Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a313431353a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a313431353a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          iOvYtYfnWzDbkEEtQncLybM7EZ/tRBzDIguX82tQOAk=
Subject key identifier:   3E:E6:83:A0:77:58:E0:16:38:F4:9F:59:5D:34:F5:0C:76:8D:FF:1E
Certificate issuer:       /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial:       734ECB8C7FA634D4B7C61DBEE00456996C0FF600
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a313431353a3a2f34382d313238203d3e203532303235.roa
Signing time:             Thu 03 Jul 2025 15:53:55 +0000
ROA not before:           Thu 03 Jul 2025 15:48:55 +0000
ROA not after:            Thu 02 Jul 2026 15:53:55 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:1415::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 02:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:4e:cb:8c:7f:a6:34:d4:b7:c6:1d:be:e0:04:56:99:6c:0f:f6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
        Validity
            Not Before: Jul  3 15:48:55 2025 GMT
            Not After : Jul  2 15:53:55 2026 GMT
        Subject: CN=3EE683A07758E01638F49F595D34F50C768DFF1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c4:c2:e6:ae:b0:0e:8f:d0:b4:1d:d4:d8:17:
                    34:8d:07:69:2b:99:24:9f:9c:ee:d5:d3:f1:10:be:
                    71:f4:c4:9c:cc:fa:aa:eb:70:5d:d8:21:2c:69:29:
                    1b:6e:3c:ef:8d:5d:33:9f:15:d5:c9:b3:2b:01:9b:
                    df:52:78:ff:fe:9b:9f:f2:c2:57:76:bf:35:32:85:
                    b6:32:57:2f:e4:5c:12:f8:e8:76:82:3b:43:b4:9e:
                    00:a9:d3:8b:94:1f:5c:77:37:1a:8b:e2:2d:ef:0a:
                    f2:50:7c:f3:c6:1d:29:b4:a8:e6:fd:38:f7:f4:fd:
                    b8:a9:61:ca:b1:f8:e2:42:23:cc:eb:a7:4e:a0:a1:
                    45:29:a0:c4:e4:45:12:9e:4e:b7:ed:87:5c:fc:d8:
                    ba:06:67:57:a9:19:66:83:ba:f2:a7:ee:20:7a:9b:
                    a5:56:40:6c:5b:00:f8:5d:7b:ff:21:5d:37:02:1f:
                    aa:af:82:52:3d:10:fd:f8:e9:7c:d7:28:04:93:91:
                    cc:33:b6:3c:69:0c:a2:fc:2e:4c:1e:00:c4:50:5a:
                    64:ed:a2:9b:9f:91:7e:31:8b:3d:36:d4:d6:5a:8b:
                    86:2d:01:1d:d2:c8:10:cb:f1:87:29:76:50:27:94:
                    e3:a4:eb:e3:e3:f8:f5:8a:c7:af:eb:f0:d1:90:4c:
                    ca:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:E6:83:A0:77:58:E0:16:38:F4:9F:59:5D:34:F5:0C:76:8D:FF:1E
            X509v3 Authority Key Identifier:
                keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a313431353a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:1415::/48

    Signature Algorithm: sha256WithRSAEncryption
         05:59:95:38:b3:23:70:21:7d:7c:7f:62:bb:05:b2:bd:fc:0a:
         c6:bc:85:6c:c7:89:ad:55:75:85:63:5f:6d:0b:68:e0:26:92:
         44:23:25:8e:cb:e6:d7:3a:90:0b:30:98:5b:dd:55:fd:d0:6e:
         9f:88:c8:5c:88:f7:2c:f3:94:34:5e:b8:aa:6c:22:8d:3d:68:
         1f:14:7b:2b:3f:18:3a:75:8d:01:2a:d7:96:44:94:a9:10:9f:
         7d:24:83:56:b2:4f:01:e5:7f:be:9c:01:be:c2:67:4a:39:a5:
         f7:79:8a:22:97:f8:a8:91:03:96:1b:ab:16:50:ea:cb:ce:73:
         e2:75:0c:fc:4f:d5:6f:e0:ce:b3:36:a6:e1:5b:99:d9:6a:d7:
         e8:60:64:a6:a3:7d:72:2c:8c:7d:bd:c6:41:c4:73:75:cb:f3:
         8e:ef:4b:27:bc:eb:b9:65:f5:4d:3d:94:c3:8c:d5:94:8f:50:
         f6:ad:1f:67:81:cd:34:a7:88:04:d9:c6:31:63:4d:30:56:3b:
         4c:25:1a:b3:03:6b:0d:3c:4a:6c:43:b9:0d:57:df:a1:ca:bd:
         1b:72:c0:5f:ce:15:09:57:d1:1a:36:af:7c:56:14:be:71:83:
         ab:be:53:71:8b:cd:69:2c:02:57:14:f0:fb:06:38:98:21:0c:
         f7:e4:e7:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 11:28:41 2025 by rpki-client