Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/4/323630323a666137653a3a2f33362d3336203d3e203430353434.roa
File:                     323630323a666137653a3a2f33362d3336203d3e203430353434.roa (raw, json)
Hash identifier:          Xcv5osj/IkKIUE9oG6N16DFAgS6fNThqUVnRgkywDJw=
Subject key identifier:   5C:26:52:A1:2D:0B:1E:B8:95:7E:8C:27:8F:25:9C:CE:D4:88:9A:CF
Certificate issuer:       /CN=edff5ee9c6c74e18ab3cd3244d38ecf6acc07c9835684cca08
Certificate serial:       66D914A2795F0C19210A2D125D5C72814E3B525E
Authority key identifier: 26:29:24:3C:9E:8D:A7:B1:4D:0A:BD:25:66:0A:74:AC:40:81:C8:8B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c88f518-5118-4680-a0ba-d2cc67b27b07/edff5ee9c6c74e18ab3cd3244d38ecf6acc07c9835684cca08.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/4/323630323a666137653a3a2f33362d3336203d3e203430353434.roa
Signing time:             Wed 12 Mar 2025 18:19:02 +0000
ROA not before:           Wed 12 Mar 2025 18:14:02 +0000
ROA not after:            Wed 11 Mar 2026 18:19:02 +0000
asID:                     40544
IP address blocks:        2602:fa7e::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/4/2629243C9E8DA7B14D0ABD25660A74AC4081C88B.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/4/2629243C9E8DA7B14D0ABD25660A74AC4081C88B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c88f518-5118-4680-a0ba-d2cc67b27b07/edff5ee9c6c74e18ab3cd3244d38ecf6acc07c9835684cca08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c88f518-5118-4680-a0ba-d2cc67b27b07/9c88f518-5118-4680-a0ba-d2cc67b27b07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c88f518-5118-4680-a0ba-d2cc67b27b07/9c88f518-5118-4680-a0ba-d2cc67b27b07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c88f518-5118-4680-a0ba-d2cc67b27b07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Apr 2025 17:28:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:d9:14:a2:79:5f:0c:19:21:0a:2d:12:5d:5c:72:81:4e:3b:52:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edff5ee9c6c74e18ab3cd3244d38ecf6acc07c9835684cca08
        Validity
            Not Before: Mar 12 18:14:02 2025 GMT
            Not After : Mar 11 18:19:02 2026 GMT
        Subject: CN=5C2652A12D0B1EB8957E8C278F259CCED4889ACF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:b7:48:b6:52:d1:f0:f6:b4:07:7d:1f:11:73:
                    af:eb:72:2d:6e:9f:dc:67:67:d8:f4:83:21:ef:44:
                    e0:05:d0:27:85:0a:ed:57:4e:90:46:5c:3e:22:11:
                    8b:a9:1d:e7:fa:c9:7a:a2:63:22:7b:6c:3c:b9:7a:
                    20:16:89:c5:6c:31:d7:1e:d6:f7:75:31:48:5c:86:
                    67:b0:5c:db:a4:65:19:5f:06:83:f8:25:dc:20:6a:
                    e6:63:b2:2e:72:98:ed:a5:a8:57:1c:eb:c3:45:ea:
                    2d:71:cf:2f:c6:d6:5c:a1:6a:a5:14:90:44:20:3a:
                    9f:c9:fe:0f:ad:39:ed:0e:fd:eb:43:86:5b:60:24:
                    5d:88:70:c7:d1:8d:61:00:a6:8f:8e:6e:4c:12:56:
                    44:cb:3e:67:b2:f6:06:59:e7:a2:7e:be:18:54:5c:
                    8a:07:8d:0a:3c:0f:09:f6:55:4d:dc:82:c3:53:d5:
                    af:a9:e8:3a:56:e8:fd:61:9d:38:5b:a8:cd:2f:0f:
                    90:05:b6:c4:bf:7c:09:dd:41:18:cc:32:8b:ad:96:
                    3b:d1:b6:81:e6:9a:39:04:78:cd:12:ed:83:ff:cd:
                    ef:b3:8e:3d:41:1b:a8:6b:90:f6:9f:54:a5:09:a7:
                    6f:a4:6b:5e:58:e6:56:42:6c:09:b2:b5:91:d3:c2:
                    fe:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:26:52:A1:2D:0B:1E:B8:95:7E:8C:27:8F:25:9C:CE:D4:88:9A:CF
