Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a313831303a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a313831303a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          Ua/WRxx5StQfbFUvsnyJZCBGXlYrfaUHzAX8B2oy9bQ=
Subject key identifier:   A8:E3:BA:BC:AA:6F:88:F3:AC:29:0C:3D:9D:32:9C:CF:EA:F9:60:3B
Certificate issuer:       /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial:       17A4C6CACA6A95165225C707F216FB33B76FE8EB
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a313831303a3a2f34382d313238203d3e203532303235.roa
Signing time:             Thu 03 Jul 2025 15:54:07 +0000
ROA not before:           Thu 03 Jul 2025 15:49:07 +0000
ROA not after:            Thu 02 Jul 2026 15:54:07 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:1810::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 02:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:a4:c6:ca:ca:6a:95:16:52:25:c7:07:f2:16:fb:33:b7:6f:e8:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
        Validity
            Not Before: Jul  3 15:49:07 2025 GMT
            Not After : Jul  2 15:54:07 2026 GMT
        Subject: CN=A8E3BABCAA6F88F3AC290C3D9D329CCFEAF9603B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:de:27:11:b3:ef:57:7f:eb:2b:ea:2c:b9:85:
                    84:fb:2c:82:de:04:1e:f2:5a:97:10:e5:dd:13:9b:
                    02:98:5a:41:83:1b:da:05:6d:e8:08:c4:b2:dc:f0:
                    1f:51:7f:0e:99:18:3f:6b:cc:21:02:49:ed:84:c7:
                    b5:a3:4c:1a:c3:30:8a:7e:09:23:46:46:32:dd:35:
                    44:08:be:e5:08:cd:d3:2b:d2:ba:de:1a:d3:e5:e9:
                    bc:57:e2:70:c4:6d:cc:6b:eb:91:62:a5:86:0c:66:
                    61:db:8d:7c:77:da:39:86:5b:e8:3a:1b:2f:27:ca:
                    4a:09:6f:cc:23:37:1d:09:dd:7b:a2:7e:6e:eb:ce:
                    92:f6:fb:12:2a:e3:43:47:07:f0:d7:fb:71:f0:b2:
                    c9:35:61:b6:aa:a9:dd:5e:e6:81:bb:59:c3:56:0d:
                    7b:0f:e1:b6:3e:74:ba:92:a3:08:a5:9f:0e:b9:84:
                    d3:12:f1:20:df:3c:14:df:37:f4:da:51:bd:51:39:
                    43:d2:8d:13:77:39:ed:ae:aa:11:81:65:3f:cb:9f:
                    21:ba:1c:d7:63:a0:56:d7:5b:8b:05:89:bf:aa:7b:
                    76:49:2f:41:b9:2d:66:0e:86:dd:55:db:a6:50:e2:
                    c5:5f:ea:46:99:73:a8:f4:ff:fd:2e:a0:d9:59:56:
                    99:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:E3:BA:BC:AA:6F:88:F3:AC:29:0C:3D:9D:32:9C:CF:EA:F9:60:3B
            X509v3 Authority Key Identifier:
                keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a313831303a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:1810::/48

    Signature Algorithm: sha256WithRSAEncryption
         59:f9:11:9d:11:0b:83:61:41:ce:53:e6:05:48:8b:94:76:da:
