Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/4/32332e3135342e382e302f32342d3332203d3e203532303235.roa
File:                     32332e3135342e382e302f32342d3332203d3e203532303235.roa (raw, json)
Hash identifier:          48LuVfoYaTemOTmYXVlHoU6//ESJdBOQ5aUDkYeSmaA=
Subject key identifier:   B1:FB:C7:2F:BF:CD:2B:75:F4:11:2D:0E:E9:6A:52:76:9C:1C:63:D4
Certificate issuer:       /CN=edff5ee9c6c74e18ab3cd3244d38ecf6acc07c9835684cca08
Certificate serial:       503E6498F2CB3639E905243EE41B53CEC2128D34
Authority key identifier: 26:29:24:3C:9E:8D:A7:B1:4D:0A:BD:25:66:0A:74:AC:40:81:C8:8B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c88f518-5118-4680-a0ba-d2cc67b27b07/edff5ee9c6c74e18ab3cd3244d38ecf6acc07c9835684cca08.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/4/32332e3135342e382e302f32342d3332203d3e203532303235.roa
Signing time:             Tue 26 Nov 2024 05:18:13 +0000
ROA not before:           Tue 26 Nov 2024 05:13:13 +0000
ROA not after:            Tue 25 Nov 2025 05:18:13 +0000
asID:                     52025
IP address blocks:        23.154.8.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/4/2629243C9E8DA7B14D0ABD25660A74AC4081C88B.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/4/2629243C9E8DA7B14D0ABD25660A74AC4081C88B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c88f518-5118-4680-a0ba-d2cc67b27b07/edff5ee9c6c74e18ab3cd3244d38ecf6acc07c9835684cca08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c88f518-5118-4680-a0ba-d2cc67b27b07/9c88f518-5118-4680-a0ba-d2cc67b27b07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c88f518-5118-4680-a0ba-d2cc67b27b07/9c88f518-5118-4680-a0ba-d2cc67b27b07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c88f518-5118-4680-a0ba-d2cc67b27b07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Apr 2025 17:28:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:3e:64:98:f2:cb:36:39:e9:05:24:3e:e4:1b:53:ce:c2:12:8d:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edff5ee9c6c74e18ab3cd3244d38ecf6acc07c9835684cca08
        Validity
            Not Before: Nov 26 05:13:13 2024 GMT
            Not After : Nov 25 05:18:13 2025 GMT
        Subject: CN=B1FBC72FBFCD2B75F4112D0EE96A52769C1C63D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:9e:d3:c5:17:45:13:8f:1a:5e:74:cc:75:39:
                    5a:1b:6f:8f:cb:b9:54:6d:e6:5d:21:11:cf:d6:6c:
                    e7:b7:0b:a4:4b:fb:a8:7a:f0:ee:1d:54:64:ba:fd:
                    6d:fa:c3:1b:d0:91:36:4b:ee:01:1e:2e:22:e0:9f:
                    fd:ee:14:1d:dd:4c:64:af:0c:9e:bc:7b:81:48:87:
                    a1:69:fe:23:69:37:da:c7:00:1d:17:5d:98:9b:ee:
                    48:fb:3c:42:e6:e5:f0:d6:d9:c7:80:0c:b9:dd:43:
                    e4:a0:ce:e1:eb:79:cd:d0:40:4c:dd:83:05:db:5d:
                    d7:86:2e:67:56:f6:26:64:24:16:7d:88:2f:a2:69:
                    2d:d2:ba:44:66:a0:87:60:d9:c1:65:d4:b9:91:01:
                    b0:9f:a8:04:67:30:da:62:7c:b4:91:03:d9:a0:ea:
                    87:a5:5f:ae:d8:18:00:19:97:26:26:ab:dd:f8:9d:
                    37:dc:db:9e:4a:f3:48:4c:79:b6:96:c6:fb:f7:fa:
                    df:af:83:16:a9:eb:19:e0:5f:a7:31:7c:1a:3a:87:
                    7e:63:78:62:21:85:c3:19:ad:c8:68:a5:48:af:5c:
                    64:54:62:f3:1f:3b:4a:ff:11:8d:dd:6c:d0:a2:19:
                    79:e2:17:dc:c7:e0:74:73:f8:9d:b1:c4:a6:28:52:
                    f4:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:FB:C7:2F:BF:CD:2B:75:F4:11:2D:0E:E9:6A:52:76:9C:1C:63:D4
            X509v3 Authority Key Identifier:
                keyid:26:29:24:3C:9E:8D:A7:B1:4D:0A:BD:25:66:0A:74:AC:40:81:C8:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/4/2629243C9E8DA7B14D0ABD25660A74AC4081C88B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c88f518-5118-4680-a0ba-d2cc67b27b07/edff5ee9c6c74e18ab3cd3244d38ecf6acc07c9835684cca08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/4/32332e3135342e382e302f32342d3332203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.154.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:79:1f:16:3a:68:d8:90:ba:a0:1c:c7:4c:64:9a:c5:8c:c1:
         c7:be:54:2c:04:c4:f7:59:83:e8:9a:8d:b2:7f:b2:d4:4e:b0:
         af:e6:45:38:65:1f:e4:15:a6:39:6a:d4:8e:e7:cd:e4:d8:ad:
         58:e6:6d:9b:aa:ef:22:b7:a8:52:e6:41:ee:a8:15:32:12:16:
         eb:5e:c4:3f:db:40:e7:d2:cc:05:5c:eb:6f:e9:7c:c8:eb:74:
         a0:07:1d:3c:c7:b0:bf:c2:db:2b:05:21:51:f2:00:ef:fc:fa:
         5a:07:42:85:00:38:bf:b9:73:e2:74:1e:90:5a:8e:71:6b:85:
         4a:f6:16:10:02:3b:db:0b:53:41:65:c6:47:06:5f:c1:19:2c:
         f0:43:6b:2d:9a:66:51:02:1d:bf:e0:da:d1:22:a2:c3:b7:f1:
         0a:d1:54:b0:7c:43:9a:b1:57:66:07:e6:53:d0:e6:2c:88:4b:
         d9:3b:c0:3b:28:43:ef:21:69:77:53:71:5c:17:cf:e9:e9:d5:
         62:b4:f5:39:8c:30:35:da:70:71:97:6a:ec:63:ba:3e:09:40:
         19:a5:e9:7c:64:fb:be:7d:0d:75:88:41:90:75:9e:c4:55:f0:
         47:6a:08:db:a8:6a:55:12:5f:ed:13:b2:ae:63:ca:e4:9c:3b:
         7b:68:7b:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 07:23:41 2025 by rpki-client