Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a316331653a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a316331653a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          Y3ay2ULeMZBmE0b4ERzHOQs8QkSCRwv14tW2LjhH0b8=
Subject key identifier:   CC:53:94:A6:BE:32:86:F8:BD:0E:39:56:DB:E3:12:07:B0:32:BE:43
Certificate issuer:       /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial:       641A43CF16433CE850FEC4C5BA1596DBBADC024D
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a316331653a3a2f34382d313238203d3e203532303235.roa
Signing time:             Thu 03 Jul 2025 15:53:54 +0000
ROA not before:           Thu 03 Jul 2025 15:48:54 +0000
ROA not after:            Thu 02 Jul 2026 15:53:54 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:1c1e::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 02:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:1a:43:cf:16:43:3c:e8:50:fe:c4:c5:ba:15:96:db:ba:dc:02:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
        Validity
            Not Before: Jul  3 15:48:54 2025 GMT
            Not After : Jul  2 15:53:54 2026 GMT
        Subject: CN=CC5394A6BE3286F8BD0E3956DBE31207B032BE43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:99:46:5d:92:67:00:bd:04:da:08:c8:93:17:
                    74:12:f8:f8:cc:42:30:1f:8c:10:70:f1:19:45:85:
                    28:c0:2e:e9:51:77:fa:12:97:e1:88:64:84:c7:ab:
                    e4:22:45:9e:c9:28:06:4a:ef:74:28:3a:e0:ff:be:
                    3e:d1:56:02:56:8f:a9:25:c4:87:84:fe:22:e4:f2:
                    38:78:00:f1:42:d2:25:5c:de:fb:7c:d8:b1:5a:a3:
                    97:ba:d5:2d:8a:2b:a4:f1:e0:2f:41:a5:b6:cd:c7:
                    47:04:50:04:d8:8c:b7:18:50:e4:2e:21:fe:b2:d8:
                    87:cf:f1:86:b8:b4:58:c1:c8:a9:fc:ee:12:72:21:
                    07:be:a0:81:c1:54:f9:01:dc:32:89:29:89:f5:98:
                    b0:45:cc:85:08:bf:8c:15:f0:f9:67:49:b7:90:76:
                    d2:d6:7e:70:68:e8:f2:4c:b8:67:c6:7d:f4:63:fa:
                    a5:0b:7f:e1:d8:25:c0:8e:d3:df:06:59:c4:94:ea:
                    fa:73:9b:34:f4:a3:74:d4:4c:f3:db:92:f7:11:53:
                    75:da:d2:59:67:68:2a:97:f3:d9:95:23:72:13:2f:
                    84:07:0c:f3:3f:85:75:c8:3b:cb:1c:ef:7c:53:f2:
                    bc:d6:31:6e:82:c8:e7:57:0c:99:94:be:e8:14:dc:
                    21:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:53:94:A6:BE:32:86:F8:BD:0E:39:56:DB:E3:12:07:B0:32:BE:43
            X509v3 Authority Key Identifier:
                keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a316331653a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:1c1e::/48

    Signature Algorithm: sha256WithRSAEncryption
         17:1c:04:58:e0:73:f1:ca:f0:50:82:60:66:c8:1d:23:92:6e:
         ff:b0:20:62:20:95:31:5c:2d:bc:2b:5b:75:ba:c4:b2:6f:71:
         2d:38:89:30:c9:55:d1:11:99:6a:57:21:bd:1c:fa:f2:11:2d:
         1c:f8:34:36:e5:e8:3c:35:f1:ee:94:31:d3:bf:3c:0c:0e:ae:
         19:63:b0:f1:85:a9:8c:da:37:82:7a:fd:ef:b4:95:18:4e:f3:
         63:2d:6c:8b:98:bd:d5:9b:f5:5e:61:31:cb:f8:09:2b:5d:61:
         25:f1:d3:75:65:69:a7:e6:3c:78:72:20:9e:a8:2f:2a:1f:23:
         09:00:36:36:61:8b:cc:7a:0f:83:21:f5:bb:e7:e2:c8:6e:70:
         a5:aa:c9:20:57:93:12:a9:9e:ac:93:28:63:6f:72:c8:b0:d0:
         04:8b:78:c2:c3:37:1f:c0:34:cf:2d:41:34:89:09:45:4e:80:
         73:32:23:63:bd:44:01:3a:76:fb:98:5f:91:5c:c3:62:69:32:
         89:63:ec:cf:d9:8d:9f:59:40:0e:5b:26:b5:48:b1:c4:0b:55:
         99:c5:61:e2:6b:5e:e0:84:dc:ec:a5:f8:ab:93:3e:9e:ed:6a:
         d9:87:d9:29:d9:6e:92:97:09:85:f7:6b:fb:5d:14:c6:b6:1b:
         cc:d7:8f:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 12:01:56 2025 by rpki-client