Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/4/323630323a666137653a31353a3a2f34382d313238203d3e203532303235.roa
File:                     323630323a666137653a31353a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          MLxAi+wOolnhVEE9UXQhWKwwRjjB2GnpxErsrRJk53c=
Subject key identifier:   5F:74:02:7F:5D:7A:31:E6:F1:11:01:BE:90:34:A9:BB:EF:EF:0F:F5
Certificate issuer:       /CN=edff5ee9c6c74e18ab3cd3244d38ecf6acc07c9835684cca08
Certificate serial:       7AFD7D210DA35B0585875F87546C134A096A115D
Authority key identifier: 26:29:24:3C:9E:8D:A7:B1:4D:0A:BD:25:66:0A:74:AC:40:81:C8:8B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c88f518-5118-4680-a0ba-d2cc67b27b07/edff5ee9c6c74e18ab3cd3244d38ecf6acc07c9835684cca08.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/4/323630323a666137653a31353a3a2f34382d313238203d3e203532303235.roa
Signing time:             Thu 06 Nov 2025 02:26:54 +0000
ROA not before:           Thu 06 Nov 2025 02:21:54 +0000
ROA not after:            Thu 05 Nov 2026 02:26:54 +0000
asID:                     52025
IP address blocks:        2602:fa7e:15::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/4/2629243C9E8DA7B14D0ABD25660A74AC4081C88B.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/4/2629243C9E8DA7B14D0ABD25660A74AC4081C88B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c88f518-5118-4680-a0ba-d2cc67b27b07/edff5ee9c6c74e18ab3cd3244d38ecf6acc07c9835684cca08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c88f518-5118-4680-a0ba-d2cc67b27b07/9c88f518-5118-4680-a0ba-d2cc67b27b07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c88f518-5118-4680-a0ba-d2cc67b27b07/9c88f518-5118-4680-a0ba-d2cc67b27b07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c88f518-5118-4680-a0ba-d2cc67b27b07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 07 Nov 2025 06:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:fd:7d:21:0d:a3:5b:05:85:87:5f:87:54:6c:13:4a:09:6a:11:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edff5ee9c6c74e18ab3cd3244d38ecf6acc07c9835684cca08
        Validity
            Not Before: Nov  6 02:21:54 2025 GMT
            Not After : Nov  5 02:26:54 2026 GMT
        Subject: CN=5F74027F5D7A31E6F11101BE9034A9BBEFEF0FF5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:59:84:e3:50:89:8d:b1:a6:99:1c:00:0d:78:
                    41:5e:4b:54:50:b3:f3:83:b9:59:59:e1:8a:71:e7:
                    a1:20:4f:ed:f1:bb:75:e4:45:99:96:88:3b:27:d2:
                    e2:fb:57:56:33:4b:47:98:e7:79:94:d0:c5:a9:d0:
                    84:4b:ed:e4:96:e0:2a:21:82:67:b8:58:d8:07:00:
                    ba:bc:ba:0e:75:9e:33:ec:e5:d1:f3:95:a6:f0:02:
                    7a:26:eb:fc:ea:82:cc:4a:5e:82:e6:3f:ba:a7:a3:
                    49:6c:df:81:01:fc:b7:0c:d0:13:cf:05:4c:85:3f:
                    51:a0:ac:07:ce:4a:75:db:38:2a:4c:ca:d5:8c:06:
                    a1:29:8c:35:f0:ab:8d:31:ed:c9:cb:14:94:7c:11:
                    4b:ff:23:23:47:05:5b:14:ab:70:4f:54:41:c2:84:
                    a7:f5:f3:b6:59:8e:c9:74:3a:b3:12:cf:65:1c:71:
                    8b:b0:9d:43:3e:ee:02:43:ae:0f:80:45:51:8f:0d:
                    f0:6f:cb:8b:2f:7d:85:75:1b:30:06:2c:ce:e9:46:
                    15:3f:e1:6d:41:f3:46:ad:11:f1:87:96:c0:a2:69:
                    32:f5:e7:1b:6e:35:06:01:50:fe:ad:5c:ee:33:ec:
                    4a:d9:6b:45:b7:83:d1:b8:f9:bb:ff:28:ac:10:aa:
                    40:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:74:02:7F:5D:7A:31:E6:F1:11:01:BE:90:34:A9:BB:EF:EF:0F:F5
            X509v3 Authority Key Identifier:
                keyid:26:29:24:3C:9E:8D:A7:B1:4D:0A:BD:25:66:0A:74:AC:40:81:C8:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/4/2629243C9E8DA7B14D0ABD25660A74AC4081C88B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c88f518-5118-4680-a0ba-d2cc67b27b07/edff5ee9c6c74e18ab3cd3244d38ecf6acc07c9835684cca08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/4/323630323a666137653a31353a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa7e:15::/48

    Signature Algorithm: sha256WithRSAEncryption
         81:f5:bb:66:75:ee:41:3d:a9:d8:9c:8f:97:d5:63:e2:5c:b8:
         48:bf:f5:94:c7:b0:ea:5f:5f:c6:ef:68:65:9e:af:9f:41:29:
         ff:e8:2d:b2:97:02:8c:75:15:6e:71:b5:b5:a9:e5:22:f8:84:
         f9:76:4f:3d:55:d4:17:86:14:3d:50:b8:cb:31:65:4a:95:f5:
         b2:fa:3f:17:73:57:8f:8c:47:54:b3:e7:2d:3c:72:c7:d2:ba:
         97:45:53:26:cc:72:f7:10:14:bf:bd:a1:4d:5a:82:6b:84:f5:
         be:73:cc:eb:89:9a:d8:9a:7b:6a:f8:2d:76:ab:12:d0:1f:f1:
         3d:ed:04:89:ae:cc:b9:83:20:7f:e4:3f:ba:69:c2:40:25:07:
         b3:d7:d2:cd:06:14:1a:95:83:90:12:65:df:52:c9:3b:39:3d:
         61:52:15:e2:0e:2d:ff:a8:b3:f0:ea:b8:12:16:12:61:13:e1:
         08:07:4a:9d:15:9a:38:f3:1c:aa:1e:04:a9:44:3d:6e:d6:58:
         87:15:bd:05:93:3c:4e:b1:c3:84:8c:2f:d9:1a:18:ee:21:e2:
         f6:08:e4:66:9b:9b:d1:49:2c:7c:99:66:59:a7:44:d8:f9:53:
         2e:bc:59:d3:87:92:64:9c:67:94:e0:84:ad:27:b0:67:17:d9:
         f8:8c:6d:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 12:09:21 2025 by rpki-client