Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/7/3139322e36372e33322e302f32332d3332203d3e203532303235.roa
File:                     3139322e36372e33322e302f32332d3332203d3e203532303235.roa (raw, json)
Hash identifier:          jfjZjS7RO/Jrp+ifl2pYUDezKNo1/3c/aa2yao9G9WQ=
Subject key identifier:   DC:B2:77:73:35:D1:2F:25:36:C3:0A:46:A1:8B:20:05:E6:EE:BA:05
Certificate issuer:       /CN=716ED138312A679CA1B1F88B3EF7301163F16356
Certificate serial:       7DB77E36C0B7E4A101F10A6672995E4BD7C5B505
Authority key identifier: 71:6E:D1:38:31:2A:67:9C:A1:B1:F8:8B:3E:F7:30:11:63:F1:63:56
Authority info access:    rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/716ED138312A679CA1B1F88B3EF7301163F16356.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/7/3139322e36372e33322e302f32332d3332203d3e203532303235.roa
Signing time:             Wed 26 Jun 2024 16:07:40 +0000
ROA not before:           Wed 26 Jun 2024 16:02:40 +0000
ROA not after:            Wed 25 Jun 2025 16:07:40 +0000
asID:                     52025
IP address blocks:        192.67.32.0/23 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/7/716ED138312A679CA1B1F88B3EF7301163F16356.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/7/716ED138312A679CA1B1F88B3EF7301163F16356.mft
                          rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/716ED138312A679CA1B1F88B3EF7301163F16356.cer
                          rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.crl
                          rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Sep 2024 12:53:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:b7:7e:36:c0:b7:e4:a1:01:f1:0a:66:72:99:5e:4b:d7:c5:b5:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=716ED138312A679CA1B1F88B3EF7301163F16356
        Validity
            Not Before: Jun 26 16:02:40 2024 GMT
            Not After : Jun 25 16:07:40 2025 GMT
        Subject: CN=DCB2777335D12F2536C30A46A18B2005E6EEBA05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:e9:bd:4e:fb:e3:a3:a2:c9:86:cd:8c:11:70:
                    13:c3:ca:a8:91:07:1f:c3:90:9f:0e:1a:10:8c:fe:
                    77:0a:5b:65:d1:2e:56:73:de:6c:98:25:78:9b:b5:
                    cf:97:93:06:67:87:68:fd:55:b8:4d:72:b3:ac:fa:
                    4d:5f:8a:42:99:69:b7:99:af:3f:74:8c:cb:bb:40:
                    6d:02:84:6f:bb:01:f5:70:4c:fa:ad:3b:d4:0e:30:
                    13:f0:d6:6f:47:ec:a3:36:78:b4:b0:5f:9c:c4:8c:
                    40:01:06:d7:cb:0b:4b:68:8f:30:72:11:57:dd:3d:
                    23:ef:99:37:eb:f4:b3:d7:b6:bb:da:8f:b3:50:e3:
                    e4:4e:74:94:b4:76:37:5c:7c:b2:44:ed:75:c3:b3:
                    5d:91:e7:df:7b:5f:df:87:8f:48:db:8a:07:de:31:
                    94:24:c9:07:17:44:90:63:9c:7a:48:44:4c:b1:45:
                    02:a2:04:23:aa:a0:b0:55:38:a8:3f:be:d8:22:fd:
                    88:1d:de:90:cd:76:fc:de:10:37:36:df:ca:03:0b:
                    58:62:04:0c:00:d6:fd:b2:dd:85:54:d4:e3:71:cc:
                    31:6d:34:b8:ac:79:1c:28:47:b4:e1:ea:04:9b:e0:
                    7a:42:cd:97:29:03:25:11:61:f9:13:d5:12:2c:c1:
                    a2:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:B2:77:73:35:D1:2F:25:36:C3:0A:46:A1:8B:20:05:E6:EE:BA:05
            X509v3 Authority Key Identifier:
                keyid:71:6E:D1:38:31:2A:67:9C:A1:B1:F8:8B:3E:F7:30:11:63:F1:63:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/7/716ED138312A679CA1B1F88B3EF7301163F16356.crl

            Authority Information Access:
                CA Issuers - URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/716ED138312A679CA1B1F88B3EF7301163F16356.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/7/3139322e36372e33322e302f32332d3332203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.67.32.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c4:d8:03:44:34:a2:bc:aa:fc:09:a9:99:68:37:b5:90:b5:01:
         4f:88:83:e1:bb:d9:41:07:26:d5:25:69:a6:40:33:c1:c1:a7:
         5d:08:ec:1f:b6:80:45:31:48:5f:92:3a:03:fd:42:0d:04:a5:
         ff:3f:51:ca:db:0b:2f:f0:93:5a:60:ca:df:4d:d7:e2:51:8c:
         5a:64:d8:58:49:15:c2:9d:ab:55:38:19:2d:be:1e:c9:78:b1:
         1f:81:cd:30:0d:89:b5:8b:4b:6d:4c:02:76:0b:17:df:d6:2f:
         37:9f:69:5f:c7:1d:b8:6a:63:b2:db:b8:5f:e0:7b:c6:7c:c5:
         4d:e3:90:7b:c7:c9:0b:80:c5:f0:50:59:e5:52:e2:e0:84:62:
         91:7c:86:69:ac:ae:9a:a9:59:71:07:ff:fe:7e:f8:51:4c:f5:
         aa:63:72:ba:42:55:82:df:55:dd:d1:6c:26:4b:63:50:b4:e0:
         84:81:df:da:68:ac:61:89:e3:16:fd:ae:66:13:7e:f8:72:e9:
         1c:1b:0d:8d:09:c0:ee:ed:8e:1f:a0:f4:52:30:3b:2f:b6:54:
         dd:4d:37:c1:f1:78:88:e5:0c:2b:17:d5:aa:51:ee:81:b9:49:
         02:24:a8:28:0d:c7:73:d4:12:78:46:4e:d4:8e:eb:94:d1:77:
         f5:41:11:eb
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgIUfbd+NsC35KEB8QpmcpleS9fFtQUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzE2RUQxMzgzMTJBNjc5Q0ExQjFGODhCM0VGNzMwMTE2
M0YxNjM1NjAeFw0yNDA2MjYxNjAyNDBaFw0yNTA2MjUxNjA3NDBaMDMxMTAvBgNV
BAMTKERDQjI3NzczMzVEMTJGMjUzNkMzMEE0NkExOEIyMDA1RTZFRUJBMDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCU6b1O++OjosmGzYwRcBPDyqiR
Bx/DkJ8OGhCM/ncKW2XRLlZz3myYJXibtc+XkwZnh2j9VbhNcrOs+k1fikKZabeZ
rz90jMu7QG0ChG+7AfVwTPqtO9QOMBPw1m9H7KM2eLSwX5zEjEABBtfLC0tojzBy
EVfdPSPvmTfr9LPXtrvaj7NQ4+ROdJS0djdcfLJE7XXDs12R5997X9+Hj0jbigfe
MZQkyQcXRJBjnHpIREyxRQKiBCOqoLBVOKg/vtgi/Ygd3pDNdvzeEDc238oDC1hi
BAwA1v2y3YVU1ONxzDFtNLiseRwoR7Th6gSb4HpCzZcpAyURYfkT1RIswaKzAgMB
AAGjggITMIICDzAdBgNVHQ4EFgQU3LJ3czXRLyU2wwpGoYsgBebuugUwHwYDVR0j
BBgwFoAUcW7RODEqZ5yhsfiLPvcwEWPxY1YwDgYDVR0PAQH/BAQDAgeAMG4GA1Ud
HwRnMGUwY6BhoF+GXXJzeW5jOi8vcnBraS0wMS5wZHhuZXQudWsvcmVwby9wYXJh
ZG94bmV0d29ya3MvNy83MTZFRDEzODMxMkE2NzlDQTFCMUY4OEIzRUY3MzAxMTYz
RjE2MzU2LmNybDCBiQYIKwYBBQUHAQEEfTB7MHkGCCsGAQUFBzAChm1yc3luYzov
L2tyaWxsLmFjY3VyaXN0ZWNobm9sb2dpZXMuY2EvcmVwby9BY2N1cmlzLVRlY2hu
b2xvZ2llcy8wLzcxNkVEMTM4MzEyQTY3OUNBMUIxRjg4QjNFRjczMDExNjNGMTYz
NTYuY2VyMIGFBggrBgEFBQcBCwR5MHcwdQYIKwYBBQUHMAuGaXJzeW5jOi8vcnBr
aS0wMS5wZHhuZXQudWsvcmVwby9wYXJhZG94bmV0d29ya3MvNy8zMTM5MzIyZTM2
MzcyZTMzMzIyZTMwMmYzMjMzMmQzMzMyMjAzZDNlMjAzNTMyMzAzMjM1LnJvYTAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA
ATAGAwQBwEMgMA0GCSqGSIb3DQEBCwUAA4IBAQDE2ANENKK8qvwJqZloN7WQtQFP
iIPhu9lBBybVJWmmQDPBwaddCOwftoBFMUhfkjoD/UINBKX/P1HK2wsv8JNaYMrf
TdfiUYxaZNhYSRXCnatVOBktvh7JeLEfgc0wDYm1i0ttTAJ2Cxff1i83n2lfxx24
amOy27hf4HvGfMVN45B7x8kLgMXwUFnlUuLghGKRfIZprK6aqVlxB//+fvhRTPWq
Y3K6QlWC31Xd0WwmS2NQtOCEgd/aaKxhieMW/a5mE374cukcGw2NCcDu7Y4foPRS
MDsvtlTdTTfB8XiI5QwrF9WqUe6BuUkCJKgoDcdz1BJ4Rk7UjuuU0Xf1QRHr
-----END CERTIFICATE-----
Generated at Sat Sep 7 23:58:09 2024 by rpki-client on console-ams.rpki-client.org