Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/5/323630323a666261313a3961303a3a2f34342d3438203d3e203532303235.roa
File:                     323630323a666261313a3961303a3a2f34342d3438203d3e203532303235.roa (raw, json)
Hash identifier:          rR88o73AR6qmIo14aTyG2rp4Zbf7ccYWKKSTjrFo8O4=
Subject key identifier:   94:E0:27:04:0C:B9:14:73:C1:EE:7F:26:DB:F0:27:E5:5C:8E:60:CB
Certificate issuer:       /CN=5A96B8985A8E62FB1094248D3B5B4A3BB24369EC
Certificate serial:       068477525B55FA3FE8DE843573E87D20D136B8B6
Authority key identifier: 5A:96:B8:98:5A:8E:62:FB:10:94:24:8D:3B:5B:4A:3B:B2:43:69:EC
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/5A96B8985A8E62FB1094248D3B5B4A3BB24369EC.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/5/323630323a666261313a3961303a3a2f34342d3438203d3e203532303235.roa
Signing time:             Sun 24 Sep 2023 00:01:24 +0000
ROA not before:           Sat 23 Sep 2023 23:56:24 +0000
ROA not after:            Sun 22 Sep 2024 00:01:24 +0000
asID:                     52025
IP address blocks:        2602:fba1:9a0::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/5/5A96B8985A8E62FB1094248D3B5B4A3BB24369EC.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/5/5A96B8985A8E62FB1094248D3B5B4A3BB24369EC.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/5A96B8985A8E62FB1094248D3B5B4A3BB24369EC.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/6BEC1AED6508BB07511B01B177551792DAEB2C90.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/6BEC1AED6508BB07511B01B177551792DAEB2C90.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/c13035cd-c46d-421c-b9e0-e6d4dd336d21.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/c13035cd-c46d-421c-b9e0-e6d4dd336d21.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 18:36:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:84:77:52:5b:55:fa:3f:e8:de:84:35:73:e8:7d:20:d1:36:b8:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A96B8985A8E62FB1094248D3B5B4A3BB24369EC
        Validity
            Not Before: Sep 23 23:56:24 2023 GMT
            Not After : Sep 22 00:01:24 2024 GMT
        Subject: CN=94E027040CB91473C1EE7F26DBF027E55C8E60CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:0c:bb:0c:13:bc:1b:3f:e4:e8:72:c0:c4:76:
                    f8:fb:ee:22:45:7b:58:dd:84:39:9a:09:9e:0d:11:
                    40:5b:36:cc:bd:4b:80:94:d4:58:6e:85:a1:fe:c0:
                    8c:ba:10:31:57:0a:45:d7:d7:84:d1:64:5f:4d:87:
                    43:1c:94:c9:50:d3:75:85:34:dc:88:14:ee:73:ae:
                    7d:28:bf:a2:58:74:ca:9b:6b:e7:4e:7f:94:2e:7d:
                    d5:ef:5c:d8:80:a0:8e:3a:79:75:9e:b1:f4:e4:7a:
                    27:85:c0:e4:ce:97:9a:bd:d0:53:22:31:63:25:f5:
                    f2:4b:b8:64:01:12:ac:d9:d6:30:7b:13:29:42:95:
                    de:58:6a:8f:9d:57:b8:a1:0f:11:9e:d9:ac:eb:a1:
                    0b:9b:32:96:42:59:b5:e0:b4:f1:de:5a:8c:40:48:
                    ea:3c:0d:dd:ba:fe:16:5e:03:85:0b:7c:81:35:8c:
                    d1:f8:bf:a1:c4:4e:fa:05:de:56:5a:2b:e9:35:ee:
                    af:d8:91:32:de:e4:e0:c7:31:e0:53:83:1f:24:88:
                    3f:15:db:0d:39:36:5f:eb:06:90:e2:4a:60:59:1f:
                    27:8f:17:b9:8a:8d:68:89:6a:4b:6e:17:70:d8:42:
                    99:8a:03:8e:0d:10:d7:0a:45:32:b7:d6:41:98:d6:
                    57:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:E0:27:04:0C:B9:14:73:C1:EE:7F:26:DB:F0:27:E5:5C:8E:60:CB
            X509v3 Authority Key Identifier:
                keyid:5A:96:B8:98:5A:8E:62:FB:10:94:24:8D:3B:5B:4A:3B:B2:43:69:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/5/5A96B8985A8E62FB1094248D3B5B4A3BB24369EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/5A96B8985A8E62FB1094248D3B5B4A3BB24369EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/5/323630323a666261313a3961303a3a2f34342d3438203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fba1:9a0::/44

    Signature Algorithm: sha256WithRSAEncryption
         76:bc:46:ac:83:a8:a6:a8:d8:02:2a:9f:76:80:a4:5d:15:7c:
         d1:4a:7b:9f:ac:40:dc:27:64:e0:6a:88:b3:11:02:69:d4:a0:
         62:e6:f8:83:61:d3:7a:0e:b9:87:9c:f3:b2:d0:a0:db:9d:12:
         84:3a:4f:e4:ad:09:e8:c0:36:18:3e:22:ff:1e:36:64:28:c7:
         19:34:1c:de:fb:3d:50:fb:36:83:7e:08:a7:09:67:3e:0a:f2:
         83:6f:97:a6:56:5b:0b:f7:bf:7a:90:49:a5:c7:18:66:eb:bf:
         3e:b6:55:2d:32:34:25:e7:1c:cb:d9:27:48:f9:a1:6b:a7:f3:
         cc:49:04:2a:e1:6c:9b:a3:a8:b6:c8:44:28:48:97:68:d9:b1:
         2c:74:ec:1d:85:92:c1:18:99:15:ba:f1:21:e2:56:88:89:fb:
         be:44:62:e1:91:3d:ef:29:38:35:41:de:67:40:89:ec:68:e8:
         81:06:c6:6f:8c:25:05:1f:23:04:e0:87:2d:b6:56:a1:f0:34:
         30:cb:92:5e:69:95:9b:a6:b1:e2:f3:9b:70:79:6f:a0:81:f8:
         0c:5d:b7:33:ce:19:dd:6c:71:e1:50:77:df:57:84:96:b7:84:
         6a:21:8e:d6:4b:5a:57:c8:c9:b1:47:32:48:e7:64:c4:e3:8f:
         a0:2d:cc:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 22:25:48 2024 by rpki-client on console-ams.rpki-client.org