Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a313531373a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a313531373a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          A7tkwlDT3zMkTVQ+ZDt4zZmfXd5s7Qi7gCSXgqmPlY0=
Subject key identifier:   8A:66:AF:08:19:60:7A:50:3E:8F:10:1B:ED:EA:C9:3C:21:F3:D7:DC
Certificate issuer:       /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial:       3A18ACF0E44675244EA2EBBD22A80E645E6E165E
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a313531373a3a2f34382d313238203d3e203532303235.roa
Signing time:             Thu 03 Jul 2025 15:54:05 +0000
ROA not before:           Thu 03 Jul 2025 15:49:05 +0000
ROA not after:            Thu 02 Jul 2026 15:54:05 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:1517::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 02:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:18:ac:f0:e4:46:75:24:4e:a2:eb:bd:22:a8:0e:64:5e:6e:16:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
        Validity
            Not Before: Jul  3 15:49:05 2025 GMT
            Not After : Jul  2 15:54:05 2026 GMT
        Subject: CN=8A66AF0819607A503E8F101BEDEAC93C21F3D7DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:1e:48:18:dd:6e:91:72:bb:f3:96:71:ca:cb:
                    99:92:39:4c:59:90:84:2e:60:1f:c8:f3:e2:ac:5e:
                    b3:e5:cf:67:54:87:62:6a:0c:8a:e5:d1:43:15:41:
                    7b:3c:45:05:38:84:1f:6e:f2:8e:e0:a6:dc:2c:5c:
                    09:d7:40:0c:38:5a:41:89:15:8b:ac:e7:ab:b9:78:
                    7a:61:02:19:64:d5:08:eb:f7:49:f2:43:a3:35:35:
                    1a:1d:17:9d:77:9c:63:71:47:c1:21:d5:d2:7c:6a:
                    3d:71:e3:65:73:05:74:e9:60:40:dc:a3:ae:56:00:
                    cf:d9:b9:26:b5:1d:b7:5e:ef:8f:74:75:99:66:0e:
                    2a:97:9c:6b:54:b3:04:41:c6:b0:6a:9e:b8:31:e7:
                    6b:bf:69:30:67:47:f1:5a:55:4f:30:e6:53:d1:53:
                    33:33:8e:5b:92:5a:a1:3e:dd:8c:e1:b4:cf:64:ca:
                    d5:d6:97:15:1b:94:78:7b:ac:c9:3c:12:6a:96:7c:
                    79:4c:67:10:15:30:69:d9:a9:5f:5e:3a:da:8e:84:
                    e0:5b:c0:70:db:30:51:88:3d:46:d5:4a:b2:f8:16:
                    00:0d:a2:4d:9d:07:ea:1a:be:4e:d8:3b:88:7a:60:
                    83:1f:e7:36:6b:70:07:21:a9:58:17:c5:d0:da:a2:
                    d0:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:66:AF:08:19:60:7A:50:3E:8F:10:1B:ED:EA:C9:3C:21:F3:D7:DC
            X509v3 Authority Key Identifier:
                keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a313531373a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:1517::/48

    Signature Algorithm: sha256WithRSAEncryption
         37:cc:5e:f5:8a:e9:c6:ad:02:f2:cc:43:7d:db:76:26:62:f7:
