Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/4/323630323a666137653a31313a3a2f34382d3438203d3e203532303235.roa
File:                     323630323a666137653a31313a3a2f34382d3438203d3e203532303235.roa (raw, json)
Hash identifier:          VjDi1eLcFzDsJE05dX8AZWJ0uLBbFuM9+l2tXSMEKB8=
Subject key identifier:   40:07:CB:DF:BF:8F:02:AC:2E:F3:52:DD:01:9B:42:A8:00:FD:42:34
Certificate issuer:       /CN=edff5ee9c6c74e18ab3cd3244d38ecf6acc07c9835684cca08
Certificate serial:       2A28DF6AFEBE030CA71BBEA6F899E0049A6EE2AA
Authority key identifier: 26:29:24:3C:9E:8D:A7:B1:4D:0A:BD:25:66:0A:74:AC:40:81:C8:8B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c88f518-5118-4680-a0ba-d2cc67b27b07/edff5ee9c6c74e18ab3cd3244d38ecf6acc07c9835684cca08.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/4/323630323a666137653a31313a3a2f34382d3438203d3e203532303235.roa
Signing time:             Sat 02 Dec 2023 02:05:12 +0000
ROA not before:           Sat 02 Dec 2023 02:00:12 +0000
ROA not after:            Sat 30 Nov 2024 02:05:12 +0000
asID:                     52025
IP address blocks:        2602:fa7e:11::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/4/2629243C9E8DA7B14D0ABD25660A74AC4081C88B.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/4/2629243C9E8DA7B14D0ABD25660A74AC4081C88B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c88f518-5118-4680-a0ba-d2cc67b27b07/edff5ee9c6c74e18ab3cd3244d38ecf6acc07c9835684cca08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c88f518-5118-4680-a0ba-d2cc67b27b07/9c88f518-5118-4680-a0ba-d2cc67b27b07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c88f518-5118-4680-a0ba-d2cc67b27b07/9c88f518-5118-4680-a0ba-d2cc67b27b07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c88f518-5118-4680-a0ba-d2cc67b27b07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 03:58:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:28:df:6a:fe:be:03:0c:a7:1b:be:a6:f8:99:e0:04:9a:6e:e2:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edff5ee9c6c74e18ab3cd3244d38ecf6acc07c9835684cca08
        Validity
            Not Before: Dec  2 02:00:12 2023 GMT
            Not After : Nov 30 02:05:12 2024 GMT
        Subject: CN=4007CBDFBF8F02AC2EF352DD019B42A800FD4234
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:7b:9d:9d:c5:f5:2d:18:b4:ee:de:8d:87:ca:
                    72:31:12:f4:03:4c:4c:97:21:84:bc:7b:cb:43:9f:
                    e9:d7:cd:0a:e5:57:c6:05:f8:21:71:73:7a:d2:e6:
                    16:93:24:d6:bc:75:ed:8d:27:ce:72:09:29:7f:74:
                    47:60:f4:68:eb:a8:d2:3b:ef:92:84:6c:ef:9b:39:
                    f2:ab:32:4c:ef:b2:c8:40:aa:38:5a:3d:cb:b9:82:
                    a8:04:ea:76:a4:b3:c1:9b:5a:e1:21:37:42:54:3a:
                    85:5a:f0:60:c7:97:82:cd:9a:dc:fe:00:d8:cd:27:
                    d7:19:9e:02:62:c9:b3:ae:30:93:4f:72:64:32:a6:
                    4b:4a:77:aa:eb:5e:3c:e7:f9:4a:1a:a6:c4:0b:3f:
                    f6:fc:ae:71:26:22:e3:26:72:63:b2:de:2a:49:d9:
                    51:cb:4a:b7:26:b6:88:06:71:b5:91:ef:39:b7:19:
                    61:3f:bf:ee:b9:89:57:35:85:9d:ca:45:b0:01:94:
                    5c:47:8a:56:4b:db:2f:2d:e6:87:b4:f8:f5:c9:0b:
                    bc:a7:da:d3:d6:75:62:36:6b:9b:53:81:e4:ec:5e:
                    1d:6d:1d:8b:9d:d9:ff:7d:50:7f:18:b4:9f:f2:8e:
                    b6:a6:d6:94:9c:c1:4e:32:cf:fd:df:94:06:f9:b4:
                    40:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:07:CB:DF:BF:8F:02:AC:2E:F3:52:DD:01:9B:42:A8:00:FD:42:34
            X509v3 Authority Key Identifier:
                keyid:26:29:24:3C:9E:8D:A7:B1:4D:0A:BD:25:66:0A:74:AC:40:81:C8:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/4/2629243C9E8DA7B14D0ABD25660A74AC4081C88B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c88f518-5118-4680-a0ba-d2cc67b27b07/edff5ee9c6c74e18ab3cd3244d38ecf6acc07c9835684cca08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/4/323630323a666137653a31313a3a2f34382d3438203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa7e:11::/48

    Signature Algorithm: sha256WithRSAEncryption
         77:00:46:aa:e8:c1:d5:42:61:dd:9d:16:8f:b7:45:14:bc:a3:
         1a:76:58:20:85:45:84:a7:c7:d7:da:bf:e0:e9:06:b0:c7:92:
         94:bc:bc:c1:5f:b1:2b:17:25:fd:ac:d9:a0:81:7b:11:c7:ea:
         cd:6a:33:a4:f3:81:b1:db:e8:82:30:f8:f8:24:30:57:c3:80:
         f4:d8:a5:3d:39:2e:1e:3a:a8:24:ad:5e:e6:c2:8d:31:4a:18:
         23:97:ee:0a:8f:f4:40:8c:ad:9f:a1:27:1c:42:07:24:a1:09:
         4c:31:44:89:9e:15:bb:ff:42:6c:55:1b:96:ce:fa:5d:3b:1a:
         72:8a:a8:f3:6d:1d:78:1b:73:16:cf:cc:55:29:7e:f4:fa:42:
         ab:fc:93:15:ca:25:4a:63:f9:3e:d2:05:c7:49:05:b3:fb:19:
         c5:00:09:ce:aa:69:28:71:16:92:fd:6f:0a:38:5a:41:f2:8c:
         a6:48:d6:52:6c:64:e6:13:c9:91:14:6d:a1:8c:11:2e:75:e0:
         d2:90:7f:2d:8a:6a:e9:79:8f:48:b1:55:4d:b3:ea:44:45:86:
         22:6b:2e:34:36:c8:cc:a5:65:81:92:dd:1c:3a:0c:bf:bd:71:
         19:7d:12:77:08:34:49:32:ac:3e:4d:4f:c9:48:e3:7f:96:d7:
         79:7a:46:34
-----BEGIN CERTIFICATE-----
MIIFhjCCBG6gAwIBAgIUKijfav6+AwynG76m+JngBJpu4qowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZWRmZjVlZTljNmM3NGUxOGFiM2NkMzI0NGQzOGVjZjZh
Y2MwN2M5ODM1Njg0Y2NhMDgwHhcNMjMxMjAyMDIwMDEyWhcNMjQxMTMwMDIwNTEy
WjAzMTEwLwYDVQQDEyg0MDA3Q0JERkJGOEYwMkFDMkVGMzUyREQwMTlCNDJBODAw
RkQ0MjM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHudncX1LRi0
7t6Nh8pyMRL0A0xMlyGEvHvLQ5/p180K5VfGBfghcXN60uYWkyTWvHXtjSfOcgkp
f3RHYPRo66jSO++ShGzvmznyqzJM77LIQKo4Wj3LuYKoBOp2pLPBm1rhITdCVDqF
WvBgx5eCzZrc/gDYzSfXGZ4CYsmzrjCTT3JkMqZLSneq61485/lKGqbECz/2/K5x
JiLjJnJjst4qSdlRy0q3JraIBnG1ke85txlhP7/uuYlXNYWdykWwAZRcR4pWS9sv
LeaHtPj1yQu8p9rT1nViNmubU4Hk7F4dbR2Lndn/fVB/GLSf8o62ptaUnMFOMs/9
35QG+bRAVwIDAQABo4IChjCCAoIwHQYDVR0OBBYEFEAHy9+/jwKsLvNS3QGbQqgA
/UI0MB8GA1UdIwQYMBaAFCYpJDyejaexTQq9JWYKdKxAgciLMA4GA1UdDwEB/wQE
AwIHgDBuBgNVHR8EZzBlMGOgYaBfhl1yc3luYzovL3Jwa2ktMDEucGR4bmV0LnVr
L3JlcG8vcGFyYWRveG5ldHdvcmtzLzQvMjYyOTI0M0M5RThEQTdCMTREMEFCRDI1
NjYwQTc0QUM0MDgxQzg4Qi5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEF
BQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBr
aS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIw
Y2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1LzljODhmNTE4LTUxMTgtNDY4
MC1hMGJhLWQyY2M2N2IyN2IwNy9lZGZmNWVlOWM2Yzc0ZTE4YWIzY2QzMjQ0ZDM4
ZWNmNmFjYzA3Yzk4MzU2ODRjY2EwOC5jZXIwgYsGCCsGAQUFBwELBH8wfTB7Bggr
BgEFBQcwC4ZvcnN5bmM6Ly9ycGtpLTAxLnBkeG5ldC51ay9yZXBvL3BhcmFkb3hu
ZXR3b3Jrcy80LzMyMzYzMDMyM2E2NjYxMzc2NTNhMzEzMTNhM2EyZjM0MzgyZDM0
MzgyMDNkM2UyMDM1MzIzMDMyMzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH
DgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAmAvp+ABEwDQYJKoZIhvcN
AQELBQADggEBAHcARqrowdVCYd2dFo+3RRS8oxp2WCCFRYSnx9fav+DpBrDHkpS8
vMFfsSsXJf2s2aCBexHH6s1qM6TzgbHb6IIw+PgkMFfDgPTYpT05Lh46qCStXubC
jTFKGCOX7gqP9ECMrZ+hJxxCByShCUwxRImeFbv/QmxVG5bO+l07GnKKqPNtHXgb
cxbPzFUpfvT6Qqv8kxXKJUpj+T7SBcdJBbP7GcUACc6qaShxFpL9bwo4WkHyjKZI
1lJsZOYTyZEUbaGMES514NKQfy2Kaul5j0ixVU2z6kRFhiJrLjQ2yMylZYGS3Rw6
DL+9cRl9EncINEkyrD5NT8lI43+W13l6RjQ=
-----END CERTIFICATE-----
Generated at Sat May 4 02:34:41 2024 by rpki-client on console-fra.rpki-client.org