Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a313631383a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a313631383a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          PbMuL3UmxPyr2HShCqdQkjrc1Lcy7wrL0mFv4FSTY6Y=
Subject key identifier:   17:45:9A:01:58:36:A7:42:82:0A:63:DD:DB:28:9B:97:67:DE:F2:35
Certificate issuer:       /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial:       2AC49CECBF9F6E0831E92A08F1715EFF6E7940BC
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a313631383a3a2f34382d313238203d3e203532303235.roa
Signing time:             Thu 03 Jul 2025 15:54:10 +0000
ROA not before:           Thu 03 Jul 2025 15:49:10 +0000
ROA not after:            Thu 02 Jul 2026 15:54:10 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:1618::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 02:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:c4:9c:ec:bf:9f:6e:08:31:e9:2a:08:f1:71:5e:ff:6e:79:40:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
        Validity
            Not Before: Jul  3 15:49:10 2025 GMT
            Not After : Jul  2 15:54:10 2026 GMT
        Subject: CN=17459A015836A742820A63DDDB289B9767DEF235
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:6d:66:0b:e7:0d:f1:48:b1:99:01:74:20:b0:
                    cb:21:ec:25:b3:95:78:4a:b7:56:7c:a4:36:d1:c2:
                    7a:54:29:c2:f2:2a:01:44:23:bd:e1:18:48:6d:56:
                    60:40:c3:18:34:9f:02:07:b3:d8:7e:cc:a8:30:f4:
                    d2:7d:4a:f0:53:73:0e:3a:35:ab:ca:e0:43:35:a3:
                    4e:12:3a:53:51:c9:47:a6:72:38:9e:19:23:21:cb:
                    85:90:02:a1:7a:a3:cf:cc:1a:6f:cb:95:bc:a2:c0:
                    43:7d:28:76:5c:75:19:ff:f3:b1:f9:07:66:97:2e:
                    ad:50:5e:e8:5d:3e:ff:60:b6:66:2d:f2:9b:3f:c8:
                    4b:e6:ee:64:1f:86:f7:f6:d0:c7:27:4c:9a:5a:be:
                    1e:2c:05:e3:17:fb:88:75:b7:4b:84:5d:90:8d:a8:
                    68:49:85:8e:52:37:57:1f:f3:4e:68:2a:5b:97:9d:
                    db:69:b0:c8:52:9a:2a:3a:b0:3c:12:1c:02:16:5f:
                    05:e4:63:bc:82:5d:b0:3d:8e:8e:b1:52:0a:a3:8f:
                    d5:36:dd:55:fe:9a:27:36:ea:65:23:ee:5c:92:fa:
                    71:cb:68:ab:4b:85:78:c9:85:5a:9e:55:cf:38:22:
                    08:f2:eb:03:ac:0a:78:4d:dc:3f:a7:02:ec:0f:5a:
                    1d:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:45:9A:01:58:36:A7:42:82:0A:63:DD:DB:28:9B:97:67:DE:F2:35
            X509v3 Authority Key Identifier:
                keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a313631383a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:1618::/48

    Signature Algorithm: sha256WithRSAEncryption
         83:26:56:ca:6c:07:66:20:ff:41:5b:f3:5e:b4:7a:7e:03:e2:
         cb:69:9c:dd:1b:27:a9:5d:07:3b:63:b1:d7:8a:ad:c2:1f:80:
         cc:0d:e7:08:b4:b0:5f:71:64:37:64:00:5d:f0:44:b7:9e:a2:
         ff:ad:4c:84:5e:0b:4f:4f:72:28:75:ae:53:e5:e0:c5:ca:5b:
         67:20:71:5b:5b:e4:86:43:4e:7b:e7:a0:9c:52:9d:25:43:3a:
         72:42:79:c6:1c:d4:17:12:c6:56:5d:3e:69:f4:e9:da:83:a8:
         5f:76:af:55:0e:b1:3b:63:63:a8:4d:dc:6a:36:86:43:b0:4b:
         85:0f:94:67:5e:57:68:af:10:f3:6d:9a:16:15:cf:6d:b1:f8:
         99:0f:2a:39:ca:cf:8f:36:29:0a:bf:7d:a9:ac:9d:73:cd:c5:
         47:d0:55:7a:b5:3d:22:09:68:64:46:13:12:6f:fb:c3:b3:29:
         a7:50:6b:7b:75:51:a7:c2:ba:39:38:fe:41:6c:3a:94:61:93:
         ae:e0:22:e6:68:52:c0:76:50:e9:13:e8:43:e1:58:05:79:32:
         25:fe:6e:bc:1d:59:74:1a:cd:07:1e:81:f9:e5:c4:c2:b4:c2:
         b2:b7:4a:3c:44:7c:00:ad:25:95:38:40:39:c1:ab:fb:1d:4c:
         f1:71:6b:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 11:43:15 2025 by rpki-client