Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a3132663a3a2f34382d3438203d3e203532303235.roa
File:                     326130353a646663343a3132663a3a2f34382d3438203d3e203532303235.roa (raw, json)
Hash identifier:          5NKtFU8uw9ELyQXHEA3YlFRCitKQhaH+ShusarM6kcE=
Subject key identifier:   DE:FC:AA:B5:AF:91:12:07:5E:77:1C:07:71:36:EE:60:9B:3E:4D:BA
Certificate issuer:       /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial:       0A927D39BF8CCEBC22392FC28C573BD31E0099DE
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a3132663a3a2f34382d3438203d3e203532303235.roa
Signing time:             Thu 03 Jul 2025 15:54:08 +0000
ROA not before:           Thu 03 Jul 2025 15:49:08 +0000
ROA not after:            Thu 02 Jul 2026 15:54:08 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:12f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 02:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:92:7d:39:bf:8c:ce:bc:22:39:2f:c2:8c:57:3b:d3:1e:00:99:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
        Validity
            Not Before: Jul  3 15:49:08 2025 GMT
            Not After : Jul  2 15:54:08 2026 GMT
        Subject: CN=DEFCAAB5AF9112075E771C077136EE609B3E4DBA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:29:3b:41:bf:99:e0:94:80:fd:d3:16:b8:4a:
                    a3:3a:8b:61:68:3c:9a:12:e0:c1:cc:53:d6:3e:d4:
                    f8:00:9e:53:bb:8e:d9:c6:f4:0b:63:12:ba:6f:1e:
                    b8:23:38:25:74:5c:79:1a:9d:4e:03:18:c0:7a:b4:
                    75:05:81:7c:fa:81:73:6e:e1:b3:dc:75:9f:45:92:
                    f1:ef:9f:f7:e6:c4:e3:bf:08:b5:2f:9a:12:f2:19:
                    00:d6:2d:60:3b:b9:b1:78:7c:bf:e4:7f:30:51:e6:
                    66:f9:62:d1:f0:d2:35:3b:95:a2:36:a5:cf:6c:2f:
                    f7:13:d0:8b:6e:04:73:b7:20:28:41:c7:81:40:be:
                    3c:ba:9f:ed:65:24:b2:3d:10:33:df:5a:c2:b7:7a:
                    17:2f:59:89:67:63:1d:49:cd:36:2f:b8:6c:c7:5c:
                    f4:0c:84:cc:7e:2a:b8:d6:62:a3:3d:59:ed:4f:3f:
                    c7:33:d3:9d:f3:1e:c4:73:a3:d0:4e:62:38:81:4b:
                    a1:98:e4:8a:27:b5:94:5c:77:ea:4e:13:2e:58:2b:
                    90:87:9d:3c:87:32:6a:17:c4:c0:e1:49:96:9f:fb:
                    cf:6a:5a:1a:9a:c0:9e:ab:b2:e1:56:b4:0c:01:e3:
                    d1:e7:e1:d9:be:f1:2b:c3:d4:b6:e9:71:4f:6c:bb:
                    df:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:FC:AA:B5:AF:91:12:07:5E:77:1C:07:71:36:EE:60:9B:3E:4D:BA
            X509v3 Authority Key Identifier:
                keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a3132663a3a2f34382d3438203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:12f::/48

    Signature Algorithm: sha256WithRSAEncryption
         67:c1:8f:4a:d1:ee:1a:28:6c:6b:91:ec:2e:5b:7f:e6:9a:b5:
         d3:5d:44:8f:79:08:26:03:bc:a8:7a:46:52:87:44:d6:a9:cf:
         50:81:d7:ab:45:e3:e6:07:ff:a3:63:91:d7:f8:43:af:01:47:
         b0:38:65:48:e3:42:c5:58:d4:34:fd:53:76:c4:0f:54:cd:c9:
         5d:d9:ab:45:a8:1a:e2:b6:01:3f:49:c3:a3:2e:89:61:fe:a3:
         02:2f:8d:ab:f8:e1:99:21:77:cc:42:c9:bf:30:4f:4c:45:aa:
         57:35:cd:44:7f:9d:ba:9c:68:7d:4f:14:8c:d8:0d:d9:ec:e6:
         3c:6b:7e:70:8b:e1:8b:1f:16:cb:6a:5e:15:1e:c9:41:3c:77:
         d5:e4:b8:cd:05:e5:5e:f6:84:05:58:bb:8f:4e:54:06:8d:7a:
         96:fa:19:f1:cc:78:36:4d:d0:46:74:2d:83:4a:c7:a9:ab:c6:
         57:9e:90:53:14:a8:de:30:f5:98:5e:70:4f:3b:ff:ce:2b:6d:
         21:af:ff:94:17:91:a8:81:2c:65:01:f7:91:59:3d:50:52:a9:
         39:b4:0d:db:ac:ab:3f:57:19:2a:38:41:e7:dd:16:ba:6e:65:
         b3:cc:a3:f1:1d:70:41:64:11:62:f0:50:ac:b6:5d:20:35:ba:
         06:12:81:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 11:22:38 2025 by rpki-client