Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/4/3134382e35392e3136342e302f32332d3332203d3e203532303235.roa
File:                     3134382e35392e3136342e302f32332d3332203d3e203532303235.roa (raw, json)
Hash identifier:          33EVuCel+ndVg6R8c+iiC7YxSEq1nNiGtjhIT9wabq0=
Subject key identifier:   5B:BA:6A:46:5D:4F:D9:2F:41:8B:4A:42:23:38:B3:97:BE:B8:CF:A2
Certificate issuer:       /CN=edff5ee9c6c74e18ab3cd3244d38ecf6acc07c9835684cca08
Certificate serial:       7F5C9D89BA7FD710C71C2555DCB581A841F3D9D7
Authority key identifier: 26:29:24:3C:9E:8D:A7:B1:4D:0A:BD:25:66:0A:74:AC:40:81:C8:8B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c88f518-5118-4680-a0ba-d2cc67b27b07/edff5ee9c6c74e18ab3cd3244d38ecf6acc07c9835684cca08.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/4/3134382e35392e3136342e302f32332d3332203d3e203532303235.roa
Signing time:             Tue 24 Dec 2024 00:43:07 +0000
ROA not before:           Tue 24 Dec 2024 00:38:07 +0000
ROA not after:            Tue 23 Dec 2025 00:43:07 +0000
asID:                     52025
IP address blocks:        148.59.164.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/4/2629243C9E8DA7B14D0ABD25660A74AC4081C88B.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/4/2629243C9E8DA7B14D0ABD25660A74AC4081C88B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c88f518-5118-4680-a0ba-d2cc67b27b07/edff5ee9c6c74e18ab3cd3244d38ecf6acc07c9835684cca08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c88f518-5118-4680-a0ba-d2cc67b27b07/9c88f518-5118-4680-a0ba-d2cc67b27b07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c88f518-5118-4680-a0ba-d2cc67b27b07/9c88f518-5118-4680-a0ba-d2cc67b27b07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c88f518-5118-4680-a0ba-d2cc67b27b07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Feb 2025 01:52:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:5c:9d:89:ba:7f:d7:10:c7:1c:25:55:dc:b5:81:a8:41:f3:d9:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edff5ee9c6c74e18ab3cd3244d38ecf6acc07c9835684cca08
        Validity
            Not Before: Dec 24 00:38:07 2024 GMT
            Not After : Dec 23 00:43:07 2025 GMT
        Subject: CN=5BBA6A465D4FD92F418B4A422338B397BEB8CFA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:a6:7e:16:31:9d:81:cc:eb:cb:94:e8:78:b5:
                    0a:ad:07:11:fb:b9:f8:17:17:94:f1:f4:54:5b:7f:
                    62:98:36:e3:dc:ba:e3:e2:fb:1c:17:bd:cb:f1:f4:
                    c2:55:0f:1f:d0:80:5d:8b:3c:04:9c:df:96:bb:1c:
                    51:2d:ae:0f:a3:46:af:b0:ee:8a:d7:df:9b:d3:a5:
                    f2:75:2c:20:46:a9:41:0f:47:cb:11:a1:75:c0:8c:
                    8b:a9:b6:6b:18:d2:e9:b1:2f:59:af:4d:52:3b:22:
                    3e:d5:20:f9:13:86:62:7e:7a:a1:c2:f2:ec:6c:dc:
                    ea:fd:18:14:af:c0:5b:8a:90:9c:66:c2:8e:78:31:
                    fe:70:99:b9:6e:97:ff:30:17:7b:79:e8:5c:1a:e2:
                    0c:9b:39:57:41:05:6c:a5:e1:a6:f2:8f:88:91:24:
                    78:ad:b9:30:1c:6c:7b:83:7a:5e:be:0c:fc:79:86:
                    9c:7e:26:3e:b4:67:3f:c5:f2:8c:29:3b:ba:c7:76:
                    45:49:ae:78:06:3e:93:4b:77:f5:41:fb:b1:28:6b:
                    c6:48:57:52:e2:a9:f9:d8:d9:7c:d5:48:9b:4c:62:
                    13:87:ec:a2:42:d0:61:ae:fc:fa:cd:d6:e4:cc:06:
                    91:5a:18:08:1f:93:03:92:76:10:2c:dc:b8:23:0f:
                    f9:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:BA:6A:46:5D:4F:D9:2F:41:8B:4A:42:23:38:B3:97:BE:B8:CF:A2
            X509v3 Authority Key Identifier:
                keyid:26:29:24:3C:9E:8D:A7:B1:4D:0A:BD:25:66:0A:74:AC:40:81:C8:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/4/2629243C9E8DA7B14D0ABD25660A74AC4081C88B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c88f518-5118-4680-a0ba-d2cc67b27b07/edff5ee9c6c74e18ab3cd3244d38ecf6acc07c9835684cca08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/4/3134382e35392e3136342e302f32332d3332203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.59.164.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a4:ad:40:a6:6f:86:95:fd:8d:80:b9:4e:92:1d:c8:94:87:98:
         07:2b:72:9c:da:03:5a:85:a4:e3:06:4c:04:03:68:3c:58:d9:
         b8:03:dd:70:96:8f:ce:3d:2c:66:69:99:86:6d:02:9b:46:29:
         40:95:0f:36:28:17:fc:be:cb:4e:d5:24:0f:33:53:31:16:9e:
         85:f4:9f:6d:38:8d:88:2c:cf:75:c8:50:db:53:e7:77:69:ef:
         e0:70:4c:81:24:69:7e:5f:db:4d:84:6b:c6:4a:e2:c3:02:b5:
         8d:fd:5f:c9:b2:4e:0e:23:0d:83:8b:70:e5:c5:2e:f8:69:63:
         93:83:a0:b2:cb:cb:c2:ef:e9:86:bc:a7:72:af:1f:ee:9a:58:
         e2:1f:ea:f1:2c:1c:d5:9f:b8:51:e8:50:85:88:29:53:9d:be:
         3e:a0:02:84:80:5f:c3:c2:92:27:8f:69:1b:16:58:6e:88:e2:
         12:e3:1c:a8:9f:56:99:65:32:2d:07:6b:7a:51:8d:6f:41:fa:
         3a:68:e7:c1:b3:ef:b4:00:4e:d9:f2:92:b1:6b:61:8b:c1:30:
         04:8e:d9:db:6c:32:10:ed:f7:5a:dd:91:45:ab:24:81:14:44:
         bf:a6:04:92:68:77:32:cc:e4:4a:eb:0c:aa:85:cc:fa:ad:91:
         c2:a4:5e:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:56:40 2025 by rpki-client