Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a3131663a3a2f34382d3438203d3e203532303235.roa
File:                     326130353a646663343a3131663a3a2f34382d3438203d3e203532303235.roa (raw, json)
Hash identifier:          9M/WBFgZjjaLcFBi868aWsDunGV3YEak4ZNMlnC/uBk=
Subject key identifier:   B1:4D:D8:7F:E1:DA:D9:C5:07:30:EE:A3:4C:3B:F0:32:B9:15:3C:91
Certificate issuer:       /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial:       4071C271B9C1A6D32AE72F9886FA186A8AD74B99
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a3131663a3a2f34382d3438203d3e203532303235.roa
Signing time:             Thu 03 Jul 2025 15:54:06 +0000
ROA not before:           Thu 03 Jul 2025 15:49:06 +0000
ROA not after:            Thu 02 Jul 2026 15:54:06 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:11f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 02:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:71:c2:71:b9:c1:a6:d3:2a:e7:2f:98:86:fa:18:6a:8a:d7:4b:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
        Validity
            Not Before: Jul  3 15:49:06 2025 GMT
            Not After : Jul  2 15:54:06 2026 GMT
        Subject: CN=B14DD87FE1DAD9C50730EEA34C3BF032B9153C91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:9a:15:f8:0a:31:68:3c:97:a0:a0:3b:6b:87:
                    0e:da:57:00:5f:e8:2e:e4:6a:ef:ee:53:4c:bb:97:
                    e4:2b:61:fd:dd:a1:61:85:ae:8b:8f:eb:9b:68:06:
                    15:93:27:b5:b9:e1:1f:9f:6d:05:6e:fa:7b:17:9d:
                    67:5f:f4:a1:11:44:94:ea:52:54:09:ff:8a:e0:a0:
                    57:e4:85:12:52:f5:aa:fd:a7:3a:6f:74:11:fb:e1:
                    0d:dc:68:54:f4:35:58:e1:eb:31:04:42:fc:25:02:
                    47:b9:1f:ee:99:31:a5:8c:c1:f5:ab:25:0c:22:0f:
                    a8:ce:c3:24:aa:9a:5e:1b:04:bf:8c:70:c6:52:e7:
                    cb:18:cd:e0:c2:89:98:e9:ae:eb:1a:55:65:ed:2c:
                    1e:5c:29:0b:2c:7a:1f:00:53:99:14:90:fa:93:34:
                    f8:7f:e1:a4:ea:31:da:6b:0c:ae:e9:4c:9e:13:c9:
                    86:45:34:6b:d4:f8:ee:d6:ed:cf:fc:cf:39:73:50:
                    21:24:bf:42:77:66:5b:e5:26:80:73:bd:02:96:55:
                    06:1f:48:c4:7a:29:44:82:28:04:8f:b8:96:b9:51:
                    ae:e4:98:de:78:19:7c:ee:7f:9d:41:8f:79:49:9e:
                    ab:8d:f7:64:51:d7:38:f4:ac:be:a5:77:d3:b7:e2:
                    20:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:4D:D8:7F:E1:DA:D9:C5:07:30:EE:A3:4C:3B:F0:32:B9:15:3C:91
            X509v3 Authority Key Identifier:
                keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a3131663a3a2f34382d3438203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:11f::/48

    Signature Algorithm: sha256WithRSAEncryption
         18:bf:7a:83:74:f2:55:31:c5:59:e6:ba:25:81:7d:dc:38:f1:
         e7:5f:df:fe:36:eb:7c:3e:01:e9:a6:28:9a:4c:f6:0f:72:bf:
         ec:28:af:24:3d:16:5a:51:10:90:31:98:50:7e:85:da:0e:54:
         d7:4d:d6:c4:d9:25:93:45:05:e8:26:2e:03:6c:87:e3:2e:4a:
         3c:00:09:a9:cb:81:77:69:e7:66:6c:d0:d8:28:22:11:97:64:
         24:4a:22:0f:88:a1:49:3c:dd:46:27:51:40:79:d1:a5:cb:fa:
         9b:a6:26:75:42:2c:d1:dc:71:9d:33:3b:18:46:2d:06:8a:bc:
         95:b6:1c:53:58:ba:20:e0:e3:5c:65:07:d8:23:74:be:91:92:
         10:bf:8f:b1:7b:49:81:6f:d6:7e:09:ae:72:10:38:e9:2f:08:
         6f:da:84:94:23:78:de:e0:da:7b:59:d4:4a:55:55:f8:22:ab:
         38:7e:36:c5:52:8d:2f:f5:e0:10:44:12:4f:cb:e4:30:1a:52:
         df:9d:ba:2c:9a:dc:c7:f1:7e:3e:5a:57:7a:92:07:1a:81:7b:
         88:25:89:b2:d7:a9:3e:5e:09:92:5f:7f:2a:54:66:d1:70:63:
         52:0c:3d:e8:44:90:ea:0c:c2:a9:1d:fa:69:e8:9a:a4:5d:04:
         b3:5a:93:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 11:17:56 2025 by rpki-client