Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a313432343a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a313432343a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          9LxdAsu+zlqG5+mrWo+Y1kmN2kd4jg2w023IwHI4hj4=
Subject key identifier:   C3:4D:40:24:4A:CB:CF:A1:68:77:6A:7B:38:20:3E:65:76:82:49:E0
Certificate issuer:       /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial:       6504982049469F01FD37F3D147D58AA27B4663B4
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a313432343a3a2f34382d313238203d3e203532303235.roa
Signing time:             Thu 03 Jul 2025 15:54:06 +0000
ROA not before:           Thu 03 Jul 2025 15:49:06 +0000
ROA not after:            Thu 02 Jul 2026 15:54:06 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:1424::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 03:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:04:98:20:49:46:9f:01:fd:37:f3:d1:47:d5:8a:a2:7b:46:63:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
        Validity
            Not Before: Jul  3 15:49:06 2025 GMT
            Not After : Jul  2 15:54:06 2026 GMT
        Subject: CN=C34D40244ACBCFA168776A7B38203E65768249E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:cb:b7:47:77:36:6e:97:95:74:83:57:c9:35:
                    9a:a6:a5:b7:02:aa:58:b7:4c:85:98:be:87:1c:9a:
                    cb:c7:57:b6:3f:66:0d:da:6d:36:be:b3:30:7f:52:
                    de:d9:0f:01:67:29:30:58:a6:71:a6:21:66:84:16:
                    48:b1:53:35:a3:8c:cb:ff:67:90:f5:36:a0:fd:f6:
                    5c:df:69:c6:c3:8d:81:7e:74:81:c1:4b:38:38:3d:
                    ee:68:11:74:39:4b:4b:f3:3a:6f:f9:5b:a7:df:c7:
                    fe:36:67:8d:f8:df:10:3c:55:63:fa:75:fd:0d:af:
                    34:bc:16:f1:34:1f:b5:90:f9:c0:31:3b:5a:d2:66:
                    d4:af:50:4f:14:d5:4b:0e:f6:5a:80:c3:15:c6:4d:
                    72:46:ec:e7:ef:2e:8d:93:83:35:8f:b0:32:8a:7a:
                    fc:43:66:75:53:a7:be:7f:8d:71:12:6a:f3:7f:42:
                    92:51:c5:ca:0a:44:cc:1b:ea:77:c9:ee:0e:c0:00:
                    f7:0c:63:6a:1d:b4:61:a9:aa:94:b1:86:70:21:05:
                    99:4d:2f:00:90:4b:db:88:d6:bd:67:3c:99:77:8d:
                    a3:4e:bc:1b:7b:86:d4:68:47:0f:56:4f:8b:67:4a:
                    8e:d0:fa:31:9a:40:a4:9d:04:33:83:9f:65:7d:18:
                    a2:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:4D:40:24:4A:CB:CF:A1:68:77:6A:7B:38:20:3E:65:76:82:49:E0
            X509v3 Authority Key Identifier:
                keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a313432343a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:1424::/48

    Signature Algorithm: sha256WithRSAEncryption
         37:14:ce:6e:82:6c:7f:67:d3:13:bd:0b:99:8c:5c:a0:60:78:
         a3:2f:e0:60:7b:b6:fd:1e:72:7f:64:21:98:00:af:db:98:73:
         8f:7b:14:45:d8:d3:48:8c:ed:36:65:f8:48:e4:0b:4d:06:ef:
         d7:64:ef:05:34:f6:69:ab:47:ac:fc:53:d5:16:86:dd:d1:92:
         61:ce:6f:01:07:b1:a9:43:9f:20:37:25:84:c8:cb:29:27:82:
         8f:db:3c:89:f5:59:70:7a:3e:80:e6:9b:c1:9c:24:69:47:e9:
         77:40:96:75:67:c2:3e:a9:9f:9b:6a:44:63:c1:4e:96:35:28:
         18:19:4a:2c:ee:e5:8b:61:45:11:92:d5:ec:d5:f3:ef:71:23:
         aa:22:32:07:b8:c8:07:0e:b7:3a:65:88:53:4d:4b:08:e1:4b:
         18:67:f2:2a:1d:f8:ff:56:e2:1e:de:c4:b6:5b:35:51:5a:14:
         99:c1:a1:5b:5a:67:ed:cf:51:18:39:0a:35:81:39:00:b0:b5:
         2d:ef:e3:93:f2:70:83:57:e5:2c:f8:f1:5c:6a:64:50:56:2b:
         c3:fd:94:1c:90:f9:e9:89:c7:be:1f:71:7f:40:d6:a3:6e:f7:
         6b:b1:4e:9a:1b:94:7d:2c:b5:28:57:88:b4:97:3e:49:d4:a6:
         b6:84:8d:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 12:01:56 2025 by rpki-client