Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a313532373a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a313532373a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          OyjdhDlGavz3oX6nZVeNXuDFxH8gqgRgf03oAi3vrIw=
Subject key identifier:   67:22:B4:9D:30:35:C4:54:54:4D:FE:E9:8A:4C:27:C5:88:05:E6:46
Certificate issuer:       /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial:       573C9FD35F430C28411F16184C7683882598A2A4
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a313532373a3a2f34382d313238203d3e203532303235.roa
Signing time:             Thu 03 Jul 2025 15:54:02 +0000
ROA not before:           Thu 03 Jul 2025 15:49:02 +0000
ROA not after:            Thu 02 Jul 2026 15:54:02 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:1527::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 02:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:3c:9f:d3:5f:43:0c:28:41:1f:16:18:4c:76:83:88:25:98:a2:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
        Validity
            Not Before: Jul  3 15:49:02 2025 GMT
            Not After : Jul  2 15:54:02 2026 GMT
        Subject: CN=6722B49D3035C454544DFEE98A4C27C58805E646
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:23:a4:d2:67:db:55:01:9d:1a:89:50:46:0f:
                    d0:63:56:7d:4c:3e:b1:3e:ab:42:81:c9:a8:a8:72:
                    34:ba:79:d2:7b:f1:75:8e:71:14:22:b7:ac:bc:4b:
                    25:c9:12:67:f7:9f:06:05:b0:46:99:30:6e:1a:63:
                    dc:1c:cb:66:e0:69:77:16:88:f7:86:2d:83:71:9a:
                    dc:c7:82:90:25:4b:7f:f5:a9:f6:6d:90:7d:8f:84:
                    02:b9:b5:55:6c:11:7e:e5:f3:24:ce:45:7f:62:47:
                    5b:2f:1d:49:1e:d2:5e:a6:5f:32:a5:ce:e7:03:21:
                    9b:39:31:2a:43:b7:39:8b:8c:90:63:5c:ff:7a:cb:
                    85:b8:e9:fa:a8:0c:d8:f0:9a:df:1e:d6:33:23:d3:
                    24:ee:02:5a:3f:2d:63:ff:35:01:8c:d0:ea:07:ed:
                    5b:f1:c8:6b:f9:ae:5a:92:e1:14:db:de:2c:12:40:
                    99:53:98:5f:e2:32:39:a0:26:4b:b2:6e:03:11:64:
                    96:f7:0d:1d:d6:e2:a2:45:64:97:ac:bb:df:7d:c9:
                    2a:b8:94:88:d6:57:85:f9:a2:69:d4:87:ac:cc:f9:
                    17:07:cf:44:42:82:ca:da:74:bc:8e:4e:67:83:9a:
                    ec:02:4b:d7:37:fd:57:2b:97:f4:ac:50:8f:5b:48:
                    69:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:22:B4:9D:30:35:C4:54:54:4D:FE:E9:8A:4C:27:C5:88:05:E6:46
            X509v3 Authority Key Identifier:
                keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a313532373a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:1527::/48

    Signature Algorithm: sha256WithRSAEncryption
         22:95:10:2f:f1:98:02:47:7a:a7:a1:4c:0a:5d:ea:4f:a5:09:
         55:c5:8e:24:7e:71:f1:9d:51:38:68:b4:ef:3c:5a:ea:9e:3d:
         8e:7f:66:84:47:ff:19:ba:8c:60:a7:29:c5:72:05:69:3e:28:
         57:0b:98:a4:fc:60:09:a2:e0:97:f5:a5:74:8c:9b:89:9b:1d:
         54:ee:8e:e1:e6:7a:f7:9b:e1:c9:df:e0:a6:62:59:10:97:95:
         64:f7:4e:36:96:4a:2b:b1:24:0b:d9:59:0e:5c:f7:7a:04:f6:
         4c:96:30:dd:a0:fb:38:23:d5:b0:bd:1d:55:46:a9:df:67:98:
         00:50:38:9c:dc:14:47:79:7b:8b:47:05:0d:78:ee:c8:63:55:
         0e:9b:f2:73:56:f3:5c:41:d2:3e:bd:a0:90:49:a3:73:fa:e1:
         d6:fd:2d:60:11:30:f3:5b:2d:dc:e0:ab:aa:e6:d4:2f:d0:09:
         bb:d8:8b:7a:d0:06:d2:8e:da:40:f4:67:d2:10:a3:a6:aa:4c:
         87:c6:0b:53:0a:94:af:2f:b5:90:36:36:ab:53:87:ab:c7:f8:
         20:ae:90:21:31:bd:0d:c5:88:36:f3:25:ad:c8:8d:28:17:7b:
         74:52:0d:a1:ec:be:9b:7b:09:a7:93:9f:7f:ed:f1:2a:25:b3:
         a6:37:f0:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 11:37:23 2025 by rpki-client