Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a313331313a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a313331313a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          5XB9KKz1uQZCUyVNNQFi6P8ZNlzxUgHdSh77PbIGbVA=
Subject key identifier:   CA:3B:DB:3D:3A:18:B1:83:3E:31:C3:90:A5:A1:C2:1D:33:21:BA:BF
Certificate issuer:       /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial:       2DDF6C82F3B981204E7AEFA858534A2732F81E74
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a313331313a3a2f34382d313238203d3e203532303235.roa
Signing time:             Thu 03 Jul 2025 15:53:58 +0000
ROA not before:           Thu 03 Jul 2025 15:48:58 +0000
ROA not after:            Thu 02 Jul 2026 15:53:58 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:1311::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 02:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:df:6c:82:f3:b9:81:20:4e:7a:ef:a8:58:53:4a:27:32:f8:1e:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
        Validity
            Not Before: Jul  3 15:48:58 2025 GMT
            Not After : Jul  2 15:53:58 2026 GMT
        Subject: CN=CA3BDB3D3A18B1833E31C390A5A1C21D3321BABF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:3c:6c:ba:0c:50:46:0a:ca:89:79:b7:d0:a4:
                    86:ee:e3:53:84:56:06:48:b1:d8:4f:bf:84:68:4d:
                    12:4f:f9:d4:b7:30:e7:34:eb:3e:d7:5a:db:8e:fe:
                    31:fb:4e:6f:80:67:4a:15:ac:5a:8d:6b:d3:bf:f5:
                    54:95:b1:47:3f:bf:72:12:fc:d7:9d:71:47:5b:98:
                    1d:39:b9:ac:35:41:65:6a:da:f0:03:ca:bf:e3:27:
                    82:04:34:e0:95:69:8a:73:ff:99:0b:45:d7:2f:33:
                    88:2e:95:92:b4:92:7c:80:ce:92:d2:5a:f0:2e:61:
                    e4:31:11:87:58:76:6c:2e:33:e7:d3:1a:0c:3c:5b:
                    b1:36:12:26:1d:93:ec:3f:98:b0:be:b0:ab:fb:1d:
                    49:2b:15:3e:96:8f:b5:a0:02:e3:8d:5f:43:b1:10:
                    19:0c:0d:be:e7:4e:c9:07:40:78:de:80:89:f4:77:
                    37:49:e4:8a:69:29:74:dd:d8:d6:a5:5d:2b:1b:92:
                    69:83:0b:44:87:c0:c5:bf:0e:aa:72:a4:d1:17:44:
                    36:e4:3f:ba:8a:a5:a1:5f:b8:54:f5:08:ae:5b:65:
                    2d:53:ed:ee:d8:ad:eb:af:b5:8b:25:c0:6e:40:60:
                    25:6f:23:bd:ae:e1:29:be:fb:d0:10:ed:05:88:b9:
                    ac:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:3B:DB:3D:3A:18:B1:83:3E:31:C3:90:A5:A1:C2:1D:33:21:BA:BF
            X509v3 Authority Key Identifier:
                keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a313331313a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:1311::/48

    Signature Algorithm: sha256WithRSAEncryption
         65:df:f8:83:17:7b:23:03:b2:0f:95:c1:b0:e9:58:5e:45:12:
         cd:23:30:cc:69:58:47:60:69:4c:47:c6:c9:0c:16:76:c2:c6:
         c1:14:af:0b:1b:75:cb:a0:45:83:28:b5:d8:4a:96:f6:0a:92:
         28:8a:e6:dd:38:bd:91:59:7a:b1:3e:00:e0:b1:ae:70:de:11:
         29:ce:dd:7b:b6:df:02:63:3c:3e:5f:fa:9e:27:3f:cb:6c:77:
         74:74:84:b3:b3:73:28:c1:4b:d7:48:fa:44:25:49:e2:e8:a8:
         05:ba:71:44:4b:4b:76:64:8e:a1:14:8b:88:f9:48:d9:58:44:
         c1:e4:51:a3:6c:44:c7:76:f2:3b:2f:56:3f:92:17:bd:cb:4f:
         a8:bb:64:34:4f:56:23:26:e1:a6:f3:26:b2:3a:ab:a2:ff:71:
         97:5e:f3:40:a6:df:e7:9e:dc:2a:87:78:e4:06:e6:ce:0d:ae:
         5d:01:15:53:63:45:99:19:cc:c3:77:4e:3b:df:0f:55:da:59:
         df:6b:bd:ee:a4:4a:62:62:54:09:38:e8:24:83:10:44:53:35:
         5a:e9:de:59:22:ca:cc:f7:e5:10:93:4c:69:d3:78:af:7f:57:
         c8:ed:10:14:1c:31:95:02:07:5a:72:44:f9:6c:46:21:17:ac:
         df:67:f5:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 11:17:06 2025 by rpki-client