Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/4/32332e3135342e392e302f32342d3332203d3e203532303235.roa
File:                     32332e3135342e392e302f32342d3332203d3e203532303235.roa (raw, json)
Hash identifier:          06SarQgXEHJoXwfqSyeIit+m2U9/pLrl6om9ZRP+UpQ=
Subject key identifier:   9D:F6:73:95:25:23:39:73:AA:19:D3:2D:BB:9C:58:ED:F3:DD:26:70
Certificate issuer:       /CN=edff5ee9c6c74e18ab3cd3244d38ecf6acc07c9835684cca08
Certificate serial:       6DA5524700135D8435089AACDDAEA249FC81EC46
Authority key identifier: 26:29:24:3C:9E:8D:A7:B1:4D:0A:BD:25:66:0A:74:AC:40:81:C8:8B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c88f518-5118-4680-a0ba-d2cc67b27b07/edff5ee9c6c74e18ab3cd3244d38ecf6acc07c9835684cca08.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/4/32332e3135342e392e302f32342d3332203d3e203532303235.roa
Signing time:             Thu 18 Apr 2024 21:08:34 +0000
ROA not before:           Thu 18 Apr 2024 21:03:34 +0000
ROA not after:            Thu 17 Apr 2025 21:08:34 +0000
asID:                     52025
IP address blocks:        23.154.9.0/24 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/4/2629243C9E8DA7B14D0ABD25660A74AC4081C88B.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/4/2629243C9E8DA7B14D0ABD25660A74AC4081C88B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c88f518-5118-4680-a0ba-d2cc67b27b07/edff5ee9c6c74e18ab3cd3244d38ecf6acc07c9835684cca08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c88f518-5118-4680-a0ba-d2cc67b27b07/9c88f518-5118-4680-a0ba-d2cc67b27b07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c88f518-5118-4680-a0ba-d2cc67b27b07/9c88f518-5118-4680-a0ba-d2cc67b27b07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c88f518-5118-4680-a0ba-d2cc67b27b07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Nov 2024 04:36:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:a5:52:47:00:13:5d:84:35:08:9a:ac:dd:ae:a2:49:fc:81:ec:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edff5ee9c6c74e18ab3cd3244d38ecf6acc07c9835684cca08
        Validity
            Not Before: Apr 18 21:03:34 2024 GMT
            Not After : Apr 17 21:08:34 2025 GMT
        Subject: CN=9DF6739525233973AA19D32DBB9C58EDF3DD2670
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:c2:a6:09:1d:de:77:94:14:2e:c6:2c:21:7a:
                    79:a5:12:e3:15:99:c9:94:12:ee:c6:60:3f:c6:29:
                    6a:d1:3f:0f:54:fc:1e:3b:29:3e:60:2e:b8:59:24:
                    71:bd:64:fc:58:d1:3c:6a:cb:ec:ca:cc:b5:c6:b9:
                    e0:90:f3:ac:5e:de:53:73:29:c3:4d:22:5e:5d:b4:
                    56:8d:de:a5:99:fd:db:5d:88:7f:ef:7f:1e:26:81:
                    9c:5c:6f:1e:1d:4c:3d:09:04:74:90:3f:51:56:60:
                    fe:20:9f:6a:1a:d8:0e:8c:9e:67:6b:e7:d4:2e:13:
                    a4:d0:8c:8d:ac:2c:4a:1f:db:69:a7:3f:fc:90:ac:
                    d5:95:35:15:7e:16:7f:de:ab:69:3f:fc:67:13:3d:
                    b7:ae:a5:c6:3d:f8:11:1b:8c:14:1b:9b:bf:ff:fb:
                    17:97:bc:4c:74:73:d1:8c:37:d0:df:94:f0:e8:d9:
                    19:61:c9:72:d4:2f:e4:49:72:b8:6a:e0:be:b8:70:
                    7b:c8:bc:60:bd:16:e7:36:a7:cd:e6:ef:18:b3:7b:
                    11:ad:73:e8:be:57:14:cf:7c:37:da:f1:c5:20:a6:
                    50:99:e4:7b:9f:dc:24:ba:24:63:11:49:c3:6d:5c:
                    bf:1b:4f:08:37:5a:1c:62:5a:8c:c3:61:ea:93:01:
                    5a:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:F6:73:95:25:23:39:73:AA:19:D3:2D:BB:9C:58:ED:F3:DD:26:70
            X509v3 Authority Key Identifier:
                keyid:26:29:24:3C:9E:8D:A7:B1:4D:0A:BD:25:66:0A:74:AC:40:81:C8:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/4/2629243C9E8DA7B14D0ABD25660A74AC4081C88B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c88f518-5118-4680-a0ba-d2cc67b27b07/edff5ee9c6c74e18ab3cd3244d38ecf6acc07c9835684cca08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/4/32332e3135342e392e302f32342d3332203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.154.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:7b:fb:01:7b:44:6c:f1:71:73:f3:76:e3:d1:6d:df:8b:5d:
         52:b4:c2:46:97:33:d9:66:ef:71:82:76:5f:08:7e:f2:d3:a9:
         3c:14:f7:3b:4a:ee:65:a1:4f:ac:c6:f3:31:77:47:4f:74:50:
         48:82:72:76:78:1c:b3:7c:44:57:f5:49:b5:b0:5e:8b:91:5d:
         19:ea:ff:49:ef:be:79:8b:c7:cf:0d:4a:28:76:d8:3a:9e:0d:
         60:18:88:48:26:a8:38:46:a8:3c:69:12:66:7e:40:95:70:9a:
         46:b0:83:a3:17:31:fb:da:0e:e9:d9:ff:84:e9:99:03:31:31:
         ce:a6:35:98:25:d1:36:06:e3:61:63:67:e8:2b:1f:e1:d3:0b:
         d1:d0:34:4e:99:f0:93:3b:69:88:e3:e9:c2:67:18:03:d0:b8:
         12:4a:78:4a:81:95:e1:a5:2c:72:0a:59:4f:c1:b3:5d:b2:b1:
         3a:b7:b1:15:4f:61:66:82:be:bc:ab:eb:b4:4d:1e:31:26:a8:
         37:5e:f5:5f:99:ca:89:88:9a:10:47:12:11:03:0b:79:68:f4:
         e2:f7:d6:ad:56:41:24:d6:16:fb:3d:38:a1:08:c0:54:66:b9:
         1b:30:9b:85:69:b4:29:5c:9d:c5:c5:4e:ba:a7:b9:45:93:89:
         41:3b:24:db
-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgIUbaVSRwATXYQ1CJqs3a6iSfyB7EYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZWRmZjVlZTljNmM3NGUxOGFiM2NkMzI0NGQzOGVjZjZh
Y2MwN2M5ODM1Njg0Y2NhMDgwHhcNMjQwNDE4MjEwMzM0WhcNMjUwNDE3MjEwODM0
WjAzMTEwLwYDVQQDEyg5REY2NzM5NTI1MjMzOTczQUExOUQzMkRCQjlDNThFREYz
REQyNjcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz8KmCR3ed5QU
LsYsIXp5pRLjFZnJlBLuxmA/xilq0T8PVPweOyk+YC64WSRxvWT8WNE8asvsysy1
xrngkPOsXt5TcynDTSJeXbRWjd6lmf3bXYh/738eJoGcXG8eHUw9CQR0kD9RVmD+
IJ9qGtgOjJ5na+fULhOk0IyNrCxKH9tppz/8kKzVlTUVfhZ/3qtpP/xnEz23rqXG
PfgRG4wUG5u///sXl7xMdHPRjDfQ35Tw6NkZYcly1C/kSXK4auC+uHB7yLxgvRbn
NqfN5u8Ys3sRrXPovlcUz3w32vHFIKZQmeR7n9wkuiRjEUnDbVy/G08IN1ocYlqM
w2HqkwFaIQIDAQABo4ICezCCAncwHQYDVR0OBBYEFJ32c5UlIzlzqhnTLbucWO3z
3SZwMB8GA1UdIwQYMBaAFCYpJDyejaexTQq9JWYKdKxAgciLMA4GA1UdDwEB/wQE
AwIHgDBuBgNVHR8EZzBlMGOgYaBfhl1yc3luYzovL3Jwa2ktMDEucGR4bmV0LnVr
L3JlcG8vcGFyYWRveG5ldHdvcmtzLzQvMjYyOTI0M0M5RThEQTdCMTREMEFCRDI1
NjYwQTc0QUM0MDgxQzg4Qi5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEF
BQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBr
aS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIw
Y2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1LzljODhmNTE4LTUxMTgtNDY4
MC1hMGJhLWQyY2M2N2IyN2IwNy9lZGZmNWVlOWM2Yzc0ZTE4YWIzY2QzMjQ0ZDM4
ZWNmNmFjYzA3Yzk4MzU2ODRjY2EwOC5jZXIwgYMGCCsGAQUFBwELBHcwdTBzBggr
BgEFBQcwC4ZncnN5bmM6Ly9ycGtpLTAxLnBkeG5ldC51ay9yZXBvL3BhcmFkb3hu
ZXR3b3Jrcy80LzMyMzMyZTMxMzUzNDJlMzkyZTMwMmYzMjM0MmQzMzMyMjAzZDNl
MjAzNTMyMzAzMjM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsG
AQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5oJMA0GCSqGSIb3DQEBCwUAA4IBAQB2
e/sBe0Rs8XFz83bj0W3fi11StMJGlzPZZu9xgnZfCH7y06k8FPc7Su5loU+sxvMx
d0dPdFBIgnJ2eByzfERX9Um1sF6LkV0Z6v9J7755i8fPDUoodtg6ng1gGIhIJqg4
Rqg8aRJmfkCVcJpGsIOjFzH72g7p2f+E6ZkDMTHOpjWYJdE2BuNhY2foKx/h0wvR
0DROmfCTO2mI4+nCZxgD0LgSSnhKgZXhpSxyCllPwbNdsrE6t7EVT2Fmgr68q+u0
TR4xJqg3XvVfmcqJiJoQRxIRAwt5aPTi99atVkEk1hb7PTihCMBUZrkbMJuFabQp
XJ3FxU66p7lFk4lBOyTb
-----END CERTIFICATE-----
Generated at Sat Nov 23 06:11:05 2024 by rpki-client on console-ams.rpki-client.org