Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a316432323a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a316432323a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          mUaT0zQ3Eq9cmVp3ZS0xagWfOBU7q24DQ5N4r9pTxag=
Subject key identifier:   20:72:20:CF:1A:E4:82:FA:51:F8:8F:FC:29:A9:34:08:5D:D5:FE:E2
Certificate issuer:       /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial:       67102828C794DCA43A54271FE1736D2B503DD81A
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a316432323a3a2f34382d313238203d3e203532303235.roa
Signing time:             Thu 03 Jul 2025 15:54:09 +0000
ROA not before:           Thu 03 Jul 2025 15:49:09 +0000
ROA not after:            Thu 02 Jul 2026 15:54:09 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:1d22::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 02:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:10:28:28:c7:94:dc:a4:3a:54:27:1f:e1:73:6d:2b:50:3d:d8:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
        Validity
            Not Before: Jul  3 15:49:09 2025 GMT
            Not After : Jul  2 15:54:09 2026 GMT
        Subject: CN=207220CF1AE482FA51F88FFC29A934085DD5FEE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:64:4f:95:d3:5e:31:d8:1c:80:c0:1e:16:f0:
                    8c:5c:b7:fa:c3:b8:e6:90:d1:27:8c:ed:90:6c:b8:
                    95:0e:1a:18:e7:10:f4:13:63:15:5b:0d:6c:cb:c2:
                    15:c0:c1:79:31:a2:91:51:d0:bd:44:7b:2c:83:6f:
                    d2:5e:8d:89:eb:e4:ff:08:d6:15:72:48:b8:d3:62:
                    ea:fd:55:91:af:2b:39:8d:dc:65:3d:d2:51:8e:d9:
                    f0:88:36:c7:09:db:13:a7:11:7a:ac:17:44:58:88:
                    94:7e:37:c3:2a:dd:e0:b3:1a:49:3c:2e:34:46:05:
                    e8:8e:4a:a8:24:79:29:61:5e:7a:99:84:0b:5a:47:
                    1c:76:39:91:26:88:40:f6:b9:09:7f:d8:c2:a1:6d:
                    6e:ba:80:10:00:a2:96:f2:52:dd:43:99:76:ac:ac:
                    ad:8c:32:1b:67:93:be:c9:e1:41:88:24:18:3b:ff:
                    83:2c:02:d8:eb:97:23:6b:3d:0e:d6:67:ac:9f:94:
                    b5:cd:23:51:f7:f8:4b:17:84:66:c6:79:75:f7:3c:
                    f3:54:77:94:b8:4c:f6:2e:81:94:b5:c2:af:ed:27:
                    5c:61:71:8d:19:7d:93:0b:a8:6a:c4:c3:01:cf:93:
                    d1:7b:3a:3f:3d:e1:51:9b:43:01:e2:c0:34:e5:e9:
                    ac:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:72:20:CF:1A:E4:82:FA:51:F8:8F:FC:29:A9:34:08:5D:D5:FE:E2
            X509v3 Authority Key Identifier:
                keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a316432323a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:1d22::/48

    Signature Algorithm: sha256WithRSAEncryption
         34:d4:dd:f2:e4:29:c9:81:1b:29:03:6e:46:f6:8c:de:cb:04:
         05:b7:cc:d5:a9:ae:15:66:29:3a:11:8e:72:f3:32:38:58:37:
         f3:3a:88:36:64:e2:25:58:3d:05:f8:cd:4c:dc:a1:d6:65:bd:
         3e:b4:5e:af:97:3a:e0:e5:38:0d:4f:0e:fe:4f:b3:d7:49:74:
         63:84:ca:7d:06:66:f3:0a:f2:a8:7f:6c:d9:61:f3:ed:0e:27:
         c2:2c:01:43:3c:97:fe:d0:19:f3:6e:30:18:4e:6d:0f:d8:cb:
         cd:6c:1f:42:bc:a5:ba:a7:6a:02:bb:97:54:67:15:d3:46:0e:
         48:4f:79:5e:d0:11:ed:1e:4f:fe:b8:e1:64:92:15:ae:03:b4:
         fa:35:db:50:6f:ad:96:cc:27:92:7e:d5:28:89:59:8d:35:aa:
         86:fa:98:a6:63:eb:b4:e3:d5:a7:d0:fa:4e:3c:ab:09:9b:11:
         f0:52:b2:d2:08:79:2b:35:2b:bd:ed:cd:f8:33:c4:b6:31:ba:
         93:c5:4a:bc:90:bc:7a:86:ab:37:61:de:ac:f9:04:a6:31:57:
         55:39:fb:d2:cc:1f:b5:b0:e9:63:24:39:18:81:ba:f0:b3:cf:
         34:23:cf:e4:22:85:ef:e5:56:db:03:0c:6d:46:31:f2:2d:33:
         b8:44:96:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 12:03:47 2025 by rpki-client