            X509v3 Authority Key Identifier:
                keyid:26:29:24:3C:9E:8D:A7:B1:4D:0A:BD:25:66:0A:74:AC:40:81:C8:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/4/2629243C9E8DA7B14D0ABD25660A74AC4081C88B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c88f518-5118-4680-a0ba-d2cc67b27b07/edff5ee9c6c74e18ab3cd3244d38ecf6acc07c9835684cca08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/4/323630323a666137653a3a2f33362d3336203d3e203430353434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa7e::/36

    Signature Algorithm: sha256WithRSAEncryption
         6f:52:dd:ec:d2:d4:1d:dc:4c:72:52:09:9c:26:31:f7:8f:49:
         cf:56:5f:22:5f:eb:b8:51:14:1b:b4:15:1d:74:b8:67:77:ae:
         c8:b2:9b:4d:14:7c:34:b3:5d:69:ad:af:58:6b:66:ff:b1:2e:
         fd:0e:5b:8f:0e:34:51:4f:ab:42:34:d8:2c:84:49:bc:dc:3b:
         de:d1:a4:84:30:71:39:4d:da:49:2d:61:d2:b6:5b:68:97:e7:
         f8:25:19:72:b6:20:ba:28:e9:4e:80:5b:ef:57:36:bb:b1:0c:
         23:b0:0d:a3:5a:8c:b8:63:3e:b6:c4:2b:1c:5f:28:f3:57:71:
         4f:99:84:2e:2a:bc:a3:54:2f:b4:a8:e5:38:fc:8d:5f:d7:e1:
         86:63:f9:73:13:b0:e2:cb:a1:cd:5f:ef:fa:3b:82:ce:3f:cc:
         63:b5:07:f5:1d:b4:1d:7f:f7:2c:7f:05:71:4b:8a:8e:64:18:
         b0:54:99:60:00:4c:a5:36:00:ec:f5:92:55:26:75:21:91:64:
         ed:02:6b:f1:95:0a:8a:28:86:fd:43:29:40:3c:0e:ae:4d:6c:
         ed:86:11:34:f2:d9:96:d4:33:31:38:17:d0:5b:29:89:27:ed:
         f6:ba:2f:38:bc:b9:70:c0:ca:2b:09:bd:4a:41:1b:89:84:0b:
         6b:a1:3e:34
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgIUZtkUonlfDBkhCi0SXVxygU47Ul4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZWRmZjVlZTljNmM3NGUxOGFiM2NkMzI0NGQzOGVjZjZh
Y2MwN2M5ODM1Njg0Y2NhMDgwHhcNMjUwMzEyMTgxNDAyWhcNMjYwMzExMTgxOTAy
WjAzMTEwLwYDVQQDEyg1QzI2NTJBMTJEMEIxRUI4OTU3RThDMjc4RjI1OUNDRUQ0
ODg5QUNGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrdItlLR8Pa0
B30fEXOv63Itbp/cZ2fY9IMh70TgBdAnhQrtV06QRlw+IhGLqR3n+sl6omMie2w8
uXogFonFbDHXHtb3dTFIXIZnsFzbpGUZXwaD+CXcIGrmY7IucpjtpahXHOvDReot
cc8vxtZcoWqlFJBEIDqfyf4PrTntDv3rQ4ZbYCRdiHDH0Y1hAKaPjm5MElZEyz5n
svYGWeeifr4YVFyKB40KPA8J9lVN3ILDU9Wvqeg6Vuj9YZ04W6jNLw+QBbbEv3wJ
3UEYzDKLrZY70baB5po5BHjNEu2D/83vs449QRuoa5D2n1SlCadvpGteWOZWQmwJ
srWR08L+uwIDAQABo4ICfzCCAnswHQYDVR0OBBYEFFwmUqEtCx64lX6MJ48lnM7U
iJrPMB8GA1UdIwQYMBaAFCYpJDyejaexTQq9JWYKdKxAgciLMA4GA1UdDwEB/wQE
AwIHgDBuBgNVHR8EZzBlMGOgYaBfhl1yc3luYzovL3Jwa2ktMDEucGR4bmV0LnVr
L3JlcG8vcGFyYWRveG5ldHdvcmtzLzQvMjYyOTI0M0M5RThEQTdCMTREMEFCRDI1
NjYwQTc0QUM0MDgxQzg4Qi5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEF
BQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBr
aS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIw
Y2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1LzljODhmNTE4LTUxMTgtNDY4
MC1hMGJhLWQyY2M2N2IyN2IwNy9lZGZmNWVlOWM2Yzc0ZTE4YWIzY2QzMjQ0ZDM4
ZWNmNmFjYzA3Yzk4MzU2ODRjY2EwOC5jZXIwgYUGCCsGAQUFBwELBHkwdzB1Bggr
BgEFBQcwC4ZpcnN5bmM6Ly9ycGtpLTAxLnBkeG5ldC51ay9yZXBvL3BhcmFkb3hu
ZXR3b3Jrcy80LzMyMzYzMDMyM2E2NjYxMzc2NTNhM2EyZjMzMzYyZDMzMzYyMDNk
M2UyMDM0MzAzNTM0MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQmAvp+ADANBgkqhkiG9w0BAQsFAAOC
AQEAb1Ld7NLUHdxMclIJnCYx949Jz1ZfIl/ruFEUG7QVHXS4Z3euyLKbTRR8NLNd
aa2vWGtm/7Eu/Q5bjw40UU+rQjTYLIRJvNw73tGkhDBxOU3aSS1h0rZbaJfn+CUZ
crYguijpToBb71c2u7EMI7ANo1qMuGM+tsQrHF8o81dxT5mELiq8o1QvtKjlOPyN
X9fhhmP5cxOw4suhzV/v+juCzj/MY7UH9R20HX/3LH8FcUuKjmQYsFSZYABMpTYA
7PWSVSZ1IZFk7QJr8ZUKiiiG/UMpQDwOrk1s7YYRNPLZltQzMTgX0FspiSft9rov
OLy5cMDKKwm9SkEbiYQLa6E+NA==
-----END CERTIFICATE-----
Generated at Thu Apr 3 07:10:27 2025 by rpki-client