Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a313731613a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a313731613a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          h1BOUcMU6j8gSI8Gp3aQm/881GC6jyOdr3eA3vsX2oU=
Subject key identifier:   1B:44:BA:B3:49:F2:DA:42:CA:A6:7C:64:05:8B:FA:25:20:EE:E3:37
Certificate issuer:       /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial:       5DC7290D4D671985BA2C860BFE2F130FD4716188
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a313731613a3a2f34382d313238203d3e203532303235.roa
Signing time:             Thu 03 Jul 2025 15:53:58 +0000
ROA not before:           Thu 03 Jul 2025 15:48:58 +0000
ROA not after:            Thu 02 Jul 2026 15:53:58 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:171a::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 02:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:c7:29:0d:4d:67:19:85:ba:2c:86:0b:fe:2f:13:0f:d4:71:61:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
        Validity
            Not Before: Jul  3 15:48:58 2025 GMT
            Not After : Jul  2 15:53:58 2026 GMT
        Subject: CN=1B44BAB349F2DA42CAA67C64058BFA2520EEE337
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f7:b4:cb:56:84:4f:54:06:d5:d9:6b:47:6d:
                    bc:4f:12:ca:b7:2d:34:37:74:ec:8a:9a:92:a7:ed:
                    29:ce:39:87:48:83:a8:2b:8c:96:f9:20:f6:2e:8b:
                    07:16:43:74:5d:0c:c5:07:64:b7:05:c7:2f:3f:8e:
                    56:63:4d:25:72:8c:05:c5:05:d1:6c:74:66:aa:1c:
                    4c:7c:41:df:1c:de:8b:39:4a:5a:af:50:66:a8:c3:
                    0b:e2:41:b0:31:b9:7a:03:69:a8:de:cb:c4:bb:59:
                    af:15:19:8f:7e:64:97:9f:e9:db:33:ac:b4:dc:2f:
                    c4:4e:32:4d:a1:82:7e:d1:c6:78:87:61:1c:8c:28:
                    7f:9e:49:3e:e9:d5:1f:16:7d:54:c2:d9:cf:c7:fa:
                    76:97:6d:96:92:5e:37:9c:0a:b0:f6:f0:a7:7d:1e:
                    49:36:46:b2:47:25:fd:45:a0:e9:9e:06:61:45:33:
                    ad:ae:59:23:9d:98:f5:de:b6:0c:31:bc:d5:ec:d5:
                    0b:24:0d:b4:60:01:53:b9:67:42:40:cd:c3:d1:2c:
                    cc:21:3f:41:9f:cd:0f:62:02:9c:3a:73:09:00:46:
                    06:b1:7c:c7:54:32:a5:b8:a0:c6:af:9c:ae:d1:94:
                    a9:da:36:be:63:3a:d1:41:7f:dc:94:eb:5b:5e:fa:
                    8a:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:44:BA:B3:49:F2:DA:42:CA:A6:7C:64:05:8B:FA:25:20:EE:E3:37
            X509v3 Authority Key Identifier:
                keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a313731613a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:171a::/48

    Signature Algorithm: sha256WithRSAEncryption
         5e:1c:49:e1:39:6d:a1:df:2f:52:85:47:cd:75:96:e7:b7:34:
         d7:ce:d9:bd:79:46:f6:dc:98:7d:58:f1:6f:a5:ac:65:bb:bb:
         3c:e9:33:f5:70:3d:d6:8a:4f:14:9a:5e:e3:d8:45:ac:eb:f0:
         c6:f2:56:94:36:c9:04:19:93:59:79:63:1e:6e:86:b6:81:68:
         13:35:fc:f3:a5:88:a5:3a:97:6a:e0:af:2d:fd:74:49:ec:69:
         74:e1:06:13:74:86:6b:35:e8:98:3c:7a:df:90:d4:2b:32:84:
         0c:ec:fa:a7:a5:ee:d2:3f:92:7d:eb:e8:5c:1b:db:9e:d8:1c:
         99:4e:b7:f1:de:bd:40:8e:23:9d:1e:89:de:bd:77:b7:ab:67:
         bd:c5:57:59:e6:2b:93:4b:17:1a:fc:54:43:5f:ba:7f:87:d5:
         5f:d9:a6:11:50:21:f0:51:57:8d:fa:e9:20:0f:cf:15:47:35:
         95:6c:14:d1:fb:90:01:43:23:55:e6:1c:a4:df:73:7d:57:6a:
         8f:c6:7c:08:0e:89:ed:c5:99:cf:63:aa:bd:47:89:28:69:2b:
         95:36:ef:5d:89:02:9e:f5:c8:41:71:34:dc:99:96:5c:75:89:
         0d:80:bd:93:66:9d:fd:b5:15:73:71:21:ef:2e:c9:07:c6:61:
         11:3a:1f:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 11:29:27 2025 by rpki-client