Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a316532303a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a316532303a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          yCqr5zL26YiH7KHhE3d67aI1HVXm8jUnqPWTjWnHG7Y=
Subject key identifier:   6E:16:28:CC:2F:22:A4:8D:96:C7:65:5B:D6:39:A2:70:B4:E4:E7:7F
Certificate issuer:       /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial:       505806ADF7A7AEEDBF2FDFE07E487F5E1F5B43F0
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a316532303a3a2f34382d313238203d3e203532303235.roa
Signing time:             Thu 03 Jul 2025 15:54:03 +0000
ROA not before:           Thu 03 Jul 2025 15:49:03 +0000
ROA not after:            Thu 02 Jul 2026 15:54:03 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:1e20::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 02:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:58:06:ad:f7:a7:ae:ed:bf:2f:df:e0:7e:48:7f:5e:1f:5b:43:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
        Validity
            Not Before: Jul  3 15:49:03 2025 GMT
            Not After : Jul  2 15:54:03 2026 GMT
        Subject: CN=6E1628CC2F22A48D96C7655BD639A270B4E4E77F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:50:3c:6e:2e:f4:81:00:be:81:86:d4:4a:55:
                    36:ac:16:86:ed:ba:bb:ad:ea:51:ba:2c:46:12:34:
                    3d:2d:0d:8e:06:fd:a6:b6:c8:e7:72:37:df:47:e6:
                    81:77:e2:15:34:bb:ba:d7:8d:55:9f:b2:08:0f:2f:
                    b6:a1:3f:a6:6c:2d:87:1e:ee:c6:d1:f3:92:e5:3b:
                    06:e4:16:25:42:14:5c:1a:8b:70:2e:5b:7a:72:d8:
                    db:8f:03:58:b3:28:a3:44:4d:30:00:1e:e6:6c:b3:
                    46:09:77:cd:e0:4c:7c:5e:99:0c:fd:0d:43:29:5e:
                    58:9b:2a:6b:25:a9:d9:8d:bd:45:10:3e:f5:24:39:
                    11:26:2d:ef:59:be:5f:a1:15:83:ad:b1:c4:02:6a:
                    69:0d:a4:d0:e7:42:bf:22:03:bb:ba:9f:b2:b0:be:
                    3a:d5:92:40:16:95:29:6a:a0:d2:fa:a8:eb:36:52:
                    98:28:84:58:2c:32:3d:ea:94:e9:44:b7:60:73:33:
                    ad:09:f5:77:9b:ae:d3:f4:b9:f6:bd:21:43:b8:4b:
                    12:0a:a2:c3:29:32:36:d4:7a:2d:89:27:28:3e:bc:
                    0f:7a:71:30:69:66:c2:ca:4d:1a:06:b7:9a:6a:eb:
                    08:5f:f1:fa:87:b5:83:ea:71:ce:a9:6d:03:04:b1:
                    8b:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:16:28:CC:2F:22:A4:8D:96:C7:65:5B:D6:39:A2:70:B4:E4:E7:7F
            X509v3 Authority Key Identifier:
                keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a316532303a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:1e20::/48

    Signature Algorithm: sha256WithRSAEncryption
         07:55:3a:b2:93:ba:37:bc:6d:21:05:84:31:d7:ea:d7:dd:32:
         f7:73:4b:12:2c:22:3c:0a:28:fe:53:10:ea:4a:2e:f8:92:e1:
         ea:8e:59:4e:e4:36:05:22:62:d4:ac:34:a1:6b:51:49:3e:bb:
         5e:cf:67:71:69:07:2a:49:90:32:8f:4c:77:58:98:4c:34:e6:
         b3:69:7c:79:ac:e3:43:34:bf:cd:2d:5e:34:f5:91:f1:e0:7b:
         8e:6d:74:4c:36:ce:8f:1e:36:84:92:f3:d6:01:ef:ed:12:84:
         83:ad:69:fc:63:5b:11:c3:0e:36:24:af:17:00:33:62:8e:17:
         85:0d:30:37:7b:ef:7c:b0:47:a6:cf:44:ac:d4:51:9f:01:8a:
         43:60:b2:d6:19:4c:3e:58:d8:ef:d4:a6:6e:1f:bc:89:36:61:
         1f:c3:65:09:29:31:b8:9c:40:59:d4:d6:7f:c6:95:11:47:77:
         c0:a6:23:17:89:b5:51:9a:49:22:7f:bb:f6:f2:49:4f:f5:0e:
         28:0b:a8:a1:b0:73:99:93:56:d6:38:f1:49:35:88:dc:d3:76:
         17:5b:77:af:51:71:ca:70:80:6b:ca:52:b0:7c:9e:d5:30:00:
         61:2f:4b:ca:fb:bd:c6:a0:19:c3:71:4c:22:f5:16:8e:b3:f1:
         15:89:82:28
-----BEGIN CERTIFICATE-----
MIIFJTCCBA2gAwIBAgIUUFgGrfenru2/L9/gfkh/Xh9bQ/AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjYzODZGQUJFQTM5MjEwQjY2NUE2QTU1QUU1REE2NkJF
Njc0MTU5NzAeFw0yNTA3MDMxNTQ5MDNaFw0yNjA3MDIxNTU0MDNaMDMxMTAvBgNV
BAMTKDZFMTYyOENDMkYyMkE0OEQ5NkM3NjU1QkQ2MzlBMjcwQjRFNEU3N0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMUDxuLvSBAL6BhtRKVTasFobt
urut6lG6LEYSND0tDY4G/aa2yOdyN99H5oF34hU0u7rXjVWfsggPL7ahP6ZsLYce
7sbR85LlOwbkFiVCFFwai3AuW3py2NuPA1izKKNETTAAHuZss0YJd83gTHxemQz9
DUMpXlibKmslqdmNvUUQPvUkOREmLe9Zvl+hFYOtscQCamkNpNDnQr8iA7u6n7Kw
vjrVkkAWlSlqoNL6qOs2UpgohFgsMj3qlOlEt2BzM60J9XebrtP0ufa9IUO4SxIK
osMpMjbUei2JJyg+vA96cTBpZsLKTRoGt5pq6whf8fqHtYPqcc6pbQMEsYuvAgMB
AAGjggIvMIICKzAdBgNVHQ4EFgQUbhYozC8ipI2Wx2Vb1jmicLTk538wHwYDVR0j
BBgwFoAU9jhvq+o5IQtmWmpVrl2ma+Z0FZcwDgYDVR0PAQH/BAQDAgeAMG4GA1Ud
HwRnMGUwY6BhoF+GXXJzeW5jOi8vcnBraS0wMS5wZHhuZXQudWsvcmVwby9wYXJh
ZG94bmV0d29ya3MvOC9GNjM4NkZBQkVBMzkyMTBCNjY1QTZBNTVBRTVEQTY2QkU2
NzQxNTk3LmNybDCBkwYIKwYBBQUHAQEEgYYwgYMwgYAGCCsGAQUFBzAChnRyc3lu
YzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYz
ZTAxODU3NTVjOTFiZTNmOWQvNy9GNjM4NkZBQkVBMzkyMTBCNjY1QTZBNTVBRTVE
QTY2QkU2NzQxNTk3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzAL
hnVyc3luYzovL3Jwa2ktMDEucGR4bmV0LnVrL3JlcG8vcGFyYWRveG5ldHdvcmtz
LzgvMzI2MTMwMzUzYTY0NjY2MzM0M2EzMTY1MzIzMDNhM2EyZjM0MzgyZDMxMzIz
ODIwM2QzZTIwMzUzMjMwMzIzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF38QeIDANBgkqhkiG9w0B
AQsFAAOCAQEAB1U6spO6N7xtIQWEMdfq190y93NLEiwiPAoo/lMQ6kou+JLh6o5Z
TuQ2BSJi1Kw0oWtRST67Xs9ncWkHKkmQMo9Md1iYTDTms2l8eazjQzS/zS1eNPWR
8eB7jm10TDbOjx42hJLz1gHv7RKEg61p/GNbEcMONiSvFwAzYo4XhQ0wN3vvfLBH
ps9ErNRRnwGKQ2Cy1hlMPljY79Smbh+8iTZhH8NlCSkxuJxAWdTWf8aVEUd3wKYj
F4m1UZpJIn+79vJJT/UOKAuoobBzmZNW1jjxSTWI3NN2F1t3r1FxynCAa8pSsHye
1TAAYS9Lyvu9xqAZw3FMIvUWjrPxFYmCKA==
-----END CERTIFICATE-----
Generated at Sat Jul 5 12:08:56 2025 by rpki-client