Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a6631313a3a2f34382d3438203d3e203532303235.roa
File:                     326130353a646663343a6631313a3a2f34382d3438203d3e203532303235.roa (raw, json)
Hash identifier:          ytvmrxGh9Tm2Q/AnLvYqcipkIdsjbzxF9f8RfqGxu5E=
Subject key identifier:   CC:6A:8D:28:38:8E:80:06:4E:14:BA:00:DC:8D:8F:F3:FE:88:D9:80
Certificate issuer:       /CN=0AAD221E4070989D4939FACA0F0981AB26E93895
Certificate serial:       5C40BE16F406DF499A19E29EF5F185FE057EE211
Authority key identifier: 0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a6631313a3a2f34382d3438203d3e203532303235.roa
Signing time:             Tue 15 Aug 2023 03:23:20 +0000
ROA not before:           Tue 15 Aug 2023 03:18:20 +0000
ROA not after:            Tue 13 Aug 2024 03:23:20 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:f11::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 19:28:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:40:be:16:f4:06:df:49:9a:19:e2:9e:f5:f1:85:fe:05:7e:e2:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AAD221E4070989D4939FACA0F0981AB26E93895
        Validity
            Not Before: Aug 15 03:18:20 2023 GMT
            Not After : Aug 13 03:23:20 2024 GMT
        Subject: CN=CC6A8D28388E80064E14BA00DC8D8FF3FE88D980
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:16:f9:90:ff:bd:79:3c:05:e0:b7:56:72:a1:
                    7f:d5:d6:f2:f8:75:81:ff:cf:1a:44:71:b0:4e:ca:
                    60:7c:78:fb:df:7f:02:42:44:9b:0f:0d:68:23:ac:
                    c6:c7:9b:f6:b3:33:05:25:c0:6c:79:df:44:ee:22:
                    fe:cc:a1:31:8d:0b:75:50:b7:76:2b:dd:d0:58:e2:
                    05:d4:5e:01:8c:2a:db:f2:9a:6a:6d:71:de:22:cb:
                    60:64:0a:c9:86:bc:da:0a:f5:fe:80:6a:2c:80:d3:
                    74:cf:05:6c:51:65:8f:07:85:13:90:b0:48:5b:72:
                    c5:89:3f:11:5f:e0:d5:bb:5b:19:15:33:ee:ef:b2:
                    0a:18:e2:b9:9f:a2:c8:8a:d6:f5:71:f3:8b:ea:c3:
                    a6:48:67:60:7f:1d:7e:ac:2f:b3:4a:03:40:59:6c:
                    cd:29:d1:d3:ab:60:6e:49:16:d9:52:57:20:4b:33:
                    35:59:7a:6a:59:51:e6:95:53:f7:56:03:91:49:92:
                    63:54:4c:12:a0:2b:32:a8:91:23:5f:20:4a:ac:16:
                    d2:de:aa:82:1f:4a:1d:5e:8d:d9:c0:b8:d5:01:3d:
                    15:2a:69:e1:74:2e:35:b7:3d:20:9b:62:e6:16:2c:
                    d4:21:ba:a7:66:6d:6a:e1:5b:f5:39:5e:34:16:8a:
                    11:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:6A:8D:28:38:8E:80:06:4E:14:BA:00:DC:8D:8F:F3:FE:88:D9:80
            X509v3 Authority Key Identifier:
                keyid:0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a6631313a3a2f34382d3438203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:f11::/48

    Signature Algorithm: sha256WithRSAEncryption
         c1:e2:69:0f:6e:a8:c2:33:86:cc:bc:2c:c5:a1:f7:24:d2:08:
         31:d3:c0:d5:5a:a6:ab:98:f8:5b:e0:4c:e1:97:f8:ca:82:4f:
         4f:09:b6:99:c7:be:82:50:7c:5a:0c:14:d2:0b:02:99:ae:88:
         ab:53:8c:51:5d:5e:94:75:ed:84:6a:0b:04:3e:c9:e9:99:32:
         8c:a7:a0:c1:7b:a2:a3:13:de:c2:88:be:5d:f5:9f:01:9a:4b:
         31:09:fb:f7:46:e3:09:b9:e1:4b:fe:49:4a:9b:37:0e:6b:05:
         b5:77:52:7e:42:70:68:ca:43:3a:30:80:61:20:87:0c:03:c1:
         65:ff:31:5c:d0:9f:9e:c8:17:01:c4:fe:66:a1:7b:61:20:86:
         44:3d:f8:f7:6e:a2:04:04:60:b8:b5:a1:87:7a:ef:8e:ba:c8:
         d7:00:e6:a3:01:a1:45:61:e4:24:c8:22:47:16:fd:c2:d3:66:
         fb:2e:f5:a5:14:17:1c:5d:2e:f4:97:ac:57:ed:60:45:ae:55:
         06:ff:b4:73:94:32:86:37:7c:7d:25:09:51:84:2a:8d:18:eb:
         5f:13:e5:5d:ec:33:75:8a:88:5d:0a:07:8e:a7:47:0d:e0:78:
         c6:2a:0f:c0:21:3b:87:18:88:ed:40:cc:7b:c9:f7:ac:7d:44:
         c3:ac:3d:44
-----BEGIN CERTIFICATE-----
MIIFHzCCBAegAwIBAgIUXEC+FvQG30maGeKe9fGF/gV+4hEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEFBRDIyMUU0MDcwOTg5RDQ5MzlGQUNBMEYwOTgxQUIy
NkU5Mzg5NTAeFw0yMzA4MTUwMzE4MjBaFw0yNDA4MTMwMzIzMjBaMDMxMTAvBgNV
BAMTKENDNkE4RDI4Mzg4RTgwMDY0RTE0QkEwMERDOEQ4RkYzRkU4OEQ5ODAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsFvmQ/715PAXgt1ZyoX/V1vL4
dYH/zxpEcbBOymB8ePvffwJCRJsPDWgjrMbHm/azMwUlwGx530TuIv7MoTGNC3VQ
t3Yr3dBY4gXUXgGMKtvymmptcd4iy2BkCsmGvNoK9f6AaiyA03TPBWxRZY8HhROQ
sEhbcsWJPxFf4NW7WxkVM+7vsgoY4rmfosiK1vVx84vqw6ZIZ2B/HX6sL7NKA0BZ
bM0p0dOrYG5JFtlSVyBLMzVZempZUeaVU/dWA5FJkmNUTBKgKzKokSNfIEqsFtLe
qoIfSh1ejdnAuNUBPRUqaeF0LjW3PSCbYuYWLNQhuqdmbWrhW/U5XjQWihHvAgMB
AAGjggIpMIICJTAdBgNVHQ4EFgQUzGqNKDiOgAZOFLoA3I2P8/6I2YAwHwYDVR0j
BBgwFoAUCq0iHkBwmJ1JOfrKDwmBqybpOJUwDgYDVR0PAQH/BAQDAgeAMG4GA1Ud
HwRnMGUwY6BhoF+GXXJzeW5jOi8vcnBraS0wMS5wZHhuZXQudWsvcmVwby9wYXJh
ZG94bmV0d29ya3MvMi8wQUFEMjIxRTQwNzA5ODlENDkzOUZBQ0EwRjA5ODFBQjI2
RTkzODk1LmNybDCBkwYIKwYBBQUHAQEEgYYwgYMwgYAGCCsGAQUFBzAChnRyc3lu
YzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYz
ZTAxODU3NTVjOTFiZTNmOWQvMi8wQUFEMjIxRTQwNzA5ODlENDkzOUZBQ0EwRjA5
ODFBQjI2RTkzODk1LmNlcjCBjgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4Zx
cnN5bmM6Ly9ycGtpLTAxLnBkeG5ldC51ay9yZXBvL3BhcmFkb3huZXR3b3Jrcy8y
LzMyNjEzMDM1M2E2NDY2NjMzNDNhNjYzMTMxM2EzYTJmMzQzODJkMzQzODIwM2Qz
ZTIwMzUzMjMwMzIzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggr
BgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF38QPETANBgkqhkiG9w0BAQsFAAOC
AQEAweJpD26owjOGzLwsxaH3JNIIMdPA1Vqmq5j4W+BM4Zf4yoJPTwm2mce+glB8
WgwU0gsCma6Iq1OMUV1elHXthGoLBD7J6ZkyjKegwXuioxPewoi+XfWfAZpLMQn7
90bjCbnhS/5JSps3DmsFtXdSfkJwaMpDOjCAYSCHDAPBZf8xXNCfnsgXAcT+ZqF7
YSCGRD34926iBARguLWhh3rvjrrI1wDmowGhRWHkJMgiRxb9wtNm+y71pRQXHF0u
9JesV+1gRa5VBv+0c5Qyhjd8fSUJUYQqjRjrXxPlXewzdYqIXQoHjqdHDeB4xioP
wCE7hxiI7UDMe8n3rH1Ew6w9RA==
-----END CERTIFICATE-----
Generated at Sat May 4 03:05:14 2024 by rpki-client on console-ams.rpki-client.org