Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a313031333a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a313031333a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          NZ60jN1VdpTgkhQBiCBG+YuUP1ag+pmVry6U/uM18I0=
Subject key identifier:   75:81:81:85:29:17:51:06:6F:E5:35:C9:DD:12:3B:45:7A:30:E1:0C
Certificate issuer:       /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial:       4D7885BEAC7EE952F31057E18B8C236175A1A9EB
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a313031333a3a2f34382d313238203d3e203532303235.roa
Signing time:             Thu 03 Jul 2025 15:54:11 +0000
ROA not before:           Thu 03 Jul 2025 15:49:11 +0000
ROA not after:            Thu 02 Jul 2026 15:54:11 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:1013::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 02:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:78:85:be:ac:7e:e9:52:f3:10:57:e1:8b:8c:23:61:75:a1:a9:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
        Validity
            Not Before: Jul  3 15:49:11 2025 GMT
            Not After : Jul  2 15:54:11 2026 GMT
        Subject: CN=75818185291751066FE535C9DD123B457A30E10C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:c1:62:95:fb:78:fa:2e:21:08:c6:ba:7c:9e:
                    da:58:a3:e7:3f:6c:f3:94:33:da:6a:8d:ff:4e:37:
                    fb:75:ec:f4:55:38:c3:aa:94:0a:1f:97:61:5c:03:
                    6f:35:f3:83:c3:6c:0a:26:48:56:6c:63:57:bc:3b:
                    d0:9a:9e:0c:0b:5a:f4:ee:9e:14:3e:49:64:c2:f0:
                    1a:fb:7a:95:19:43:50:6c:41:00:e0:e8:d3:4b:cc:
                    45:f1:91:52:85:b4:34:25:bc:89:fa:80:3b:59:80:
                    72:ba:dd:17:2c:ac:8d:3e:00:50:34:f3:b8:b6:18:
                    52:0a:15:44:25:4f:f5:5d:c6:6c:a5:55:48:87:c3:
                    a5:2c:8a:26:5e:6d:78:59:77:0c:4b:e0:36:7f:75:
                    2c:41:db:45:c4:08:71:51:49:b2:76:09:96:06:dc:
                    84:3f:06:07:80:0d:8b:77:e1:ca:32:21:eb:83:a3:
                    c9:2d:a7:2e:9a:f0:12:48:45:57:e9:0b:cc:3d:e1:
                    2d:25:2e:3f:a4:00:31:2c:9a:5c:f6:88:9b:7c:2c:
                    53:2b:56:be:4c:58:0e:96:84:91:e2:12:59:22:9d:
                    ca:d1:63:ce:1d:bd:f9:ca:f5:c9:04:a9:15:66:be:
                    78:42:37:4c:c5:28:7e:ec:8a:31:36:78:90:d7:31:
                    b5:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:81:81:85:29:17:51:06:6F:E5:35:C9:DD:12:3B:45:7A:30:E1:0C
            X509v3 Authority Key Identifier:
                keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a313031333a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:1013::/48

    Signature Algorithm: sha256WithRSAEncryption
         23:17:6f:b0:35:c2:c8:c6:9f:a9:47:4f:48:6c:15:c0:af:78:
         20:6d:cc:59:7e:00:a9:6a:be:9a:0a:c2:b1:8d:68:7b:f9:a3:
         3e:3b:be:42:11:91:b9:f6:a0:b3:40:69:7a:49:80:96:bc:51:
         5b:88:ee:13:10:a4:de:e8:3b:3b:7f:b6:d6:0a:42:7a:e1:02:
         0a:2e:dc:59:12:02:ae:02:d3:f1:aa:ba:b4:3c:a2:e7:c3:f2:
         f4:88:4e:fc:6c:1b:8b:28:56:90:e1:50:5a:6c:31:ec:ad:b7:
         30:6f:93:c5:5c:9d:48:97:85:6e:ca:15:7f:95:a6:85:f0:aa:
         70:66:88:cb:01:9a:27:54:f5:f9:c6:7e:a2:51:d7:21:05:0e:
         37:8d:c4:84:49:55:bc:77:87:0a:52:aa:25:84:5a:13:14:02:
         4c:72:8b:15:e7:6a:cb:74:44:a3:27:f0:d2:58:79:87:ab:bc:
         45:74:70:76:d2:5c:2e:31:92:c3:2f:da:5c:ee:ac:d6:a9:c1:
         44:c0:f5:30:13:d5:20:ee:b1:b8:31:94:c0:9e:47:47:52:01:
         15:50:53:0b:42:1b:ed:9f:f8:ad:d6:e2:0a:fd:2f:db:52:94:
         ca:34:b2:60:2e:74:81:71:76:d7:61:66:dc:db:45:03:56:73:
         68:35:9c:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 11:45:37 2025 by rpki-client