Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a3162343a3a2f34382d3438203d3e203532303235.roa
File:                     326130353a646663343a3162343a3a2f34382d3438203d3e203532303235.roa (raw, json)
Hash identifier:          blwkUpWSrkt7BH0RnOjzxfWeFP/onIi3h759thdHL48=
Subject key identifier:   ED:E8:08:D0:7A:2B:07:E9:D5:D5:B0:CA:EF:0C:CC:8C:A7:32:F5:44
Certificate issuer:       /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial:       3BBC7F6C7FF717BA2D455AEEA12226FA465907CC
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a3162343a3a2f34382d3438203d3e203532303235.roa
Signing time:             Thu 03 Jul 2025 15:54:00 +0000
ROA not before:           Thu 03 Jul 2025 15:49:00 +0000
ROA not after:            Thu 02 Jul 2026 15:54:00 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:1b4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 02:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:bc:7f:6c:7f:f7:17:ba:2d:45:5a:ee:a1:22:26:fa:46:59:07:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
        Validity
            Not Before: Jul  3 15:49:00 2025 GMT
            Not After : Jul  2 15:54:00 2026 GMT
        Subject: CN=EDE808D07A2B07E9D5D5B0CAEF0CCC8CA732F544
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:75:ac:eb:e4:fc:6b:cd:fd:0d:51:c7:be:d5:
                    c9:c8:9a:4a:a8:de:a1:2e:c2:87:ce:36:a2:db:b3:
                    88:3b:6e:64:63:69:71:97:a5:95:ae:e2:be:4a:e3:
                    db:28:a6:2c:9e:4c:6b:ce:11:26:92:1a:bd:71:99:
                    a1:97:05:75:9d:7d:8a:2a:fd:1b:24:6c:ad:f4:06:
                    a0:75:f8:9e:cb:9b:39:c0:1d:d1:51:b6:a8:03:cc:
                    77:c0:2b:08:32:fe:09:83:b7:7c:20:eb:b7:53:73:
                    6c:b5:e7:ee:c6:35:9a:5a:99:4f:d3:b2:2f:80:a1:
                    f0:af:c4:c9:16:d1:0d:c6:b0:fd:5c:c3:d6:2d:44:
                    fe:cb:b2:ab:d4:98:93:99:d2:5f:64:c4:5a:0c:05:
                    c6:bf:4a:55:a4:63:63:56:9f:a9:72:e5:43:58:69:
                    cf:b4:d2:60:7a:dd:05:f4:a6:f5:67:c1:e9:33:bc:
                    f1:fd:05:99:98:87:ee:e5:a5:ac:b2:03:ac:e6:dd:
                    2c:25:94:d6:dd:df:8f:82:fd:cc:4b:58:f9:b2:74:
                    53:57:ee:a1:d9:e9:4a:c7:0f:32:ce:bf:d6:49:52:
                    b0:02:db:1e:96:46:b8:21:ee:85:86:0c:21:fe:8d:
                    38:3e:1f:3a:61:0b:fa:c1:f7:ec:21:d1:b1:5f:af:
                    49:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:E8:08:D0:7A:2B:07:E9:D5:D5:B0:CA:EF:0C:CC:8C:A7:32:F5:44
            X509v3 Authority Key Identifier:
                keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a3162343a3a2f34382d3438203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:1b4::/48

    Signature Algorithm: sha256WithRSAEncryption
         5d:a2:99:8a:42:99:06:cd:95:17:b1:8f:f4:ba:76:50:ed:ca:
         08:1d:ee:a5:72:7d:d3:64:e3:c5:b3:49:e4:20:eb:9d:08:a8:
         e0:20:7d:8f:0d:cd:3f:18:9b:dd:fb:2b:e5:29:4e:e5:95:8a:
         64:2b:29:9f:5e:40:7d:15:ed:2f:d2:0f:21:54:2a:11:90:f1:
         0a:30:85:82:41:4b:8d:c5:cc:2b:76:3e:d1:b0:ac:f7:3d:08:
         a7:63:e7:85:4f:4f:fe:c0:c0:7b:66:42:79:f6:90:93:e7:53:
         9e:e5:08:4a:1a:62:c6:4b:a8:44:74:42:29:e5:48:c7:3e:f0:
         e0:a3:ce:3b:9d:4f:89:72:55:ba:e7:58:9b:67:4b:ba:bd:94:
         af:ba:e0:25:ad:3a:ff:e8:4c:c8:e0:e4:3c:2c:8d:17:f9:4f:
         3f:38:ec:94:36:ae:a7:48:72:fb:82:83:eb:9d:14:a2:49:6c:
         0c:a9:b7:99:ee:e8:6a:45:7e:9e:07:41:54:31:ca:4d:b5:55:
         0e:6d:80:56:59:32:b3:0e:a4:10:74:37:48:75:26:25:e6:bc:
         b6:e0:b3:dc:ae:c8:b5:52:c4:e9:72:18:c0:1e:d0:b6:94:d5:
         1b:dc:72:b8:3e:97:30:2b:40:52:9a:5a:38:90:1a:fb:c5:2e:
         d9:07:86:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 11:37:23 2025 by rpki-client