Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/7/3139322e36372e33322e302f32332d3332203d3e203532303235.roa
File:                     3139322e36372e33322e302f32332d3332203d3e203532303235.roa (raw, json)
Hash identifier:          zkVtE0WfV+Fwn0tQgQ5KR4l9aClA3aKxUq3YYzClvB8=
Subject key identifier:   68:D7:64:49:F9:9B:DC:40:2E:BF:DD:32:B9:F9:ED:AF:EE:39:13:8D
Certificate issuer:       /CN=716ED138312A679CA1B1F88B3EF7301163F16356
Certificate serial:       3784008F456C6822754C9D3503879A4032205722
Authority key identifier: 71:6E:D1:38:31:2A:67:9C:A1:B1:F8:8B:3E:F7:30:11:63:F1:63:56
Authority info access:    rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/716ED138312A679CA1B1F88B3EF7301163F16356.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/7/3139322e36372e33322e302f32332d3332203d3e203532303235.roa
Signing time:             Wed 28 May 2025 16:21:00 +0000
ROA not before:           Wed 28 May 2025 16:16:00 +0000
ROA not after:            Wed 27 May 2026 16:21:00 +0000
asID:                     52025
IP address blocks:        192.67.32.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/7/716ED138312A679CA1B1F88B3EF7301163F16356.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/7/716ED138312A679CA1B1F88B3EF7301163F16356.mft
                          rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/716ED138312A679CA1B1F88B3EF7301163F16356.cer
                          rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.crl
                          rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 03:15:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:84:00:8f:45:6c:68:22:75:4c:9d:35:03:87:9a:40:32:20:57:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=716ED138312A679CA1B1F88B3EF7301163F16356
        Validity
            Not Before: May 28 16:16:00 2025 GMT
            Not After : May 27 16:21:00 2026 GMT
        Subject: CN=68D76449F99BDC402EBFDD32B9F9EDAFEE39138D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:63:12:3e:09:e7:af:1e:0b:4d:c4:b1:ee:f7:
                    c5:1e:8f:f9:2c:12:24:9e:2c:29:a1:85:f3:24:89:
                    ff:b7:e6:60:4c:e5:82:ac:3c:eb:04:d1:94:54:69:
                    98:cc:ca:4f:be:cf:4c:6a:f7:88:0e:81:b5:2a:b3:
                    c9:37:06:70:bb:4e:97:66:8c:c1:b2:18:f1:08:7b:
                    80:8f:61:c7:b4:e8:95:fa:f3:fd:e2:49:32:2d:50:
                    92:d5:1f:9b:47:78:65:c1:2e:8c:97:51:e8:0b:ca:
                    94:67:29:cf:f0:dd:1a:8b:a1:c2:53:6a:5e:93:1c:
                    da:e4:90:ef:3e:0a:b5:4d:50:47:95:8b:36:f5:77:
                    00:58:c3:63:e0:cf:d4:9c:1f:7f:98:f7:6f:68:32:
                    d4:30:97:7c:a7:ec:75:43:98:f3:31:b2:be:f6:4b:
                    0d:c4:bd:2d:3f:6d:97:5b:14:84:3a:35:57:f2:51:
                    4a:91:2d:61:6f:3b:25:53:cb:f2:3f:6e:36:59:b0:
                    5b:e4:ac:1d:f3:e4:71:cb:b8:02:2e:fa:97:7d:50:
                    e9:ea:16:d3:08:c7:01:19:32:90:18:54:02:d1:b0:
                    3a:8a:37:b8:4b:84:2e:7d:a8:3b:44:20:12:00:8e:
                    66:60:6d:4b:aa:b5:cb:60:25:1a:2f:f1:11:07:b0:
                    f7:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:D7:64:49:F9:9B:DC:40:2E:BF:DD:32:B9:F9:ED:AF:EE:39:13:8D
            X509v3 Authority Key Identifier:
                keyid:71:6E:D1:38:31:2A:67:9C:A1:B1:F8:8B:3E:F7:30:11:63:F1:63:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/7/716ED138312A679CA1B1F88B3EF7301163F16356.crl

            Authority Information Access:
                CA Issuers - URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/716ED138312A679CA1B1F88B3EF7301163F16356.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/7/3139322e36372e33322e302f32332d3332203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.67.32.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ba:e4:49:c5:ed:c8:9d:62:c3:cc:cc:bd:f0:2c:44:d7:b0:ed:
         a5:ed:70:83:c1:0e:98:cd:4c:83:87:c9:51:89:a7:15:03:c8:
         78:1e:e9:45:f6:5d:34:38:1a:a7:88:c3:e2:ef:66:81:ae:78:
         c0:33:91:7c:b9:ec:97:57:4d:9f:cf:66:65:40:a6:f4:ba:8c:
         a3:d8:c2:df:38:de:8d:21:38:b5:dc:a1:d1:7b:bb:bb:5d:83:
         7a:88:6b:ef:a0:41:95:bc:e6:90:4c:ef:32:b5:14:c7:9c:d3:
         4c:1d:1b:6e:41:95:8a:8d:d3:90:a1:83:b2:a6:c6:62:c5:74:
         c0:12:79:91:05:70:c1:b3:a5:e7:12:23:b7:89:a8:f2:93:6b:
         b8:0d:c8:31:d5:8c:da:fe:34:2b:a1:8f:78:07:85:ee:12:98:
         96:56:b7:6e:61:ad:45:07:df:4b:b5:f2:64:7d:ec:6b:3f:42:
         9b:ab:84:86:05:36:b0:f4:ad:e3:a9:67:57:71:e2:89:03:76:
         87:b2:09:7d:56:3e:28:78:74:58:2f:d9:82:e7:e8:a0:6f:09:
         89:83:7c:c0:e5:c9:15:a5:13:8d:2c:9f:9a:b7:2b:6c:0d:77:
         f2:b8:12:74:00:89:ac:b2:f4:ae:c7:62:68:93:d7:4a:3a:48:
         a8:1f:33:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 12:26:09 2025 by rpki-client