Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/4/32332e3135362e3230302e302f32342d3332203d3e203532303235.roa
File:                     32332e3135362e3230302e302f32342d3332203d3e203532303235.roa (raw, json)
Hash identifier:          VHl9HxJIQjHzvWIE5sTbCdzReo+4HSfqfwlj+1Y3U8k=
Subject key identifier:   6C:81:82:EC:61:F0:DF:7A:8A:09:FD:7B:A0:88:F6:AA:68:34:9C:B1
Certificate issuer:       /CN=edff5ee9c6c74e18ab3cd3244d38ecf6acc07c9835684cca08
Certificate serial:       6C0D7E9B62D7DA8D5204802EE6222CC0EE659B1C
Authority key identifier: 26:29:24:3C:9E:8D:A7:B1:4D:0A:BD:25:66:0A:74:AC:40:81:C8:8B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c88f518-5118-4680-a0ba-d2cc67b27b07/edff5ee9c6c74e18ab3cd3244d38ecf6acc07c9835684cca08.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/4/32332e3135362e3230302e302f32342d3332203d3e203532303235.roa
Signing time:             Tue 26 Dec 2023 04:22:46 +0000
ROA not before:           Tue 26 Dec 2023 04:17:46 +0000
ROA not after:            Tue 24 Dec 2024 04:22:46 +0000
asID:                     52025
IP address blocks:        23.156.200.0/24 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/4/2629243C9E8DA7B14D0ABD25660A74AC4081C88B.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/4/2629243C9E8DA7B14D0ABD25660A74AC4081C88B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c88f518-5118-4680-a0ba-d2cc67b27b07/edff5ee9c6c74e18ab3cd3244d38ecf6acc07c9835684cca08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c88f518-5118-4680-a0ba-d2cc67b27b07/9c88f518-5118-4680-a0ba-d2cc67b27b07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c88f518-5118-4680-a0ba-d2cc67b27b07/9c88f518-5118-4680-a0ba-d2cc67b27b07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c88f518-5118-4680-a0ba-d2cc67b27b07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 00:24:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:0d:7e:9b:62:d7:da:8d:52:04:80:2e:e6:22:2c:c0:ee:65:9b:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edff5ee9c6c74e18ab3cd3244d38ecf6acc07c9835684cca08
        Validity
            Not Before: Dec 26 04:17:46 2023 GMT
            Not After : Dec 24 04:22:46 2024 GMT
        Subject: CN=6C8182EC61F0DF7A8A09FD7BA088F6AA68349CB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:8b:72:ae:ec:38:d9:9a:99:52:b0:21:2a:c8:
                    cc:a5:79:e6:94:b6:e0:4d:69:62:b2:c2:da:96:d6:
                    12:6b:49:78:43:6c:a4:93:f2:ce:38:1d:d5:9a:31:
                    13:0f:b7:4f:4e:b7:5a:ce:24:a0:04:04:95:ea:95:
                    e4:fe:f8:5e:cd:8b:14:4e:03:0d:56:27:4c:9a:0d:
                    e0:44:ea:a5:88:9f:88:46:80:66:84:59:3e:95:7e:
                    04:63:ad:6a:91:22:e4:04:56:0b:31:1c:5d:b1:55:
                    60:2d:5f:ce:51:a9:66:c0:20:ec:36:39:fb:33:b6:
                    8e:3c:e0:19:0d:b9:49:30:50:bd:8a:ee:a9:31:b5:
                    f4:9c:60:e2:d3:cd:05:dc:15:72:1c:03:51:1c:e8:
                    fc:b8:18:27:19:36:79:6c:4b:08:3d:30:58:31:84:
                    91:56:46:0d:e9:2d:da:75:18:90:09:9c:0b:8c:02:
                    70:be:6a:a7:ed:d0:de:2a:15:42:56:f8:89:9c:5b:
                    4e:52:a0:51:31:e3:45:d7:54:5d:1c:fa:27:d2:2f:
                    b3:2e:ed:02:73:b1:6a:98:6e:f5:c0:38:ac:af:6d:
                    18:50:2b:f3:d0:9f:9a:4f:08:2a:32:51:26:74:70:
                    f6:14:ae:2d:f8:37:28:54:6a:b8:e1:37:99:6a:2b:
                    2a:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:81:82:EC:61:F0:DF:7A:8A:09:FD:7B:A0:88:F6:AA:68:34:9C:B1
            X509v3 Authority Key Identifier:
                keyid:26:29:24:3C:9E:8D:A7:B1:4D:0A:BD:25:66:0A:74:AC:40:81:C8:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/4/2629243C9E8DA7B14D0ABD25660A74AC4081C88B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c88f518-5118-4680-a0ba-d2cc67b27b07/edff5ee9c6c74e18ab3cd3244d38ecf6acc07c9835684cca08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/4/32332e3135362e3230302e302f32342d3332203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.156.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:ef:76:db:a7:6b:4f:82:75:10:4a:48:e3:05:b0:5a:49:72:
         54:88:08:23:88:69:c8:c1:e0:43:bd:04:c0:5a:9d:71:fd:62:
         ce:24:96:78:b8:ba:04:55:61:f1:0e:ac:44:de:d1:1e:50:ee:
         b7:5e:2a:9f:b3:43:08:ef:9a:f5:a2:78:a1:b5:f0:ad:cc:40:
         4c:84:34:df:80:45:e5:02:0e:a4:f9:34:85:88:95:10:89:41:
         66:92:da:45:1b:73:31:57:49:3d:a6:eb:27:4a:ce:e3:55:fe:
         0e:88:19:22:eb:f5:a1:a8:82:9b:90:80:51:a0:8c:12:4f:d6:
         d0:99:62:5d:3e:87:8c:67:b8:bc:f4:83:b5:32:c2:cc:7b:e4:
         4c:12:9b:b0:6f:0e:43:51:f8:c1:e6:9c:3e:8a:77:35:12:d1:
         be:d9:1b:77:6f:69:07:7a:04:c3:57:09:b7:4e:6a:3b:d9:eb:
         df:64:b3:25:69:14:04:e5:ec:25:ee:f0:51:06:ef:13:82:5f:
         c7:09:de:40:0d:3b:da:aa:1c:ba:a3:75:80:f8:2a:10:b7:19:
         65:6c:b3:e5:54:f8:03:6e:8b:db:78:fc:37:2d:d7:3f:b0:ed:
         1a:fa:09:f8:3b:55:31:92:c4:ec:5c:4d:72:78:85:e3:6e:24:
         f4:e6:ff:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 23:10:20 2024 by rpki-client on console-fra.rpki-client.org