Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/5/323630323a666261313a3961303a3a2f34342d3438203d3e203532303235.roa
File:                     323630323a666261313a3961303a3a2f34342d3438203d3e203532303235.roa (raw, json)
Hash identifier:          f+NkaHP3OncQ6XYJ/GcRKzWWfLRpAYu7H1F4AiW5/1A=
Subject key identifier:   CA:3A:BE:7C:7D:6E:13:0C:15:20:60:3C:D1:53:7D:BD:DF:FA:DD:41
Certificate issuer:       /CN=5A96B8985A8E62FB1094248D3B5B4A3BB24369EC
Certificate serial:       53D27C13583073B8B7750EB999262A454AF02FE5
Authority key identifier: 5A:96:B8:98:5A:8E:62:FB:10:94:24:8D:3B:5B:4A:3B:B2:43:69:EC
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/5A96B8985A8E62FB1094248D3B5B4A3BB24369EC.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/5/323630323a666261313a3961303a3a2f34342d3438203d3e203532303235.roa
Signing time:             Sun 25 Aug 2024 00:16:59 +0000
ROA not before:           Sun 25 Aug 2024 00:11:59 +0000
ROA not after:            Sun 24 Aug 2025 00:16:59 +0000
asID:                     52025
IP address blocks:        2602:fba1:9a0::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/5/5A96B8985A8E62FB1094248D3B5B4A3BB24369EC.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/5/5A96B8985A8E62FB1094248D3B5B4A3BB24369EC.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/5A96B8985A8E62FB1094248D3B5B4A3BB24369EC.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/6BEC1AED6508BB07511B01B177551792DAEB2C90.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/6BEC1AED6508BB07511B01B177551792DAEB2C90.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/c13035cd-c46d-421c-b9e0-e6d4dd336d21.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/c13035cd-c46d-421c-b9e0-e6d4dd336d21.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 21 Nov 2024 22:58:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:d2:7c:13:58:30:73:b8:b7:75:0e:b9:99:26:2a:45:4a:f0:2f:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A96B8985A8E62FB1094248D3B5B4A3BB24369EC
        Validity
            Not Before: Aug 25 00:11:59 2024 GMT
            Not After : Aug 24 00:16:59 2025 GMT
        Subject: CN=CA3ABE7C7D6E130C1520603CD1537DBDDFFADD41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:9a:ed:5d:ff:fd:25:b2:a6:8d:e3:a6:fc:3e:
                    57:b4:f2:2a:ef:14:4d:55:ba:ef:10:88:26:35:1e:
                    ef:48:00:e7:43:34:98:45:d3:f3:f3:ed:05:39:66:
                    4e:0f:9c:e4:7c:3a:ee:cf:7f:fe:c0:81:d6:70:47:
                    14:7f:77:c3:db:bb:9f:a8:bc:b4:66:b5:8b:78:6c:
                    ce:09:d1:86:82:1a:6d:15:72:56:78:f9:02:c2:bf:
                    6b:30:fb:6b:56:b1:00:1a:03:89:5e:b8:43:db:37:
                    da:ea:6d:e2:ed:63:e3:1b:f2:41:05:6e:a1:f2:cb:
                    ee:00:b2:ed:11:8d:a6:8f:0c:9b:f3:ff:14:8e:26:
                    bd:e3:e9:ed:d9:c6:0e:77:bc:31:95:6b:f0:bd:17:
                    1c:d1:66:36:c9:09:02:47:9c:e5:f8:25:cd:f0:be:
                    fa:ef:89:8b:47:6f:38:91:15:78:d1:e4:1c:93:09:
                    6e:73:ff:34:8e:c3:5e:54:b2:c3:43:64:e2:bd:56:
                    0f:3a:eb:be:a4:bf:f7:e5:eb:14:aa:36:e4:f4:f7:
                    37:97:62:16:46:23:6c:75:d5:ef:39:89:58:3a:73:
                    18:ca:74:a7:d9:b6:27:2a:a3:9d:d0:ff:50:40:04:
                    22:25:62:f1:34:01:f5:58:04:95:86:4e:57:8f:41:
                    81:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:3A:BE:7C:7D:6E:13:0C:15:20:60:3C:D1:53:7D:BD:DF:FA:DD:41
