8:7d:5e:aa:7d:
         a3:61:6a:c9:88:45:54:d7:a1:b2:53:18:8c:cf:0d:28:7f:0f:
         aa:35:a3:81:9b:11:27:15:09:1e:ad:a3:72:f2:ae:86:04:fb:
         62:5c:24:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 03:05:13 2024 by rpki-client on console-ams.rpki-client.org