Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a31323a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a31323a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          gdyJalJanrf2/tA1XWpGyg9n8paORMdYlvfTwhB0zeA=
Subject key identifier:   69:A0:78:A0:E8:D5:33:4A:95:DF:0E:89:8F:42:1F:6F:0F:D1:57:85
Certificate issuer:       /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial:       5423C02DCA011A85A329FF9134F19B741CFA2AAF
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a31323a3a2f34382d313238203d3e203532303235.roa
Signing time:             Thu 03 Jul 2025 15:54:02 +0000
ROA not before:           Thu 03 Jul 2025 15:49:02 +0000
ROA not after:            Thu 02 Jul 2026 15:54:02 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:12::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 02:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:23:c0:2d:ca:01:1a:85:a3:29:ff:91:34:f1:9b:74:1c:fa:2a:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
        Validity
            Not Before: Jul  3 15:49:02 2025 GMT
            Not After : Jul  2 15:54:02 2026 GMT
        Subject: CN=69A078A0E8D5334A95DF0E898F421F6F0FD15785
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:2e:70:94:12:bc:56:fd:2a:b0:fd:43:87:8b:
                    7e:44:f2:b1:b1:44:6e:33:d5:8e:ce:90:b9:33:1b:
                    ad:e5:f0:85:0e:70:9c:b0:87:9c:fa:3e:01:97:a9:
                    55:02:5f:ad:e5:93:e0:ab:8a:aa:d3:c6:9f:23:91:
                    4e:6c:e7:45:98:1f:71:41:d8:b5:03:4a:fd:15:69:
                    10:cb:c5:0c:3e:d4:e6:b3:25:e7:57:41:e9:05:c8:
                    1f:93:04:70:c6:c2:1f:9f:41:fe:dc:44:54:d7:76:
                    ae:a5:0d:73:34:fc:44:bf:6c:17:75:7d:1c:f6:07:
                    10:24:ab:cf:7c:8d:81:8a:6f:ec:00:73:15:e8:1b:
                    05:cf:4c:91:b1:55:2c:06:5a:8e:27:5d:55:93:1d:
                    4f:1e:68:34:88:a2:10:93:2e:6a:6b:9d:5b:66:e9:
                    c5:db:c9:34:5e:d3:0c:f5:53:2a:9f:92:6c:12:18:
                    e3:10:8a:36:6e:30:97:bb:fc:1f:5d:cb:55:19:0c:
                    f7:f7:01:58:ee:99:84:f7:d9:c4:4f:75:9f:bb:d7:
                    44:a9:c1:a3:8c:fd:13:f3:8f:d1:1c:44:fe:9f:fb:
                    5c:62:81:71:c8:eb:11:0c:08:92:ec:71:91:d2:27:
                    95:2c:ca:ab:c6:be:85:1e:29:3c:57:52:bf:1a:79:
                    2e:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:A0:78:A0:E8:D5:33:4A:95:DF:0E:89:8F:42:1F:6F:0F:D1:57:85
            X509v3 Authority Key Identifier:
                keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a31323a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:12::/48

    Signature Algorithm: sha256WithRSAEncryption
         50:c4:9f:d5:cb:05:e2:f1:9f:a3:31:33:c1:26:3e:fe:27:1e:
