Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a316332633a3a2f34382d3438203d3e203532303235.roa
File:                     326130353a646663343a316332633a3a2f34382d3438203d3e203532303235.roa (raw, json)
Hash identifier:          h5F7DwhhFkWzYeNTxpSL0agJnGyS4O3YI6joV0WrihA=
Subject key identifier:   82:E3:0A:F4:7D:62:B9:CC:6F:97:3E:55:50:93:53:BB:86:D2:07:C5
Certificate issuer:       /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial:       164558B5E11DBB33300ABB499C751966E06C1290
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a316332633a3a2f34382d3438203d3e203532303235.roa
Signing time:             Thu 03 Jul 2025 15:54:07 +0000
ROA not before:           Thu 03 Jul 2025 15:49:07 +0000
ROA not after:            Thu 02 Jul 2026 15:54:07 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:1c2c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 02:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:45:58:b5:e1:1d:bb:33:30:0a:bb:49:9c:75:19:66:e0:6c:12:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
        Validity
            Not Before: Jul  3 15:49:07 2025 GMT
            Not After : Jul  2 15:54:07 2026 GMT
        Subject: CN=82E30AF47D62B9CC6F973E55509353BB86D207C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:07:b9:18:a0:00:a5:fe:8d:fd:44:a5:c1:36:
                    c9:b7:6d:75:e3:9f:82:8c:7e:d7:ec:04:06:10:a1:
                    69:ab:bb:a1:d3:fc:4d:be:56:24:80:e0:ca:b6:81:
                    39:4c:e3:6f:b1:63:b6:59:ae:ef:da:57:3e:98:55:
                    c0:02:19:d0:6c:39:a9:05:cd:27:6d:ed:b5:80:a1:
                    ac:60:42:0e:7b:71:74:8b:44:c9:fb:e4:dc:5d:81:
                    6b:e5:16:ca:bf:a2:a0:f3:e2:24:c9:9e:10:ab:c7:
                    93:6d:c1:4c:88:e4:09:68:dd:e7:47:dd:4b:86:f5:
                    39:82:58:2e:16:23:d5:17:67:0e:cc:bd:99:e6:ec:
                    39:6c:4c:59:47:fb:7c:92:80:a8:92:b9:3a:d2:f2:
                    1a:0d:42:e9:bb:3b:35:b5:9c:82:10:2d:2e:70:85:
                    61:07:b3:e6:ef:11:7f:e4:b9:45:71:6d:9d:cd:e7:
                    1d:dc:e0:b5:e0:e3:4a:48:04:ec:5e:98:e7:12:f4:
                    67:3f:6d:de:0c:db:7e:fc:7a:f3:10:d4:15:8d:04:
                    80:c1:10:2e:7d:d9:83:f0:84:02:2f:84:4d:32:c3:
                    e8:33:e3:46:63:b5:7a:e2:29:97:c6:6a:0d:0d:1f:
                    71:3c:b3:3f:04:36:80:0c:8a:68:c2:44:94:61:c2:
                    79:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:E3:0A:F4:7D:62:B9:CC:6F:97:3E:55:50:93:53:BB:86:D2:07:C5
            X509v3 Authority Key Identifier:
                keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a316332633a3a2f34382d3438203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:1c2c::/48

    Signature Algorithm: sha256WithRSAEncryption
         10:cc:f0:f7:f7:c1:f5:4b:70:a5:f1:dc:82:4e:97:98:3a:6b:
         f8:41:81:0b:6d:21:b8:c3:05:12:4b:6c:cd:06:22:17:c7:9f:
         4c:a0:bd:58:3f:1c:44:11:db:7f:63:1f:4b:94:1c:51:0c:cc:
         16:bc:35:dc:50:f3:26:1e:40:bc:7b:fc:6f:4c:30:14:ac:90:
         f3:6b:46:08:24:a6:26:3c:44:df:83:46:a3:16:5d:51:92:45:
         12:08:61:2f:b6:16:6d:16:88:cd:c5:a2:d7:a5:92:8d:95:32:
         92:32:f0:9a:00:d2:d8:ee:3c:df:b7:bd:4a:e9:9d:f1:02:9a:
         24:a2:2e:bb:a9:f0:f0:46:70:68:d1:79:9b:c4:53:c3:20:b8:
         ff:a5:20:eb:b3:55:0f:05:98:0f:50:be:41:a4:3e:3b:e8:a4:
         62:81:c3:1a:77:d0:9e:9a:c6:70:c4:42:7b:32:d5:3c:ea:91:
         5a:13:6a:ba:4f:97:6f:c7:f4:be:75:cc:75:86:97:90:31:08:
         2c:7a:1b:2c:32:c4:31:ff:76:61:70:43:9d:99:36:bd:c5:f6:
         3a:c4:e0:65:93:63:68:73:e3:63:be:54:8e:f2:af:78:49:a0:
         00:be:51:d7:be:59:99:12:a6:56:50:f6:2f:02:65:54:ae:b1:
         2b:77:b2:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 11:37:23 2025 by rpki-client