Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a313231343a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a313231343a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          BEIDdRD5hDI9XG6NM7O7ukhdvxtQuIzCmVsWhfiGD2g=
Subject key identifier:   16:DD:6C:9E:55:87:93:49:B1:AF:E0:24:FF:3A:FB:48:EB:5B:A9:6D
Certificate issuer:       /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial:       6FE1EFD57EBD392A4FF2AEAF344C33C812F521FF
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a313231343a3a2f34382d313238203d3e203532303235.roa
Signing time:             Thu 03 Jul 2025 15:54:00 +0000
ROA not before:           Thu 03 Jul 2025 15:49:00 +0000
ROA not after:            Thu 02 Jul 2026 15:54:00 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:1214::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 02:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:e1:ef:d5:7e:bd:39:2a:4f:f2:ae:af:34:4c:33:c8:12:f5:21:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
        Validity
            Not Before: Jul  3 15:49:00 2025 GMT
            Not After : Jul  2 15:54:00 2026 GMT
        Subject: CN=16DD6C9E55879349B1AFE024FF3AFB48EB5BA96D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:9a:02:99:00:81:7f:33:a0:c3:35:ab:c7:15:
                    48:f4:cb:e0:0c:f0:9a:36:98:9f:b1:fc:6b:d9:3f:
                    59:bf:72:d6:79:3a:e6:f9:50:ad:c0:8c:7b:ea:e4:
                    6e:df:a8:f3:fa:48:89:33:6f:2f:f7:1f:d7:36:10:
                    97:1d:aa:19:d8:04:9c:36:8a:18:9d:be:5c:3b:b6:
                    37:4f:e1:12:36:e5:fb:18:98:df:c5:2e:7a:83:bd:
                    02:de:df:08:6e:5b:36:91:f5:33:b9:36:e3:eb:30:
                    d6:8b:cc:df:78:42:89:b8:ab:b6:e9:84:e1:27:bc:
                    f8:2e:bb:5c:31:04:ad:d2:d4:26:29:aa:ad:1b:7e:
                    0a:fc:15:32:fc:97:ae:ce:c6:3d:8a:81:8a:22:a5:
                    29:c6:b5:67:51:74:c8:75:93:f2:b7:de:cf:54:da:
                    bf:70:23:f6:53:25:3c:3e:e2:f8:05:eb:1c:9a:d4:
                    ca:24:f1:9f:d8:2e:ff:88:63:e4:c5:00:37:c2:f6:
                    5d:9e:c8:10:42:90:12:5d:a0:a2:a0:fd:18:76:c1:
                    ef:8f:69:0a:4e:e3:f7:57:af:b4:c8:cf:20:5c:47:
                    33:22:25:03:51:43:30:1f:9f:53:78:5c:4a:09:a2:
                    f6:98:1c:a6:59:e0:bb:48:46:63:67:8e:dd:41:5c:
                    4a:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:DD:6C:9E:55:87:93:49:B1:AF:E0:24:FF:3A:FB:48:EB:5B:A9:6D
            X509v3 Authority Key Identifier:
                keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a313231343a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:1214::/48

    Signature Algorithm: sha256WithRSAEncryption
         5f:3f:a2:3f:8b:af:04:fc:67:6a:a9:64:d4:95:14:33:d8:c3:
         07:41:69:58:dd:71:3a:6a:31:cc:2c:43:6b:9c:eb:a5:38:11:
         c1:6a:16:ac:eb:57:24:04:f5:07:7c:b7:c7:ff:8e:bd:c5:67:
         0e:51:78:f1:5f:58:b2:ae:1b:e8:09:57:10:21:35:45:8e:d6:
         b0:c5:30:14:d1:b0:19:83:f4:43:29:d3:0c:b4:db:e6:2e:42:
         f2:e1:41:96:ea:f8:9f:e7:39:ca:05:eb:ac:ca:9f:4b:71:30:
         85:07:eb:27:e9:41:e7:9c:fa:24:3f:47:88:6f:db:86:a5:6e:
         25:00:65:26:21:1e:8d:65:b2:ba:a1:83:37:62:06:a5:1b:b0:
         2f:30:0c:7f:ce:c2:e5:0a:a5:dd:26:97:7f:59:78:d7:91:30:
         36:ab:f4:14:6c:bc:77:26:0a:8b:e0:78:16:40:18:eb:85:17:
         c1:aa:69:2d:ac:74:78:50:36:21:36:4c:da:d1:f9:7e:9d:cd:
         6d:86:43:ea:6b:33:b0:2b:d8:9a:c4:50:71:26:7a:56:07:cc:
         c5:47:3b:36:9a:74:2a:91:42:9a:e0:75:d0:39:06:96:f8:6b:
         4d:a4:5b:81:f5:50:e2:90:6a:4e:d7:25:f8:c9:7c:86:4e:10:
         75:19:98:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 11:19:40 2025 by rpki-client