Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/4/32332e3135342e382e302f32342d3332203d3e203532303235.roa
File:                     32332e3135342e382e302f32342d3332203d3e203532303235.roa (raw, json)
Hash identifier:          enQLz0+fhUcXXQDo2fRHQFG7zGa+8zigeI324sFLsDE=
Subject key identifier:   F2:CE:E9:B6:89:D4:BD:BC:E5:F8:1D:E8:53:AE:C4:E7:FE:62:15:02
Certificate issuer:       /CN=edff5ee9c6c74e18ab3cd3244d38ecf6acc07c9835684cca08
Certificate serial:       05E90E6513D4FA55F006D4AA8C22E1B90AFC6280
Authority key identifier: 26:29:24:3C:9E:8D:A7:B1:4D:0A:BD:25:66:0A:74:AC:40:81:C8:8B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c88f518-5118-4680-a0ba-d2cc67b27b07/edff5ee9c6c74e18ab3cd3244d38ecf6acc07c9835684cca08.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/4/32332e3135342e382e302f32342d3332203d3e203532303235.roa
Signing time:             Tue 26 Dec 2023 04:23:21 +0000
ROA not before:           Tue 26 Dec 2023 04:18:21 +0000
ROA not after:            Tue 24 Dec 2024 04:23:21 +0000
asID:                     52025
IP address blocks:        23.154.8.0/24 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/4/2629243C9E8DA7B14D0ABD25660A74AC4081C88B.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/4/2629243C9E8DA7B14D0ABD25660A74AC4081C88B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c88f518-5118-4680-a0ba-d2cc67b27b07/edff5ee9c6c74e18ab3cd3244d38ecf6acc07c9835684cca08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c88f518-5118-4680-a0ba-d2cc67b27b07/9c88f518-5118-4680-a0ba-d2cc67b27b07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c88f518-5118-4680-a0ba-d2cc67b27b07/9c88f518-5118-4680-a0ba-d2cc67b27b07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c88f518-5118-4680-a0ba-d2cc67b27b07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 00:24:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:e9:0e:65:13:d4:fa:55:f0:06:d4:aa:8c:22:e1:b9:0a:fc:62:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edff5ee9c6c74e18ab3cd3244d38ecf6acc07c9835684cca08
        Validity
            Not Before: Dec 26 04:18:21 2023 GMT
            Not After : Dec 24 04:23:21 2024 GMT
        Subject: CN=F2CEE9B689D4BDBCE5F81DE853AEC4E7FE621502
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:fa:ff:89:32:2e:8d:e9:1a:d2:9b:f3:32:f5:
                    73:da:6f:3c:3b:c9:c5:9c:98:b8:26:5a:d3:8b:85:
                    4c:d9:4b:f1:44:d3:aa:ee:96:b8:52:92:76:df:ac:
                    bf:f5:c4:64:2e:67:c1:e9:b8:b8:fb:79:3b:72:16:
                    04:8e:eb:6e:ab:e2:ed:5b:f5:ca:8f:51:a6:f2:d9:
                    6e:7c:2f:f1:fc:95:01:46:45:90:0f:65:bf:81:c4:
                    dc:36:13:c8:99:d6:2e:28:95:b5:e9:34:13:ef:f3:
                    9c:14:f4:be:6d:7a:21:72:4e:6d:7d:af:1d:5b:0f:
                    02:8b:99:6c:d3:ed:a3:6b:6f:90:87:07:f0:9c:8f:
                    fc:94:6f:11:5e:c0:1c:03:d8:a9:b9:24:18:9a:80:
                    7f:db:64:91:57:bc:32:ad:91:f6:7a:d2:4c:81:46:
                    14:9f:61:06:d1:a3:91:36:f3:1c:7a:b6:e2:1d:40:
                    c0:05:b8:28:bc:f1:14:49:6b:f4:a3:c8:f9:99:db:
                    4c:2b:4a:60:50:67:c2:8a:ec:e9:6d:22:0a:be:e3:
                    a1:b6:b3:3d:96:48:14:90:fc:30:e9:75:06:eb:39:
                    4a:80:4d:57:c3:31:16:37:48:15:b1:58:65:92:4f:
                    d5:9b:4c:a6:3c:5d:aa:dc:33:99:06:b1:a6:44:3d:
                    b0:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:CE:E9:B6:89:D4:BD:BC:E5:F8:1D:E8:53:AE:C4:E7:FE:62:15:02
            X509v3 Authority Key Identifier:
                keyid:26:29:24:3C:9E:8D:A7:B1:4D:0A:BD:25:66:0A:74:AC:40:81:C8:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/4/2629243C9E8DA7B14D0ABD25660A74AC4081C88B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c88f518-5118-4680-a0ba-d2cc67b27b07/edff5ee9c6c74e18ab3cd3244d38ecf6acc07c9835684cca08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/4/32332e3135342e382e302f32342d3332203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.154.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:7f:30:60:11:55:8f:59:0a:44:e4:72:01:26:44:76:a1:d3:
         c5:92:fd:fd:25:79:91:68:e1:07:f7:2b:5c:4c:80:43:df:57:
         9a:65:1b:e4:99:86:c0:08:8d:16:f6:03:9c:97:c6:59:8d:29:
         2b:8f:49:b9:12:f3:5d:98:95:7b:84:59:24:3f:f4:d0:ca:fa:
         7c:7d:dd:51:60:16:75:14:a9:cc:25:9b:5b:2f:1f:3a:c7:4e:
         2f:9a:ae:07:93:b3:d5:d8:50:5a:56:c7:83:cb:67:d7:41:9e:
         df:e3:b7:cb:3a:2b:0e:bc:77:04:ad:76:83:58:d6:1d:9c:0c:
         b3:a9:53:ff:6f:8e:d7:04:a6:9e:2a:88:7f:9a:6a:ec:67:8b:
         43:88:e7:09:13:a7:ac:50:be:56:24:fd:d0:10:df:a9:fe:a2:
         dc:16:b4:fa:39:5b:db:31:f8:77:d4:b1:a5:b4:b7:e5:0a:c1:
         df:02:4a:60:66:85:86:33:60:17:dd:0f:9b:1e:9f:ca:a6:26:
         90:2f:6d:cd:19:b1:13:ce:33:ce:21:c7:8b:c2:48:61:30:b7:
         0c:c7:72:cf:b2:6f:e0:a8:55:9a:af:33:1e:41:2a:31:26:16:
         d0:41:49:87:f6:93:2a:65:4b:35:57:8c:5c:6f:11:c1:58:3c:
         24:41:c2:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 23:10:20 2024 by rpki-client on console-fra.rpki-client.org