Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/4/323630323a666137653a31393a3a2f34382d313238203d3e203532303235.roa
File:                     323630323a666137653a31393a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          atcO5twZfMC19cqc/FkES0ln6KMh/CJy0nPosek4bvg=
Subject key identifier:   53:29:56:59:80:2A:8C:FC:1E:14:67:0D:BB:8D:0C:01:4F:6E:B1:B7
Certificate issuer:       /CN=edff5ee9c6c74e18ab3cd3244d38ecf6acc07c9835684cca08
Certificate serial:       2392FC4AAE62230EFDDA86C3668B362F612EB1A0
Authority key identifier: 26:29:24:3C:9E:8D:A7:B1:4D:0A:BD:25:66:0A:74:AC:40:81:C8:8B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c88f518-5118-4680-a0ba-d2cc67b27b07/edff5ee9c6c74e18ab3cd3244d38ecf6acc07c9835684cca08.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/4/323630323a666137653a31393a3a2f34382d313238203d3e203532303235.roa
Signing time:             Thu 18 Sep 2025 11:29:07 +0000
ROA not before:           Thu 18 Sep 2025 11:24:07 +0000
ROA not after:            Thu 17 Sep 2026 11:29:07 +0000
asID:                     52025
IP address blocks:        2602:fa7e:19::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/4/2629243C9E8DA7B14D0ABD25660A74AC4081C88B.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/4/2629243C9E8DA7B14D0ABD25660A74AC4081C88B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c88f518-5118-4680-a0ba-d2cc67b27b07/edff5ee9c6c74e18ab3cd3244d38ecf6acc07c9835684cca08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c88f518-5118-4680-a0ba-d2cc67b27b07/9c88f518-5118-4680-a0ba-d2cc67b27b07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c88f518-5118-4680-a0ba-d2cc67b27b07/9c88f518-5118-4680-a0ba-d2cc67b27b07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c88f518-5118-4680-a0ba-d2cc67b27b07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 19 Sep 2025 12:45:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:92:fc:4a:ae:62:23:0e:fd:da:86:c3:66:8b:36:2f:61:2e:b1:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edff5ee9c6c74e18ab3cd3244d38ecf6acc07c9835684cca08
        Validity
            Not Before: Sep 18 11:24:07 2025 GMT
            Not After : Sep 17 11:29:07 2026 GMT
        Subject: CN=53295659802A8CFC1E14670DBB8D0C014F6EB1B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:f0:28:5c:ef:b5:ec:24:38:44:ab:ee:32:eb:
                    cd:8c:f6:0a:e6:af:57:35:f7:66:62:01:cf:c8:0e:
                    92:c4:3b:4f:9e:97:cf:ca:aa:79:12:87:8a:1e:6a:
                    cf:04:71:f5:c8:69:13:da:a3:70:be:b6:fe:65:66:
                    55:ab:58:eb:55:86:e0:04:40:21:c0:73:79:6d:c7:
                    18:3c:9e:5d:96:03:fd:f7:87:47:6d:98:12:70:0e:
                    92:47:ee:5a:d3:29:df:ea:48:1d:1a:89:4f:8f:32:
                    f5:e1:be:ba:89:28:5d:78:59:b1:de:6a:7f:93:81:
                    e3:e4:bb:87:03:88:9b:81:e6:c3:ad:b2:75:63:e7:
                    aa:91:3c:5a:0d:46:e1:21:e3:61:d1:39:04:25:b4:
                    2a:30:e3:20:a8:68:f0:8f:64:9a:cc:fe:bd:4b:7f:
                    93:a7:2d:72:9e:bf:7b:94:18:41:4b:db:16:d6:66:
                    69:1f:85:43:eb:3f:1a:85:bf:1b:00:fb:1c:cc:26:
                    42:e8:80:d1:fc:d8:78:88:44:8f:89:27:65:2f:55:
                    ab:56:ca:f2:d3:dd:f7:49:ad:14:b6:03:44:09:34:
                    57:2e:f2:cd:b6:85:7e:c5:44:20:ea:2a:50:79:7e:
                    e1:7b:66:f6:10:3c:de:26:71:11:d2:29:bf:93:f9:
                    06:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:29:56:59:80:2A:8C:FC:1E:14:67:0D:BB:8D:0C:01:4F:6E:B1:B7
            X509v3 Authority Key Identifier:
                keyid:26:29:24:3C:9E:8D:A7:B1:4D:0A:BD:25:66:0A:74:AC:40:81:C8:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/4/2629243C9E8DA7B14D0ABD25660A74AC4081C88B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c88f518-5118-4680-a0ba-d2cc67b27b07/edff5ee9c6c74e18ab3cd3244d38ecf6acc07c9835684cca08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/4/323630323a666137653a31393a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa7e:19::/48

    Signature Algorithm: sha256WithRSAEncryption
         85:a3:21:b4:b3:42:13:4b:02:50:31:4a:77:fd:be:6f:b4:c0:
         85:71:07:05:16:7e:c5:a0:69:32:1a:c2:ed:34:6c:c4:23:eb:
         b9:05:91:3d:aa:2d:bd:1c:36:db:bf:41:dd:17:05:e9:24:0c:
         d4:c2:b2:14:6d:9d:90:d0:42:32:6d:bb:56:f7:2d:33:e3:54:
         b2:f7:a8:0f:0a:6e:b8:47:06:68:6d:08:f7:05:ee:c6:59:95:
         e0:b5:f2:89:40:e3:f3:06:bb:33:e5:66:92:b4:e4:8d:13:28:
         9d:7f:e0:a9:4d:cc:d3:34:63:0c:77:34:a8:e5:1d:2f:03:aa:
         8b:01:ba:b1:a5:bf:2d:7c:cf:70:a5:0f:d6:b6:94:51:2c:71:
         10:fd:e2:2e:cb:24:70:58:44:6a:a2:15:7c:9b:9a:16:ee:8d:
         86:99:2c:d6:8d:85:94:2c:cd:45:f5:12:25:6e:b9:5a:e9:28:
         50:4f:81:04:d6:b4:88:4e:15:92:b4:d5:6b:a4:38:61:fd:3a:
         4e:70:2f:e0:d2:0b:b2:9d:91:2d:e6:21:45:ca:7b:40:d3:db:
         de:25:0f:0b:57:e2:2c:e1:81:09:59:6c:65:61:5e:3b:f6:43:
         9e:5c:ee:90:33:f6:4f:d8:61:c7:bc:f2:ed:f6:fb:ea:87:5e:
         6e:8d:00:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 23:46:13 2025 by rpki-client