Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a316131643a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a316131643a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          AnHMbdBFemvLqhp2DeyXYsL9nGWGdRb5FnZCFKGU52I=
Subject key identifier:   8B:FB:25:9F:EE:0B:A6:25:C2:F3:D2:19:BC:E1:AC:35:E5:2B:CD:54
Certificate issuer:       /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial:       24C803AE0E487202BEB77ED885CDDEF65EC88C00
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a316131643a3a2f34382d313238203d3e203532303235.roa
Signing time:             Thu 03 Jul 2025 15:54:00 +0000
ROA not before:           Thu 03 Jul 2025 15:49:00 +0000
ROA not after:            Thu 02 Jul 2026 15:54:00 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:1a1d::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 02:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:c8:03:ae:0e:48:72:02:be:b7:7e:d8:85:cd:de:f6:5e:c8:8c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
        Validity
            Not Before: Jul  3 15:49:00 2025 GMT
            Not After : Jul  2 15:54:00 2026 GMT
        Subject: CN=8BFB259FEE0BA625C2F3D219BCE1AC35E52BCD54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:16:bd:a8:13:e1:44:93:f0:b8:fd:61:8f:9f:
                    d4:ae:c5:a8:75:8f:46:14:50:9f:a3:9d:07:76:cb:
                    15:64:53:f8:ba:17:10:40:fb:0f:80:59:77:cb:3f:
                    7a:04:45:a4:47:8c:c6:f4:31:bb:b4:4c:68:b6:cc:
                    f3:cf:26:5e:6f:a4:2e:34:7b:d0:03:f9:f3:0b:c4:
                    02:28:ec:c1:7c:c2:22:28:f1:db:f9:1f:08:fa:e9:
                    d4:a4:5b:68:51:e5:5e:98:ca:d2:a1:e2:92:b2:da:
                    98:55:07:d4:27:37:8c:92:27:0d:39:13:28:46:a3:
                    12:b8:1b:83:4d:4c:9d:6d:ac:45:5e:d7:a3:1a:d6:
                    e5:75:eb:29:82:ab:d4:ed:20:34:48:e3:77:0b:82:
                    0c:87:7c:af:a2:ed:40:1a:c3:ad:a3:f6:3d:01:94:
                    26:1e:3d:97:33:42:5e:84:52:6d:11:f8:01:4f:c5:
                    ee:8c:65:8b:40:2e:1a:ee:00:2d:ee:05:74:3e:39:
                    7a:b2:0b:bf:a1:8d:a5:70:37:08:4c:0a:94:c6:be:
                    a1:13:39:40:96:96:d2:ad:8f:a5:d7:93:9b:a7:c4:
                    36:67:e2:91:76:5f:91:73:1c:de:d9:71:5d:ed:5b:
                    85:ff:d3:f0:9f:a9:44:67:85:3d:66:a8:5b:33:5c:
                    0a:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:FB:25:9F:EE:0B:A6:25:C2:F3:D2:19:BC:E1:AC:35:E5:2B:CD:54
            X509v3 Authority Key Identifier:
                keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a316131643a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:1a1d::/48

    Signature Algorithm: sha256WithRSAEncryption
         13:82:ca:e1:1b:b4:bc:b5:bb:b3:21:9d:5d:95:fa:ae:93:33:
         7c:89:e7:bc:f8:59:fd:91:05:4e:d2:18:34:2f:8c:93:7e:08:
         4d:9e:b1:01:25:59:dd:f1:f0:66:88:18:2a:46:95:fa:eb:84:
         5b:82:f2:c8:d3:e5:6b:b6:72:85:0a:d5:c2:ab:67:eb:7b:7d:
         20:aa:81:0d:5a:08:b9:19:01:d9:52:59:b0:fc:8a:d0:ce:2f:
         7f:c0:ee:f7:f9:f4:55:7b:37:29:24:17:bd:c2:0d:36:f0:fb:
         5b:41:1f:39:df:49:9d:50:68:2e:47:70:92:42:50:80:3b:5b:
         ef:f0:e3:d1:1b:0d:f6:95:7a:e9:3c:8e:85:5a:cf:95:b0:61:
         e4:a8:f3:7c:72:56:d6:78:76:1b:88:13:e1:53:84:f1:32:6a:
         5c:90:ea:04:95:3f:e7:ea:22:1b:e7:6c:8c:92:f1:10:87:92:
         a3:26:29:21:ed:28:8d:4e:a0:d9:6c:c7:48:76:39:0c:dc:f4:
         c4:cf:a7:e0:d9:1f:fb:e7:f2:15:92:76:f3:d6:7f:0f:26:ad:
         e0:6b:71:73:c7:90:15:08:ab:10:92:93:08:2a:d4:97:41:ee:
         e9:00:5c:e6:c6:ab:0c:c4:d1:3d:73:a9:8d:16:b0:54:24:41:
         68:3b:cd:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 12:03:47 2025 by rpki-client