         26:92:cb:dc:45:32:f7:58:39:a4:0f:86:ef:d7:25:0d:dd:86:
         7f:1c:96:3b:3b:33:1a:32:71:16:51:53:c5:3a:d3:b6:d3:b4:
         9a:ef:36:3f:49:df:2d:c2:b2:b4:20:87:06:c6:b1:66:24:8b:
         79:f5:63:fe:31:37:bf:97:1e:a0:92:f1:9b:27:44:87:74:87:
         66:45:39:c3:dc:3b:91:bc:8d:91:4d:c3:a9:a2:42:10:a3:f0:
         06:0f:f1:2b:e8:a1:6d:b9:d1:2c:38:c8:0d:e6:48:28:d6:f5:
         5b:ed:56:3d:ee:0a:e6:21:bb:c3:1d:37:37:d3:06:93:de:70:
         e6:bd:40:54:3a:6b:c5:d8:54:51:ae:4e:92:cf:d4:a7:56:0a:
         42:1f:87:b5:85:9f:e3:20:28:c7:6d:e8:8e:40:fc:1a:e0:7a:
         0b:2f:d2:1b:38:87:dc:c0:75:c0:ab:f9:56:72:dd:08:46:f6:
         e0:bb:f8:77:05:e1:69:e0:82:54:85:d9:5f:e5:b6:18:f6:cd:
         95:27:79:1c:c6:5e:bb:af:4c:03:dd:cc:1f:f5:72:3a:a8:69:
         b7:ad:a5:fc:7f:c6:7f:69:4f:d7:f5:a6:18:43:62:ad:14:46:
         28:3b:e6:7f
-----BEGIN CERTIFICATE-----
MIIFHzCCBAegAwIBAgIUVCPALcoBGoWjKf+RNPGbdBz6Kq8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjYzODZGQUJFQTM5MjEwQjY2NUE2QTU1QUU1REE2NkJF
Njc0MTU5NzAeFw0yNTA3MDMxNTQ5MDJaFw0yNjA3MDIxNTU0MDJaMDMxMTAvBgNV
BAMTKDY5QTA3OEEwRThENTMzNEE5NURGMEU4OThGNDIxRjZGMEZEMTU3ODUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrLnCUErxW/Sqw/UOHi35E8rGx
RG4z1Y7OkLkzG63l8IUOcJywh5z6PgGXqVUCX63lk+CriqrTxp8jkU5s50WYH3FB
2LUDSv0VaRDLxQw+1OazJedXQekFyB+TBHDGwh+fQf7cRFTXdq6lDXM0/ES/bBd1
fRz2BxAkq898jYGKb+wAcxXoGwXPTJGxVSwGWo4nXVWTHU8eaDSIohCTLmprnVtm
6cXbyTRe0wz1UyqfkmwSGOMQijZuMJe7/B9dy1UZDPf3AVjumYT32cRPdZ+710Sp
waOM/RPzj9EcRP6f+1xigXHI6xEMCJLscZHSJ5UsyqvGvoUeKTxXUr8aeS6nAgMB
AAGjggIpMIICJTAdBgNVHQ4EFgQUaaB4oOjVM0qV3w6Jj0Ifbw/RV4UwHwYDVR0j
BBgwFoAU9jhvq+o5IQtmWmpVrl2ma+Z0FZcwDgYDVR0PAQH/BAQDAgeAMG4GA1Ud
HwRnMGUwY6BhoF+GXXJzeW5jOi8vcnBraS0wMS5wZHhuZXQudWsvcmVwby9wYXJh
ZG94bmV0d29ya3MvOC9GNjM4NkZBQkVBMzkyMTBCNjY1QTZBNTVBRTVEQTY2QkU2
NzQxNTk3LmNybDCBkwYIKwYBBQUHAQEEgYYwgYMwgYAGCCsGAQUFBzAChnRyc3lu
YzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYz
ZTAxODU3NTVjOTFiZTNmOWQvNy9GNjM4NkZBQkVBMzkyMTBCNjY1QTZBNTVBRTVE
QTY2QkU2NzQxNTk3LmNlcjCBjgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4Zx
cnN5bmM6Ly9ycGtpLTAxLnBkeG5ldC51ay9yZXBvL3BhcmFkb3huZXR3b3Jrcy84
LzMyNjEzMDM1M2E2NDY2NjMzNDNhMzEzMjNhM2EyZjM0MzgyZDMxMzIzODIwM2Qz
ZTIwMzUzMjMwMzIzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggr
BgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF38QAEjANBgkqhkiG9w0BAQsFAAOC
AQEAUMSf1csF4vGfozEzwSY+/iceJpLL3EUy91g5pA+G79clDd2GfxyWOzszGjJx
FlFTxTrTttO0mu82P0nfLcKytCCHBsaxZiSLefVj/jE3v5ceoJLxmydEh3SHZkU5
w9w7kbyNkU3DqaJCEKPwBg/xK+ihbbnRLDjIDeZIKNb1W+1WPe4K5iG7wx03N9MG
k95w5r1AVDprxdhUUa5Oks/Up1YKQh+HtYWf4yAox23ojkD8GuB6Cy/SGziH3MB1
wKv5VnLdCEb24Lv4dwXhaeCCVIXZX+W2GPbNlSd5HMZeu69MA93MH/VyOqhpt62l
/H/Gf2lP1/WmGENirRRGKDvmfw==
-----END CERTIFICATE-----
Generated at Sat Jul 5 11:22:39 2025 by rpki-client