         15:3f:58:ec:2b:a3:b3:c7:a4:0e:03:cf:2c:0a:27:24:08:32:
         41:ef:0a:1e:5e:45:b1:29:2d:b5:f5:f6:1e:e1:62:0a:56:cb:
         4c:1c:fb:a0:59:2b:51:0d:69:30:4b:46:7a:e0:73:f5:c2:eb:
         65:71:61:0d:b4:a7:41:5d:bc:44:f6:ca:ae:26:c5:04:b9:f5:
         0e:31:98:38:dd:df:1f:5b:9e:37:96:44:50:63:a6:60:41:19:
         35:01:95:4f:79:77:42:ab:fa:00:88:f8:0d:08:00:cb:ba:a8:
         f6:71:9c:ac:d9:4d:15:4c:d5:7c:44:0d:d3:a4:1c:73:75:c4:
         40:cc:60:bf:91:f3:22:c0:03:82:9c:f3:24:35:fe:be:95:43:
         96:d7:89:5e:fb:45:49:60:d9:9e:fc:9c:78:95:49:5c:6d:54:
         5d:b1:fe:bd:46:f7:53:45:bc:23:a3:dd:fd:51:e8:03:7d:d4:
         b9:f2:77:e7:00:d6:73:c4:f8:82:24:d6:55:04:27:ab:81:7d:
         08:c3:20:7c:92:e2:1c:0a:dd:a8:1d:26:6c:f5:87:a4:1a:64:
         cc:ab:5d:2b:30:a6:3a:f8:1a:12:22:13:90:db:34:fa:ab:c6:
         b1:bf:8c:e2
-----BEGIN CERTIFICATE-----
MIIFJTCCBA2gAwIBAgIUOhis8ORGdSROouu9IqgOZF5uFl4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjYzODZGQUJFQTM5MjEwQjY2NUE2QTU1QUU1REE2NkJF
Njc0MTU5NzAeFw0yNTA3MDMxNTQ5MDVaFw0yNjA3MDIxNTU0MDVaMDMxMTAvBgNV
BAMTKDhBNjZBRjA4MTk2MDdBNTAzRThGMTAxQkVERUFDOTNDMjFGM0Q3REMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjHkgY3W6RcrvzlnHKy5mSOUxZ
kIQuYB/I8+KsXrPlz2dUh2JqDIrl0UMVQXs8RQU4hB9u8o7gptwsXAnXQAw4WkGJ
FYus56u5eHphAhlk1Qjr90nyQ6M1NRodF513nGNxR8Eh1dJ8aj1x42VzBXTpYEDc
o65WAM/ZuSa1Hbde7490dZlmDiqXnGtUswRBxrBqnrgx52u/aTBnR/FaVU8w5lPR
UzMzjluSWqE+3YzhtM9kytXWlxUblHh7rMk8EmqWfHlMZxAVMGnZqV9eOtqOhOBb
wHDbMFGIPUbVSrL4FgANok2dB+oavk7YO4h6YIMf5zZrcAchqVgXxdDaotAFAgMB
AAGjggIvMIICKzAdBgNVHQ4EFgQUimavCBlgelA+jxAb7erJPCHz19wwHwYDVR0j
BBgwFoAU9jhvq+o5IQtmWmpVrl2ma+Z0FZcwDgYDVR0PAQH/BAQDAgeAMG4GA1Ud
HwRnMGUwY6BhoF+GXXJzeW5jOi8vcnBraS0wMS5wZHhuZXQudWsvcmVwby9wYXJh
ZG94bmV0d29ya3MvOC9GNjM4NkZBQkVBMzkyMTBCNjY1QTZBNTVBRTVEQTY2QkU2
NzQxNTk3LmNybDCBkwYIKwYBBQUHAQEEgYYwgYMwgYAGCCsGAQUFBzAChnRyc3lu
YzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYz
ZTAxODU3NTVjOTFiZTNmOWQvNy9GNjM4NkZBQkVBMzkyMTBCNjY1QTZBNTVBRTVE
QTY2QkU2NzQxNTk3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzAL
hnVyc3luYzovL3Jwa2ktMDEucGR4bmV0LnVrL3JlcG8vcGFyYWRveG5ldHdvcmtz
LzgvMzI2MTMwMzUzYTY0NjY2MzM0M2EzMTM1MzEzNzNhM2EyZjM0MzgyZDMxMzIz
ODIwM2QzZTIwMzUzMjMwMzIzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF38QVFzANBgkqhkiG9w0B
AQsFAAOCAQEAN8xe9Yrpxq0C8sxDfdt2JmL3FT9Y7Cujs8ekDgPPLAonJAgyQe8K
Hl5FsSkttfX2HuFiClbLTBz7oFkrUQ1pMEtGeuBz9cLrZXFhDbSnQV28RPbKribF
BLn1DjGYON3fH1ueN5ZEUGOmYEEZNQGVT3l3Qqv6AIj4DQgAy7qo9nGcrNlNFUzV
fEQN06Qcc3XEQMxgv5HzIsADgpzzJDX+vpVDlteJXvtFSWDZnvyceJVJXG1UXbH+
vUb3U0W8I6Pd/VHoA33UufJ35wDWc8T4giTWVQQnq4F9CMMgfJLiHArdqB0mbPWH
pBpkzKtdKzCmOvgaEiITkNs0+qvGsb+M4g==
-----END CERTIFICATE-----
Generated at Sat Jul 5 11:43:58 2025 by rpki-client