Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a3165653a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a3165653a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          Ksboyzk/bWEITxkHZPGvG/Iz34XWZjQ3O/zC7hWewBc=
Subject key identifier:   FB:10:14:0B:C2:B1:70:20:3F:1F:E4:4D:EF:D0:6D:3B:B3:28:5E:54
Certificate issuer:       /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial:       0F570E86258C821D3F53B9E56011931392B6B553
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a3165653a3a2f34382d313238203d3e203532303235.roa
Signing time:             Thu 03 Jul 2025 15:54:03 +0000
ROA not before:           Thu 03 Jul 2025 15:49:03 +0000
ROA not after:            Thu 02 Jul 2026 15:54:03 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:1ee::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 02:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:57:0e:86:25:8c:82:1d:3f:53:b9:e5:60:11:93:13:92:b6:b5:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
        Validity
            Not Before: Jul  3 15:49:03 2025 GMT
            Not After : Jul  2 15:54:03 2026 GMT
        Subject: CN=FB10140BC2B170203F1FE44DEFD06D3BB3285E54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:50:14:b5:32:b9:fd:6a:f8:3c:9b:ed:3d:78:
                    dd:3b:5f:c7:30:61:09:c9:26:2f:f0:9a:33:24:f4:
                    6f:22:94:45:f7:5b:0a:56:03:37:dc:4f:01:f7:23:
                    69:95:46:4f:bf:fd:e7:65:c6:e2:7f:f5:37:26:c4:
                    7f:90:1d:41:46:18:41:a0:70:c5:d8:76:a4:be:b5:
                    24:0a:48:5a:32:55:fb:84:74:d5:32:d8:92:03:78:
                    77:a9:dc:b1:05:05:d2:2e:8b:f3:5d:58:d4:73:72:
                    4a:01:39:1a:fd:1b:47:a9:f4:c2:f3:99:84:51:cf:
                    37:02:eb:bf:f3:13:76:4b:e2:c5:ca:d2:43:4a:33:
                    4b:13:23:ea:7e:06:08:f2:1e:38:9e:ed:fc:99:8d:
                    dd:bb:b6:c0:3c:3c:d9:7b:37:af:97:9e:58:4f:0a:
                    5b:ec:b5:61:68:65:21:81:86:23:f1:23:15:75:e8:
                    54:eb:ca:94:30:1b:a8:c4:15:59:64:ba:f0:76:7b:
                    5c:81:3f:64:b5:a8:23:69:c9:bb:d4:b9:45:3d:3d:
                    1c:2e:a8:94:5f:d2:7b:5c:52:d2:a7:2f:f6:e1:a0:
                    8b:71:a4:43:79:50:81:41:cf:c9:b8:98:b0:8c:5e:
                    1a:5d:a8:04:67:09:e2:c3:7e:dc:67:bb:a6:9c:72:
                    51:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:10:14:0B:C2:B1:70:20:3F:1F:E4:4D:EF:D0:6D:3B:B3:28:5E:54
            X509v3 Authority Key Identifier:
                keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a3165653a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:1ee::/48

    Signature Algorithm: sha256WithRSAEncryption
         5f:17:8a:ee:f6:9e:cc:ab:9b:37:b6:24:67:ef:6f:6d:11:3f:
         d7:41:ef:fe:ef:f5:dd:4c:fa:d8:62:00:e3:ad:a4:23:b9:49:
         7a:94:f7:c7:8f:ab:cc:50:3f:42:3b:1b:f4:c5:9b:d1:67:14:
         67:11:ce:8e:01:2c:ab:8d:9e:36:b4:88:b4:ae:79:c1:42:37:
         54:ae:fc:dc:99:f7:6c:a1:fc:35:b6:13:45:fd:47:09:b6:af:
         0b:1c:a5:69:b3:7c:58:6e:63:4a:3f:b3:da:61:ea:95:5b:d8:
         40:20:bc:fd:25:7e:20:dc:e2:67:84:bd:f0:7d:5c:32:0a:9f:
         87:ac:58:f6:04:1f:62:48:7f:2d:84:a3:c3:59:62:23:02:bf:
         e6:73:5e:38:2b:80:88:26:d3:da:65:9b:51:f4:77:88:26:62:
         ed:62:49:fc:e5:b0:22:21:72:4e:59:c0:1b:62:bd:e8:6f:fe:
         36:4d:12:a9:7d:2c:38:30:9a:12:f8:94:e0:82:47:fd:05:3a:
         17:83:15:4f:b2:ca:4a:b5:89:fb:87:82:73:f0:36:d3:29:37:
         75:d0:63:0a:1f:ed:15:06:cd:e3:81:c3:91:38:1e:56:9e:0a:
         25:2b:0a:d5:1d:4a:89:79:5f:cc:ea:45:28:64:be:5b:64:06:
         49:c8:f2:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 11:59:37 2025 by rpki-client