Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a316231663a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a316231663a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          WmDqIfDKXwDvL2T30WMuGSCk+YeCE56LlH/tG2visQc=
Subject key identifier:   5C:B9:47:6C:F3:50:8C:4D:86:40:84:36:EA:CE:80:EE:CC:4B:ED:3C
Certificate issuer:       /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial:       3BDEDE065175DFCFB971B632FE343F460532E74D
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a316231663a3a2f34382d313238203d3e203532303235.roa
Signing time:             Thu 03 Jul 2025 15:54:08 +0000
ROA not before:           Thu 03 Jul 2025 15:49:08 +0000
ROA not after:            Thu 02 Jul 2026 15:54:08 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:1b1f::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 02:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:de:de:06:51:75:df:cf:b9:71:b6:32:fe:34:3f:46:05:32:e7:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
        Validity
            Not Before: Jul  3 15:49:08 2025 GMT
            Not After : Jul  2 15:54:08 2026 GMT
        Subject: CN=5CB9476CF3508C4D86408436EACE80EECC4BED3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:71:36:32:85:f6:a7:ad:af:40:c1:f1:76:89:
                    20:bf:02:8d:56:5a:ba:06:29:d5:8a:ca:09:6f:93:
                    b6:24:fd:46:cb:0d:1e:83:a5:7c:ab:91:fb:4f:b0:
                    d4:c2:b5:8e:4f:4e:06:2e:97:4f:74:91:e3:62:5b:
                    c3:a5:d7:6a:05:33:29:67:c3:f8:10:c9:59:22:fb:
                    1a:8c:3e:61:ba:0d:20:dc:bb:ca:45:36:7e:00:41:
                    2c:86:be:e3:c6:51:66:40:7f:e0:24:01:08:ff:16:
                    e4:13:52:e9:4a:17:79:d5:e8:50:9f:fd:61:a7:82:
                    97:31:28:6c:9c:44:11:65:86:42:b7:72:fe:c9:ae:
                    f5:8c:b8:60:4d:f4:52:af:cc:0e:7b:6d:ee:44:dd:
                    81:6b:3f:fc:50:d9:8d:63:39:12:23:76:51:28:fd:
                    4e:34:3f:90:46:28:a0:e4:2c:19:ce:64:a8:b8:a9:
                    e3:b6:fd:64:a5:4c:38:9f:21:cb:38:b7:28:55:dd:
                    a5:c4:82:b6:e1:5a:11:af:3e:53:e6:d3:29:a3:f3:
                    f5:88:79:fc:2f:22:21:4f:b9:85:28:80:c6:d9:55:
                    de:38:39:fd:f6:fe:26:f5:b8:b6:56:25:09:7d:c8:
                    ee:64:bd:f4:49:8a:b9:8e:6b:7c:a6:ab:d1:d0:1e:
                    d3:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:B9:47:6C:F3:50:8C:4D:86:40:84:36:EA:CE:80:EE:CC:4B:ED:3C
            X509v3 Authority Key Identifier:
                keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a316231663a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:1b1f::/48

    Signature Algorithm: sha256WithRSAEncryption
         64:c2:79:cb:e4:bb:0b:85:ad:af:2f:1b:64:ff:e7:ce:dd:1d:
         22:12:60:c4:3a:d3:0d:7b:36:d0:1d:4c:0c:0a:e6:16:9e:fe:
         4c:4b:0a:ad:6c:12:44:57:66:19:0f:09:83:28:38:f8:37:31:
         39:9c:f0:ce:4d:a8:23:03:53:52:c5:9a:d7:6d:e5:a3:ac:f7:
         89:11:10:00:4d:f1:4e:62:cc:28:af:90:a1:7d:90:9d:90:eb:
         a7:db:fb:22:e0:4f:32:2d:78:6c:8c:da:2f:85:6f:a2:db:88:
         b6:b1:bd:f8:60:e2:e2:6b:a0:d5:51:0f:1f:78:38:00:a2:b6:
         b3:3f:f3:e5:a3:3f:f4:2d:33:dd:d7:d7:1f:e4:fd:e4:37:5e:
         29:c5:29:32:59:fd:e1:4b:0e:4a:8d:67:c9:7b:10:c1:ab:a1:
         ef:ca:93:14:34:77:33:bf:d3:f9:90:f1:98:82:9d:39:fa:6d:
         aa:87:67:b6:bc:03:35:b9:9e:3b:80:83:b9:3d:bc:03:2c:62:
         1c:e4:95:36:38:0c:7d:0a:68:5d:7f:6b:79:39:c8:7e:3d:e6:
         9d:74:0b:05:d7:56:f6:af:e1:86:2c:ad:c6:62:f2:92:d9:2e:
         73:77:4b:aa:69:61:fe:1f:46:1d:37:a5:7f:26:44:87:06:a2:
         20:00:f5:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 11:36:42 2025 by rpki-client