         ea:a8:69:13:0e:c6:a9:e1:24:83:c1:06:58:de:8e:0a:41:15:
         d2:1d:48:d3:11:92:6d:ed:74:36:94:f0:57:97:ba:32:c5:9d:
         11:16:11:80:bc:da:0e:dd:57:f6:23:06:cc:04:da:66:8e:7e:
         42:80:de:57:3e:61:ab:ae:d4:7d:27:28:5b:a3:fa:a6:44:33:
         47:6a:1d:ca:74:92:e0:bb:c9:bc:f0:29:6c:74:8c:4f:75:1b:
         c7:f4:a7:7a:05:59:92:c0:04:0e:5d:1d:fd:4f:46:41:c6:fe:
         5a:56:c3:d0:a4:5c:67:7a:68:03:ed:2e:8a:04:92:4a:40:1b:
         37:53:f9:47:86:7c:17:82:12:8e:72:18:c7:21:ae:54:c8:e2:
         f9:10:9a:84:a7:01:4b:9b:45:31:4f:18:66:9d:f4:a9:14:bd:
         38:3b:d5:7e:5d:8f:cd:b7:19:75:c8:d6:45:d4:fe:1d:f2:8d:
         a8:1f:13:1a:7c:7e:bc:44:36:7d:72:78:03:47:3e:6b:bb:f2:
         a8:94:c6:81:0a:86:b8:a4:c2:d9:86:76:cb:ce:74:0b:89:6f:
         07:0e:d9:9d:2d:de:40:d2:0c:62:b7:62:f3:71:a2:4b:91:bb:
         03:38:59:6f
-----BEGIN CERTIFICATE-----
MIIFJTCCBA2gAwIBAgIUF6TGyspqlRZSJccH8hb7M7dv6OswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjYzODZGQUJFQTM5MjEwQjY2NUE2QTU1QUU1REE2NkJF
Njc0MTU5NzAeFw0yNTA3MDMxNTQ5MDdaFw0yNjA3MDIxNTU0MDdaMDMxMTAvBgNV
BAMTKEE4RTNCQUJDQUE2Rjg4RjNBQzI5MEMzRDlEMzI5Q0NGRUFGOTYwM0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQ3icRs+9Xf+sr6iy5hYT7LILe
BB7yWpcQ5d0TmwKYWkGDG9oFbegIxLLc8B9Rfw6ZGD9rzCECSe2Ex7WjTBrDMIp+
CSNGRjLdNUQIvuUIzdMr0rreGtPl6bxX4nDEbcxr65FipYYMZmHbjXx32jmGW+g6
Gy8nykoJb8wjNx0J3Xuifm7rzpL2+xIq40NHB/DX+3Hwssk1Ybaqqd1e5oG7WcNW
DXsP4bY+dLqSowilnw65hNMS8SDfPBTfN/TaUb1ROUPSjRN3Oe2uqhGBZT/LnyG6
HNdjoFbXW4sFib+qe3ZJL0G5LWYOht1V26ZQ4sVf6kaZc6j0//0uoNlZVpkjAgMB
AAGjggIvMIICKzAdBgNVHQ4EFgQUqOO6vKpviPOsKQw9nTKcz+r5YDswHwYDVR0j
BBgwFoAU9jhvq+o5IQtmWmpVrl2ma+Z0FZcwDgYDVR0PAQH/BAQDAgeAMG4GA1Ud
HwRnMGUwY6BhoF+GXXJzeW5jOi8vcnBraS0wMS5wZHhuZXQudWsvcmVwby9wYXJh
ZG94bmV0d29ya3MvOC9GNjM4NkZBQkVBMzkyMTBCNjY1QTZBNTVBRTVEQTY2QkU2
NzQxNTk3LmNybDCBkwYIKwYBBQUHAQEEgYYwgYMwgYAGCCsGAQUFBzAChnRyc3lu
YzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYz
ZTAxODU3NTVjOTFiZTNmOWQvNy9GNjM4NkZBQkVBMzkyMTBCNjY1QTZBNTVBRTVE
QTY2QkU2NzQxNTk3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzAL
hnVyc3luYzovL3Jwa2ktMDEucGR4bmV0LnVrL3JlcG8vcGFyYWRveG5ldHdvcmtz
LzgvMzI2MTMwMzUzYTY0NjY2MzM0M2EzMTM4MzEzMDNhM2EyZjM0MzgyZDMxMzIz
ODIwM2QzZTIwMzUzMjMwMzIzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF38QYEDANBgkqhkiG9w0B
AQsFAAOCAQEAWfkRnRELg2FBzlPmBUiLlHba6qhpEw7GqeEkg8EGWN6OCkEV0h1I
0xGSbe10NpTwV5e6MsWdERYRgLzaDt1X9iMGzATaZo5+QoDeVz5hq67UfScoW6P6
pkQzR2odynSS4LvJvPApbHSMT3Ubx/SnegVZksAEDl0d/U9GQcb+WlbD0KRcZ3po
A+0uigSSSkAbN1P5R4Z8F4ISjnIYxyGuVMji+RCahKcBS5tFMU8YZp30qRS9ODvV
fl2PzbcZdcjWRdT+HfKNqB8TGnx+vEQ2fXJ4A0c+a7vyqJTGgQqGuKTC2YZ2y850
C4lvBw7ZnS3eQNIMYrdi83GiS5G7AzhZbw==
-----END CERTIFICATE-----
Generated at Sat Jul 5 12:03:47 2025 by rpki-client