Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a3133333a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a3133333a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          Eq08NhV2o+TRgHRvAf2/6ovTl9jmvWvaifZW8MPy2xQ=
Subject key identifier:   D4:69:82:51:FF:0C:43:61:D9:F5:54:E4:60:79:27:6D:03:67:31:CE
Certificate issuer:       /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial:       780508C42E1A62682EE8FF5CB5E604075332B7A9
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a3133333a3a2f34382d313238203d3e203532303235.roa
Signing time:             Thu 03 Jul 2025 15:54:09 +0000
ROA not before:           Thu 03 Jul 2025 15:49:09 +0000
ROA not after:            Thu 02 Jul 2026 15:54:09 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:133::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 02:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:05:08:c4:2e:1a:62:68:2e:e8:ff:5c:b5:e6:04:07:53:32:b7:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
        Validity
            Not Before: Jul  3 15:49:09 2025 GMT
            Not After : Jul  2 15:54:09 2026 GMT
        Subject: CN=D4698251FF0C4361D9F554E46079276D036731CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:25:70:dc:a4:9e:ee:ea:f9:8c:3b:2e:82:68:
                    2b:ba:0c:b2:d8:5c:ed:40:13:11:99:3f:2f:6b:b6:
                    6c:89:b2:65:da:23:f1:8a:01:f7:56:f7:99:f7:69:
                    17:88:87:f7:ef:a2:30:f8:70:06:d4:6d:42:01:c4:
                    05:fe:2c:1a:f5:36:68:d6:4d:01:5a:71:44:b8:8d:
                    9a:01:49:cb:1e:cb:c6:b1:26:8b:0f:66:60:de:d7:
                    cf:c8:11:c6:11:a5:e2:94:03:ec:ca:87:f1:b3:29:
                    85:1a:f5:fd:ae:84:39:c2:fe:21:65:f9:7e:b0:0d:
                    97:c5:26:f3:6b:e4:7b:10:ae:b0:c9:f1:51:a7:54:
                    4b:e2:1a:40:de:01:81:99:3b:bd:22:ab:3e:01:e4:
                    5d:87:da:d9:fb:36:12:df:31:d3:9c:38:c2:11:27:
                    a0:e1:41:10:27:85:63:a3:3e:4b:33:01:4e:00:91:
                    72:8e:74:8b:5b:f1:ca:2c:73:c0:ae:b1:35:86:ee:
                    1e:91:cc:cf:2b:66:0e:53:cf:cf:bb:94:f2:62:fe:
                    63:af:81:5a:04:79:d2:7a:60:66:93:6b:e6:43:e8:
                    e3:0b:d3:c4:eb:2c:12:2b:48:56:d8:37:06:57:8f:
                    eb:57:b7:98:bb:eb:2c:c2:b7:ed:b4:e3:ef:0e:27:
                    cb:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:69:82:51:FF:0C:43:61:D9:F5:54:E4:60:79:27:6D:03:67:31:CE
            X509v3 Authority Key Identifier:
                keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a3133333a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:133::/48

    Signature Algorithm: sha256WithRSAEncryption
         5b:c9:ad:70:04:61:ca:1b:77:53:0f:af:1e:36:cc:41:d7:c4:
         c7:32:69:cc:25:23:07:27:c4:ba:a2:a1:26:db:34:19:2a:9e:
         a3:4e:0c:0d:fa:4e:21:f3:22:63:22:d5:f3:4a:42:d8:2c:e0:
         74:24:4a:49:a9:26:44:c9:2c:b8:25:b0:4e:f0:80:0f:2c:a8:
         45:66:72:71:a1:ca:ca:67:ac:65:1b:73:95:61:01:76:f1:f3:
         98:ef:a0:a0:d8:7d:86:ff:25:36:c0:d8:81:7d:0e:dd:90:23:
         f4:3c:5b:f5:2f:1c:f7:f6:d0:17:d7:8e:54:07:ac:27:28:25:
         a3:6b:b5:75:18:5b:91:2b:c7:9c:7d:ca:48:4a:71:d3:bb:0b:
         f2:1b:b6:14:be:dc:9d:2e:c9:cc:c0:96:1f:d5:32:cc:c8:12:
         f9:93:a1:0c:23:a5:81:ce:a4:f9:e3:7d:1b:f8:0c:c1:bd:fe:
         c0:60:7f:f6:57:e5:ad:e8:29:22:68:1e:90:7a:6c:62:2b:be:
         1e:98:b6:ee:35:cc:84:90:e1:da:92:a7:a8:1c:1a:52:dc:a9:
         10:10:ae:8c:6c:74:9e:83:9b:cc:e7:e9:aa:51:bd:3a:fe:e5:
         60:b4:f3:e7:f6:8b:be:24:cb:04:09:dd:ce:bc:89:88:43:5d:
         3a:f7:3f:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 11:51:44 2025 by rpki-client