Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/4/323630323a666137653a32303a3a2f34382d3438203d3e203532303235.roa
File:                     323630323a666137653a32303a3a2f34382d3438203d3e203532303235.roa (raw, json)
Hash identifier:          UeRJrlQCj40TTT4Xx0DpIBuzeTRJk2Zt5YXW9AbXLm8=
Subject key identifier:   CC:22:1F:64:17:E8:57:A2:1B:3B:FA:6B:C1:14:66:B8:40:81:CC:FA
Certificate issuer:       /CN=edff5ee9c6c74e18ab3cd3244d38ecf6acc07c9835684cca08
Certificate serial:       5F7F737D67751202944A7B2601B2D266B12FE1E2
Authority key identifier: 26:29:24:3C:9E:8D:A7:B1:4D:0A:BD:25:66:0A:74:AC:40:81:C8:8B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c88f518-5118-4680-a0ba-d2cc67b27b07/edff5ee9c6c74e18ab3cd3244d38ecf6acc07c9835684cca08.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/4/323630323a666137653a32303a3a2f34382d3438203d3e203532303235.roa
Signing time:             Tue 18 Feb 2025 23:08:36 +0000
ROA not before:           Tue 18 Feb 2025 23:03:36 +0000
ROA not after:            Tue 17 Feb 2026 23:08:36 +0000
asID:                     52025
IP address blocks:        2602:fa7e:20::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/4/2629243C9E8DA7B14D0ABD25660A74AC4081C88B.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/4/2629243C9E8DA7B14D0ABD25660A74AC4081C88B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c88f518-5118-4680-a0ba-d2cc67b27b07/edff5ee9c6c74e18ab3cd3244d38ecf6acc07c9835684cca08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c88f518-5118-4680-a0ba-d2cc67b27b07/9c88f518-5118-4680-a0ba-d2cc67b27b07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c88f518-5118-4680-a0ba-d2cc67b27b07/9c88f518-5118-4680-a0ba-d2cc67b27b07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c88f518-5118-4680-a0ba-d2cc67b27b07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Apr 2025 17:28:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:7f:73:7d:67:75:12:02:94:4a:7b:26:01:b2:d2:66:b1:2f:e1:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edff5ee9c6c74e18ab3cd3244d38ecf6acc07c9835684cca08
        Validity
            Not Before: Feb 18 23:03:36 2025 GMT
            Not After : Feb 17 23:08:36 2026 GMT
        Subject: CN=CC221F6417E857A21B3BFA6BC11466B84081CCFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:aa:c1:e4:bc:0f:f6:be:84:56:90:e9:56:2b:
                    40:a2:02:0d:16:48:8e:e9:dd:72:88:83:fb:b0:21:
                    b4:e0:24:4b:e9:cd:a9:1f:bf:db:63:b9:2e:06:c7:
                    fa:f6:68:63:ce:5b:1b:d2:d0:1f:fd:dd:9f:0c:a7:
                    7f:f9:14:26:25:d1:71:aa:8c:ab:33:b6:18:6a:07:
                    f7:9e:3d:97:f6:fd:9d:9a:fb:a4:fc:c7:5c:ab:82:
                    71:37:9c:39:63:6c:12:0f:13:d7:d1:43:35:76:e1:
                    71:3a:27:86:53:e2:d0:38:d6:ec:6a:c4:dc:80:17:
                    44:38:72:94:bb:c4:3b:c9:e4:cc:e5:92:ae:e6:d1:
                    c1:a7:35:4f:a3:ee:b3:28:97:08:25:20:39:9b:f8:
                    00:53:b0:51:74:81:5f:63:5d:c4:bb:37:7d:89:33:
                    1c:88:b5:71:ae:a7:96:00:fb:55:ec:50:31:6d:83:
                    c9:7f:b0:ed:24:c6:58:eb:d1:6c:e7:87:7f:6a:7d:
                    ad:9a:2e:fb:4c:45:4e:7e:4e:82:42:5b:c2:5e:da:
                    a1:4b:64:ea:98:a9:02:65:86:e6:67:7e:73:a1:e2:
                    65:b5:c2:65:e3:46:c2:05:3f:34:9b:40:08:79:6f:
                    dd:84:59:8a:18:88:9d:c1:37:84:1d:8b:90:d5:b3:
                    44:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:22:1F:64:17:E8:57:A2:1B:3B:FA:6B:C1:14:66:B8:40:81:CC:FA
            X509v3 Authority Key Identifier:
                keyid:26:29:24:3C:9E:8D:A7:B1:4D:0A:BD:25:66:0A:74:AC:40:81:C8:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/4/2629243C9E8DA7B14D0ABD25660A74AC4081C88B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c88f518-5118-4680-a0ba-d2cc67b27b07/edff5ee9c6c74e18ab3cd3244d38ecf6acc07c9835684cca08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/4/323630323a666137653a32303a3a2f34382d3438203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa7e:20::/48

    Signature Algorithm: sha256WithRSAEncryption
         23:3d:ce:c0:ae:dd:47:d3:1b:3a:2b:a1:23:f7:b5:84:e0:33:
         e3:ea:33:ff:4c:e3:d6:cd:1a:8f:58:25:f0:64:f8:80:a6:5c:
         e9:56:85:ce:bf:62:fd:90:c4:e9:b3:19:11:41:d4:5f:53:2b:
         50:be:bd:9e:77:bd:a8:45:fd:82:21:73:cc:95:c3:25:21:58:
         80:2c:c6:e2:77:fd:ab:6c:1c:90:28:4d:fc:a6:ff:ad:29:3e:
         ee:0d:82:aa:99:04:88:b1:5e:64:5b:51:17:bf:66:ad:3b:25:
         19:c6:b6:7b:3f:82:8d:74:78:fb:d4:bb:00:35:07:8c:99:d3:
         c5:3e:71:53:10:3d:29:32:10:4f:56:8f:a4:dd:60:06:dc:b0:
         72:ca:f2:df:4d:84:b7:78:39:c3:cd:fb:be:cf:16:6a:2d:e0:
         53:45:80:41:ea:fb:a1:23:58:02:7e:51:84:66:95:ad:f6:bc:
         eb:2b:0a:c8:c8:5c:56:e8:0b:b9:21:24:7a:a7:41:15:93:57:
         c6:f2:f2:4d:6d:a8:b4:ae:0b:16:38:ae:8a:07:41:01:b2:ab:
         22:c1:4f:e8:04:2c:9e:12:04:a2:33:9d:bb:c3:b7:ac:9e:44:
         4a:2a:46:72:97:3b:a4:d2:ad:78:6b:32:75:f8:ef:83:93:af:
         81:1c:ce:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 07:18:09 2025 by rpki-client