Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a63343a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a63343a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          7P32XXVj+B6hyT7Ndpb8ryYjvqFwRKaiSD4ue7EgdAE=
Subject key identifier:   D5:49:C3:BB:F4:AC:1C:D0:FC:1F:36:28:87:63:1E:CB:84:8F:CC:C1
Certificate issuer:       /CN=0AAD221E4070989D4939FACA0F0981AB26E93895
Certificate serial:       1BE800FB23F64004D6AB4398A135C495A34567D5
Authority key identifier: 0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a63343a3a2f34382d313238203d3e203532303235.roa
Signing time:             Thu 23 May 2024 12:57:46 +0000
ROA not before:           Thu 23 May 2024 12:52:46 +0000
ROA not after:            Thu 22 May 2025 12:57:46 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:c4::/48 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 21 Nov 2024 15:27:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:e8:00:fb:23:f6:40:04:d6:ab:43:98:a1:35:c4:95:a3:45:67:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AAD221E4070989D4939FACA0F0981AB26E93895
        Validity
            Not Before: May 23 12:52:46 2024 GMT
            Not After : May 22 12:57:46 2025 GMT
        Subject: CN=D549C3BBF4AC1CD0FC1F362887631ECB848FCCC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ae:33:b7:1b:72:ee:ab:47:11:40:ac:47:e8:
                    3a:9c:60:d5:4a:65:91:ef:c2:7f:db:de:17:6d:bd:
                    3d:bd:cf:d9:24:ae:4d:7d:fe:27:0b:d7:2e:ca:7e:
                    2c:9b:8a:96:67:c3:62:dc:48:90:3c:ad:59:c2:b9:
                    c8:68:df:99:49:37:84:36:84:89:fa:6d:d7:57:5b:
                    25:62:8e:bc:45:c2:58:f7:d9:88:27:30:9f:fe:8c:
                    6e:83:8c:4f:c8:9f:22:57:71:93:5f:c3:01:2c:a2:
                    c7:40:0c:7a:34:df:f2:64:e7:bf:c1:61:ca:77:cc:
                    a3:71:71:1b:29:7e:30:c3:49:c1:d5:f2:0a:d4:c3:
                    18:af:51:e2:d0:70:e2:d5:36:2c:ac:c5:33:8c:ff:
                    42:95:ab:1e:80:89:9b:82:3e:35:66:01:25:f7:b8:
                    82:df:e9:8c:5f:4b:2f:d2:1b:f4:13:3b:be:53:31:
                    99:94:b0:8b:1d:ef:c4:1d:d7:e1:0b:65:18:f3:d4:
                    74:3b:4f:96:58:9e:6f:5d:be:db:8f:50:0a:bc:06:
                    98:0a:0a:d2:f9:1b:40:d5:f7:d9:9c:b2:31:d5:fa:
                    35:4a:ea:db:be:8f:86:43:85:c0:53:46:ea:27:28:
                    ac:8a:0c:04:aa:ba:f7:de:94:fc:1e:0e:85:dd:f1:
                    eb:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:49:C3:BB:F4:AC:1C:D0:FC:1F:36:28:87:63:1E:CB:84:8F:CC:C1
            X509v3 Authority Key Identifier:
                keyid:0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a63343a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:c4::/48

    Signature Algorithm: sha256WithRSAEncryption
         62:db:a2:6b:b2:0e:3a:f4:00:0c:82:2a:be:4c:ad:d8:9b:e4:
         33:fc:9b:68:a6:7d:c8:cb:9a:d1:0c:47:3a:3f:dd:33:bd:d7:
         d7:d3:aa:45:2b:32:b3:e4:42:cd:6e:96:ae:66:1a:8e:43:01:
         e1:85:5f:20:49:1f:c6:94:d9:d6:e2:39:d5:7b:d5:1f:a8:74:
         2c:b2:26:9e:74:f0:1f:40:c2:0f:66:26:22:fc:4f:63:8c:d1:
         9d:07:91:3e:bc:52:22:59:d6:ac:04:a0:90:7f:4a:ef:7d:53:
         13:a4:21:0f:59:66:bc:60:8b:71:d5:8e:b2:03:fe:c4:20:dc:
         c9:d1:00:03:0b:f4:00:96:76:d8:d8:06:50:aa:10:d8:1c:c2:
         94:49:1a:9c:1e:d7:32:70:fc:4c:54:72:ae:ee:6a:f3:92:28:
         85:be:d0:2b:55:8e:24:f3:0f:cb:60:b6:32:33:a0:10:15:77:
         b0:73:c0:26:4f:3f:ca:2a:72:ba:fc:ee:8b:93:1b:fc:d9:2e:
         c9:76:bc:33:06:25:48:f4:21:24:ca:10:bc:eb:e7:b8:74:64:
         fa:4b:6e:bf:24:97:01:84:e6:cc:77:85:e3:fa:8d:6a:48:2c:
         9a:62:ba:05:d3:e7:22:e4:5b:51:ae:25:ad:45:c2:0d:8b:c5:
         16:7d:61:87
-----BEGIN CERTIFICATE-----
MIIFHzCCBAegAwIBAgIUG+gA+yP2QATWq0OYoTXElaNFZ9UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEFBRDIyMUU0MDcwOTg5RDQ5MzlGQUNBMEYwOTgxQUIy
NkU5Mzg5NTAeFw0yNDA1MjMxMjUyNDZaFw0yNTA1MjIxMjU3NDZaMDMxMTAvBgNV
BAMTKEQ1NDlDM0JCRjRBQzFDRDBGQzFGMzYyODg3NjMxRUNCODQ4RkNDQzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrrjO3G3Luq0cRQKxH6DqcYNVK
ZZHvwn/b3hdtvT29z9kkrk19/icL1y7KfiybipZnw2LcSJA8rVnCucho35lJN4Q2
hIn6bddXWyVijrxFwlj32YgnMJ/+jG6DjE/InyJXcZNfwwEsosdADHo03/Jk57/B
Ycp3zKNxcRspfjDDScHV8grUwxivUeLQcOLVNiysxTOM/0KVqx6AiZuCPjVmASX3
uILf6YxfSy/SG/QTO75TMZmUsIsd78Qd1+ELZRjz1HQ7T5ZYnm9dvtuPUAq8BpgK
CtL5G0DV99mcsjHV+jVK6tu+j4ZDhcBTRuonKKyKDASquvfelPweDoXd8euJAgMB
AAGjggIpMIICJTAdBgNVHQ4EFgQU1UnDu/SsHND8HzYoh2Mey4SPzMEwHwYDVR0j
BBgwFoAUCq0iHkBwmJ1JOfrKDwmBqybpOJUwDgYDVR0PAQH/BAQDAgeAMG4GA1Ud
HwRnMGUwY6BhoF+GXXJzeW5jOi8vcnBraS0wMS5wZHhuZXQudWsvcmVwby9wYXJh
ZG94bmV0d29ya3MvMi8wQUFEMjIxRTQwNzA5ODlENDkzOUZBQ0EwRjA5ODFBQjI2
RTkzODk1LmNybDCBkwYIKwYBBQUHAQEEgYYwgYMwgYAGCCsGAQUFBzAChnRyc3lu
YzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYz
ZTAxODU3NTVjOTFiZTNmOWQvMi8wQUFEMjIxRTQwNzA5ODlENDkzOUZBQ0EwRjA5
ODFBQjI2RTkzODk1LmNlcjCBjgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4Zx
cnN5bmM6Ly9ycGtpLTAxLnBkeG5ldC51ay9yZXBvL3BhcmFkb3huZXR3b3Jrcy8y
LzMyNjEzMDM1M2E2NDY2NjMzNDNhNjMzNDNhM2EyZjM0MzgyZDMxMzIzODIwM2Qz
ZTIwMzUzMjMwMzIzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggr
BgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF38QAxDANBgkqhkiG9w0BAQsFAAOC
AQEAYtuia7IOOvQADIIqvkyt2JvkM/ybaKZ9yMua0QxHOj/dM73X19OqRSsys+RC
zW6WrmYajkMB4YVfIEkfxpTZ1uI51XvVH6h0LLImnnTwH0DCD2YmIvxPY4zRnQeR
PrxSIlnWrASgkH9K731TE6QhD1lmvGCLcdWOsgP+xCDcydEAAwv0AJZ22NgGUKoQ
2BzClEkanB7XMnD8TFRyru5q85Iohb7QK1WOJPMPy2C2MjOgEBV3sHPAJk8/yipy
uvzui5Mb/NkuyXa8MwYlSPQhJMoQvOvnuHRk+ktuvySXAYTmzHeF4/qNakgsmmK6
BdPnIuRbUa4lrUXCDYvFFn1hhw==
-----END CERTIFICATE-----
Generated at Wed Nov 20 20:04:46 2024 by rpki-client on console-fra.rpki-client.org