Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/4/323630323a666137653a31313a3a2f34382d3438203d3e203532303235.roa
File:                     323630323a666137653a31313a3a2f34382d3438203d3e203532303235.roa (raw, json)
Hash identifier:          tFxMkgs/zUhVzWasn5mt+z6GNAfDU2vJpiwKFPW1A5I=
Subject key identifier:   B3:DD:8E:F9:33:3C:A2:17:C5:01:4D:A6:1F:F8:5F:29:15:A5:0F:43
Certificate issuer:       /CN=edff5ee9c6c74e18ab3cd3244d38ecf6acc07c9835684cca08
Certificate serial:       5E52329BBECC48091EAD05CE087597255B295E2B
Authority key identifier: 26:29:24:3C:9E:8D:A7:B1:4D:0A:BD:25:66:0A:74:AC:40:81:C8:8B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c88f518-5118-4680-a0ba-d2cc67b27b07/edff5ee9c6c74e18ab3cd3244d38ecf6acc07c9835684cca08.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/4/323630323a666137653a31313a3a2f34382d3438203d3e203532303235.roa
Signing time:             Sat 02 Nov 2024 02:18:01 +0000
ROA not before:           Sat 02 Nov 2024 02:13:01 +0000
ROA not after:            Sat 01 Nov 2025 02:18:01 +0000
asID:                     52025
IP address blocks:        2602:fa7e:11::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/4/2629243C9E8DA7B14D0ABD25660A74AC4081C88B.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/4/2629243C9E8DA7B14D0ABD25660A74AC4081C88B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c88f518-5118-4680-a0ba-d2cc67b27b07/edff5ee9c6c74e18ab3cd3244d38ecf6acc07c9835684cca08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c88f518-5118-4680-a0ba-d2cc67b27b07/9c88f518-5118-4680-a0ba-d2cc67b27b07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c88f518-5118-4680-a0ba-d2cc67b27b07/9c88f518-5118-4680-a0ba-d2cc67b27b07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c88f518-5118-4680-a0ba-d2cc67b27b07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 00:24:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:52:32:9b:be:cc:48:09:1e:ad:05:ce:08:75:97:25:5b:29:5e:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edff5ee9c6c74e18ab3cd3244d38ecf6acc07c9835684cca08
        Validity
            Not Before: Nov  2 02:13:01 2024 GMT
            Not After : Nov  1 02:18:01 2025 GMT
        Subject: CN=B3DD8EF9333CA217C5014DA61FF85F2915A50F43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:58:bd:73:b7:7c:3c:7c:c7:89:5f:0d:53:68:
                    8e:17:19:63:5c:53:7e:83:2f:70:62:ce:cd:b3:9e:
                    cd:1d:da:42:9a:3e:59:98:ba:4b:d0:a9:bf:a1:26:
                    92:57:75:a2:6d:52:c1:65:e4:67:87:72:56:de:2e:
                    00:c4:cd:cb:41:db:31:c2:e5:b2:2b:2a:a9:89:13:
                    0f:f9:82:82:2e:1a:f0:5e:48:3d:df:21:63:31:bd:
                    b5:f2:18:4a:57:18:cb:fa:75:f9:ae:7a:8e:17:d2:
                    b1:49:2a:12:0f:2f:1b:3b:8c:ed:3b:43:8f:e1:20:
                    30:ee:8e:00:88:3d:fd:6d:0a:b8:f4:9b:68:ba:1a:
                    c6:d0:53:22:aa:99:7c:5f:fa:41:2f:fa:9c:86:48:
                    6a:ca:c8:ed:f6:9e:28:55:b0:e7:14:d4:8c:93:5d:
                    b1:17:3a:b0:6c:db:f0:f1:16:f8:d8:2a:39:63:12:
                    bf:d2:9b:e3:64:2e:2c:6d:62:24:41:95:be:74:1e:
                    d5:07:7f:d2:16:5a:67:00:f7:7c:55:1d:e2:e7:de:
                    04:1f:39:6d:a4:b8:1f:c0:ca:00:a1:53:a4:3a:cd:
                    40:32:df:93:64:f4:db:a9:da:19:99:c2:25:9a:5e:
                    a9:16:ce:d2:dd:ae:19:7f:d4:24:4e:53:1b:98:c6:
                    db:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:DD:8E:F9:33:3C:A2:17:C5:01:4D:A6:1F:F8:5F:29:15:A5:0F:43
            X509v3 Authority Key Identifier:
                keyid:26:29:24:3C:9E:8D:A7:B1:4D:0A:BD:25:66:0A:74:AC:40:81:C8:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/4/2629243C9E8DA7B14D0ABD25660A74AC4081C88B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c88f518-5118-4680-a0ba-d2cc67b27b07/edff5ee9c6c74e18ab3cd3244d38ecf6acc07c9835684cca08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/4/323630323a666137653a31313a3a2f34382d3438203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa7e:11::/48

    Signature Algorithm: sha256WithRSAEncryption
         d0:82:91:d5:2e:b2:e5:bb:4c:93:90:a9:32:ae:7a:ff:c5:66:
         f4:fd:8f:9c:bb:4d:7e:4b:64:02:3f:27:1f:2a:26:6d:25:b7:
         3a:f5:ad:91:cc:5d:2e:47:bc:5c:04:6f:39:a4:64:8c:7e:78:
         87:ce:fb:42:d7:ef:40:d4:a9:c0:dd:11:9e:b8:80:de:71:8f:
         2b:b7:f5:7b:00:0e:97:28:2b:b1:09:1d:bd:28:c7:96:8c:26:
         3a:8a:c1:96:7b:dd:7e:4c:a4:d1:2b:cb:e9:f6:ce:19:61:6c:
         8b:bc:b4:10:14:d1:42:e7:a3:64:07:b7:c4:19:1c:cd:5b:0b:
         da:1e:5b:bf:82:b3:75:63:2c:60:39:27:a1:ed:f8:49:cb:78:
         b6:6a:d7:b5:fc:7b:6d:fd:27:a3:73:c6:53:35:4b:b2:1e:62:
         35:1d:07:04:2d:90:99:5e:69:d3:02:de:2b:04:24:73:63:dd:
         02:cc:3e:6a:6d:3b:9e:1d:a1:30:96:0f:ee:3f:49:bb:0c:be:
         53:8d:51:eb:20:dc:ee:71:4d:6c:76:0f:a7:3d:43:17:fc:24:
         1a:ca:04:ad:81:51:04:4d:c9:39:33:87:29:16:de:e5:5a:97:
         34:e6:c7:77:f5:53:4d:14:b6:64:b1:60:84:59:ab:8f:af:89:
         dc:cf:f0:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 23:10:20 2024 by rpki-client on console-fra.rpki-client.org