Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/4/323630323a666137653a3a2f33362d3336203d3e203430353434.roa
File:                     323630323a666137653a3a2f33362d3336203d3e203430353434.roa (raw, json)
Hash identifier:          wwmBBw8lBNVVGt28Hf7FY6OxDxUHKrt+yHLhEei1jcU=
Subject key identifier:   85:ED:00:FF:99:89:68:B3:2E:E5:4C:23:1F:95:23:F5:CC:8E:BB:E8
Certificate issuer:       /CN=edff5ee9c6c74e18ab3cd3244d38ecf6acc07c9835684cca08
Certificate serial:       194D59E44738F0B6A9655324AE60CF499E782874
Authority key identifier: 26:29:24:3C:9E:8D:A7:B1:4D:0A:BD:25:66:0A:74:AC:40:81:C8:8B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c88f518-5118-4680-a0ba-d2cc67b27b07/edff5ee9c6c74e18ab3cd3244d38ecf6acc07c9835684cca08.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/4/323630323a666137653a3a2f33362d3336203d3e203430353434.roa
Signing time:             Wed 10 Apr 2024 18:14:17 +0000
ROA not before:           Wed 10 Apr 2024 18:09:17 +0000
ROA not after:            Wed 09 Apr 2025 18:14:17 +0000
asID:                     40544
IP address blocks:        2602:fa7e::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/4/2629243C9E8DA7B14D0ABD25660A74AC4081C88B.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/4/2629243C9E8DA7B14D0ABD25660A74AC4081C88B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c88f518-5118-4680-a0ba-d2cc67b27b07/edff5ee9c6c74e18ab3cd3244d38ecf6acc07c9835684cca08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c88f518-5118-4680-a0ba-d2cc67b27b07/9c88f518-5118-4680-a0ba-d2cc67b27b07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c88f518-5118-4680-a0ba-d2cc67b27b07/9c88f518-5118-4680-a0ba-d2cc67b27b07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c88f518-5118-4680-a0ba-d2cc67b27b07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 00:24:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:4d:59:e4:47:38:f0:b6:a9:65:53:24:ae:60:cf:49:9e:78:28:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edff5ee9c6c74e18ab3cd3244d38ecf6acc07c9835684cca08
        Validity
            Not Before: Apr 10 18:09:17 2024 GMT
            Not After : Apr  9 18:14:17 2025 GMT
        Subject: CN=85ED00FF998968B32EE54C231F9523F5CC8EBBE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:ef:31:e3:e1:3c:d7:d1:59:07:fd:81:60:70:
                    6c:1e:b6:ba:48:1d:b4:63:2f:31:03:2d:34:b2:42:
                    83:14:0d:24:07:53:fb:c0:ee:0c:19:7f:fe:d7:08:
                    92:5c:e5:a4:60:6c:c7:eb:4e:c7:8f:28:08:6f:74:
                    ad:28:42:e8:ab:d8:14:81:ce:af:b7:7b:06:cf:64:
                    15:92:37:fa:b3:7b:97:d0:1c:75:97:cf:ad:39:ca:
                    a3:12:42:f1:61:e0:d5:82:ea:9b:46:c5:ef:a7:02:
                    ab:0e:c0:9c:b7:2a:c2:e4:c5:ad:11:3c:b9:3d:8f:
                    a4:5d:9c:60:e1:68:9d:39:e8:88:b2:97:19:f5:ac:
                    de:f6:65:59:c4:bd:26:43:f4:91:b0:4d:bc:0f:04:
                    71:bd:8c:4f:90:f3:c2:02:3b:6a:12:b3:01:70:8d:
                    d9:bf:79:21:47:92:90:1f:83:65:80:9f:df:dc:e8:
                    30:d9:2b:69:e9:56:f2:b9:7c:29:17:f6:2c:08:bc:
                    63:c3:9f:65:38:df:fd:53:3c:0a:72:5d:e1:a8:45:
                    fb:73:fc:59:a9:12:2c:b3:3a:e9:c9:3e:3f:4a:96:
                    c4:38:e4:4f:96:b9:c1:4a:2e:46:50:0b:b9:24:2b:
                    53:05:44:5c:99:7c:b4:58:3e:a2:1f:1a:c6:d0:47:
                    f3:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:ED:00:FF:99:89:68:B3:2E:E5:4C:23:1F:95:23:F5:CC:8E:BB:E8
            X509v3 Authority Key Identifier:
                keyid:26:29:24:3C:9E:8D:A7:B1:4D:0A:BD:25:66:0A:74:AC:40:81:C8:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/4/2629243C9E8DA7B14D0ABD25660A74AC4081C88B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c88f518-5118-4680-a0ba-d2cc67b27b07/edff5ee9c6c74e18ab3cd3244d38ecf6acc07c9835684cca08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/4/323630323a666137653a3a2f33362d3336203d3e203430353434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa7e::/36

    Signature Algorithm: sha256WithRSAEncryption
         3c:0b:7f:7d:e5:bd:76:0d:6a:4e:03:9c:9f:b7:5d:14:a8:f6:
         97:9a:a5:e1:a4:65:73:e0:e5:d5:bd:43:32:26:cf:04:d4:bd:
         ed:6a:0f:6b:d2:45:7e:bd:2d:86:0a:aa:d9:3e:8b:4a:5e:bb:
         59:54:ad:af:99:10:24:96:8e:2d:53:ac:6e:d7:77:c6:a9:12:
         7a:27:8b:54:b3:27:e2:e1:34:1d:9f:e1:cc:be:cb:e0:56:00:
         43:fb:5d:48:6e:a9:df:c3:69:18:19:ff:14:03:a8:3d:1a:61:
         32:42:c2:c2:ea:1d:d4:dc:cf:22:66:f4:68:1f:57:9f:f4:33:
         e2:66:68:3e:ba:ea:87:e6:53:94:41:6d:8f:66:34:3a:62:e1:
         c2:92:80:da:c5:d5:76:fa:8c:62:a3:cb:0e:54:da:82:72:ec:
         b8:e4:5c:bc:4d:52:43:df:78:58:35:0e:79:ef:88:2e:cc:60:
         d4:aa:a2:e0:17:6b:32:ef:1e:c6:22:e5:43:32:7e:43:77:3e:
         fb:e8:1a:1f:0b:9a:79:11:6c:9f:21:f0:90:0e:27:84:2e:aa:
         cf:24:58:ee:66:f0:13:87:b0:f7:c1:42:99:95:80:58:a2:dd:
         5e:f0:ae:7e:ef:d3:8c:46:a3:22:4b:72:de:0d:bd:ff:a8:be:
         51:6d:29:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 23:52:24 2024 by rpki-client on console-ams.rpki-client.org