Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a313931633a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a313931633a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          Ex/+SOEDFRMhQ5vEdTIJHdFuwJLz4Peam+JoLs+z63E=
Subject key identifier:   A7:36:4F:4C:DC:CF:07:32:37:2E:73:65:58:17:30:68:61:CD:FA:4F
Certificate issuer:       /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial:       7C186E3787DB7E7AF8F02DC6CC2D7F98BB92F97D
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a313931633a3a2f34382d313238203d3e203532303235.roa
Signing time:             Thu 03 Jul 2025 15:54:05 +0000
ROA not before:           Thu 03 Jul 2025 15:49:05 +0000
ROA not after:            Thu 02 Jul 2026 15:54:05 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:191c::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 02:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:18:6e:37:87:db:7e:7a:f8:f0:2d:c6:cc:2d:7f:98:bb:92:f9:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
        Validity
            Not Before: Jul  3 15:49:05 2025 GMT
            Not After : Jul  2 15:54:05 2026 GMT
        Subject: CN=A7364F4CDCCF0732372E73655817306861CDFA4F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:3d:a3:fb:b2:dd:40:27:fa:ac:64:11:75:e4:
                    87:60:63:b7:21:ec:3c:15:41:7e:54:b6:32:96:2e:
                    1b:75:78:cb:a5:ab:d7:43:77:da:3b:3d:d5:b6:37:
                    38:fb:89:bb:60:24:ab:c0:66:0a:91:c4:54:4f:92:
                    b4:16:b9:99:4f:1f:d0:55:45:ce:69:5e:a1:2a:61:
                    9a:cb:1d:fa:73:fa:2c:54:16:8f:62:f9:a0:c3:47:
                    05:aa:ca:6c:7b:ba:8b:d1:63:65:9b:69:5a:e3:93:
                    05:48:71:d4:85:50:bc:f4:3e:9e:a5:18:75:bb:d4:
                    d0:90:ad:52:c8:5e:f3:c7:8e:02:7a:3c:3d:19:63:
                    df:f8:9d:0c:88:df:0f:d1:8f:ee:0b:f5:c7:3d:3b:
                    6b:23:35:f3:f8:20:a2:ef:ef:fe:fe:09:76:6c:96:
                    71:57:34:97:dd:df:fc:bc:6a:8f:c4:60:d6:96:46:
                    ad:6e:10:09:a5:4d:08:c5:b5:7d:33:21:7b:6c:28:
                    2b:98:ab:39:94:09:da:b1:f4:68:75:0b:0f:3d:37:
                    c8:cb:c7:0c:db:4f:c0:d0:fc:e0:0f:2c:79:90:bf:
                    ea:04:ab:f6:9b:9f:27:2f:86:16:60:c9:aa:3d:47:
                    ac:43:56:6c:d7:f1:aa:5b:3f:fe:74:67:0b:b4:cf:
                    07:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:36:4F:4C:DC:CF:07:32:37:2E:73:65:58:17:30:68:61:CD:FA:4F
            X509v3 Authority Key Identifier:
                keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a313931633a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:191c::/48

    Signature Algorithm: sha256WithRSAEncryption
         69:14:c5:96:e8:34:31:15:a9:ff:bd:0a:ea:d2:79:1e:ab:88:
         15:9a:17:95:dc:c3:d0:04:80:23:71:a8:4c:f1:2b:1c:b4:50:
         34:12:75:d7:69:29:bb:c2:4c:a8:0c:a6:89:03:3f:8d:28:1b:
         0e:f6:13:c1:2d:6f:62:a2:23:f7:be:80:4b:2b:23:a7:88:78:
         76:40:f2:c6:db:41:a5:8b:98:d4:bd:83:4f:96:69:a6:22:0a:
         78:99:35:da:9d:89:a0:f6:a4:3d:a3:2c:fa:25:de:bf:a6:34:
         db:82:89:a6:3a:a6:17:32:a5:5a:74:c7:27:7b:eb:44:2a:34:
         d6:dc:86:ff:35:e2:5f:d9:09:01:32:7a:4e:8e:8c:d6:03:1c:
         ac:55:8e:85:a0:fe:b1:bb:2a:99:d5:63:06:1d:a9:33:9f:36:
         48:fb:a6:83:a8:2f:df:78:f4:7d:ad:c9:48:20:04:92:b7:ff:
         39:70:fa:34:5a:ed:af:ca:3f:44:58:85:94:d6:02:1c:05:1f:
         93:57:ca:fd:fc:f9:60:7f:ae:d8:53:d4:30:fe:a8:cf:44:9a:
         4a:53:ba:5f:9d:b2:84:b2:ae:ac:f6:02:0c:e8:ad:04:40:1b:
         f5:74:fe:63:30:9f:a3:31:1c:e2:34:ee:f5:32:ac:ec:23:bb:
         90:44:da:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 11:46:25 2025 by rpki-client