            X509v3 Authority Key Identifier:
                keyid:5A:96:B8:98:5A:8E:62:FB:10:94:24:8D:3B:5B:4A:3B:B2:43:69:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/5/5A96B8985A8E62FB1094248D3B5B4A3BB24369EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/5A96B8985A8E62FB1094248D3B5B4A3BB24369EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/5/323630323a666261313a3961303a3a2f34342d3438203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fba1:9a0::/44

    Signature Algorithm: sha256WithRSAEncryption
         11:bd:61:61:3f:00:9a:3a:33:83:d9:28:31:1a:6e:69:af:61:
         59:1c:49:33:03:53:30:2a:3a:69:92:b9:6a:09:ab:34:d3:d6:
         1a:da:2f:14:ac:d2:a9:9b:ea:41:63:e2:d1:bb:76:8d:e4:d7:
         fb:f7:aa:d6:19:83:5d:ae:a1:55:a8:e6:c4:d2:27:09:b3:95:
         a2:62:57:2a:e1:4d:98:7b:10:c0:e0:e7:79:52:a2:1d:09:52:
         e3:6e:1e:d1:77:e4:87:f6:91:8e:3b:72:29:28:99:85:6f:7b:
         8e:37:11:64:0c:42:42:51:ed:41:59:a0:48:06:b0:57:b8:ef:
         60:0b:0a:15:48:2d:1c:6d:1f:21:1c:f9:25:09:85:b5:b4:fb:
         47:ab:84:be:d0:54:3b:ed:4e:93:a1:c1:71:36:06:8c:04:6d:
         d1:9f:12:e7:9c:64:7b:d8:94:43:df:0f:af:1a:21:59:77:0c:
         f7:c7:4c:2d:ef:15:97:15:5b:27:ce:94:ab:72:a3:33:12:c1:
         6c:3c:21:8f:7c:83:fd:e8:a5:a1:0b:b2:d5:7f:87:b6:e1:86:
         dc:6a:8d:93:57:e6:51:99:2c:a5:b9:c5:ee:43:34:0e:49:f1:
         38:b0:24:d4:06:9e:c7:58:36:4c:12:1e:8b:5b:98:3e:a6:4b:
         1f:95:ae:84
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgIUU9J8E1gwc7i3dQ65mSYqRUrwL+UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUE5NkI4OTg1QThFNjJGQjEwOTQyNDhEM0I1QjRBM0JC
MjQzNjlFQzAeFw0yNDA4MjUwMDExNTlaFw0yNTA4MjQwMDE2NTlaMDMxMTAvBgNV
BAMTKENBM0FCRTdDN0Q2RTEzMEMxNTIwNjAzQ0QxNTM3REJEREZGQURENDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDemu1d//0lsqaN46b8Ple08irv
FE1Vuu8QiCY1Hu9IAOdDNJhF0/Pz7QU5Zk4PnOR8Ou7Pf/7AgdZwRxR/d8Pbu5+o
vLRmtYt4bM4J0YaCGm0VclZ4+QLCv2sw+2tWsQAaA4leuEPbN9rqbeLtY+Mb8kEF
bqHyy+4Asu0RjaaPDJvz/xSOJr3j6e3Zxg53vDGVa/C9FxzRZjbJCQJHnOX4Jc3w
vvrviYtHbziRFXjR5ByTCW5z/zSOw15UssNDZOK9Vg86676kv/fl6xSqNuT09zeX
YhZGI2x11e85iVg6cxjKdKfZticqo53Q/1BABCIlYvE0AfVYBJWGTlePQYERAgMB
AAGjggIPMIICCzAdBgNVHQ4EFgQUyjq+fH1uEwwVIGA80VN9vd/63UEwHwYDVR0j
BBgwFoAUWpa4mFqOYvsQlCSNO1tKO7JDaewwDgYDVR0PAQH/BAQDAgeAMG4GA1Ud
HwRnMGUwY6BhoF+GXXJzeW5jOi8vcnBraS0wMS5wZHhuZXQudWsvcmVwby9wYXJh
ZG94bmV0d29ya3MvNS81QTk2Qjg5ODVBOEU2MkZCMTA5NDI0OEQzQjVCNEEzQkIy
NDM2OUVDLmNybDB6BggrBgEFBQcBAQRuMGwwagYIKwYBBQUHMAKGXnJzeW5jOi8v
Y2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8vQ0xPVURJRS1SUEtJLzIvNUE5NkI4
OTg1QThFNjJGQjEwOTQyNDhEM0I1QjRBM0JCMjQzNjlFQy5jZXIwgY4GCCsGAQUF
BwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS0wMS5wZHhuZXQudWsv
cmVwby9wYXJhZG94bmV0d29ya3MvNS8zMjM2MzAzMjNhNjY2MjYxMzEzYTM5NjEz
MDNhM2EyZjM0MzQyZDM0MzgyMDNkM2UyMDM1MzIzMDMyMzUucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQm
AvuhCaAwDQYJKoZIhvcNAQELBQADggEBABG9YWE/AJo6M4PZKDEabmmvYVkcSTMD
UzAqOmmSuWoJqzTT1hraLxSs0qmb6kFj4tG7do3k1/v3qtYZg12uoVWo5sTSJwmz
laJiVyrhTZh7EMDg53lSoh0JUuNuHtF35If2kY47cikomYVve443EWQMQkJR7UFZ
oEgGsFe472ALChVILRxtHyEc+SUJhbW0+0erhL7QVDvtTpOhwXE2BowEbdGfEuec
ZHvYlEPfD68aIVl3DPfHTC3vFZcVWyfOlKtyozMSwWw8IY98g/3opaELstV/h7bh
htxqjZNX5lGZLKW5xe5DNA5J8TiwJNQGnsdYNkwSHotbmD6mSx+VroQ=
-----END CERTIFICATE-----
Generated at Thu Nov 21 00:19:40 2024 by rpki-client on console-fra.rpki-client.org