Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a323032343a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a323032343a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          4JTlPlVERoKN4hYvNIY0wKszAZEfw7yKmULRxi0zSAc=
Subject key identifier:   01:D9:03:B6:9A:41:33:CB:85:6F:61:CF:BC:2E:EB:AF:53:7E:10:34
Certificate issuer:       /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial:       09502B9A18190B453E542B31CA0C15D441F4934E
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a323032343a3a2f34382d313238203d3e203532303235.roa
Signing time:             Thu 03 Jul 2025 15:54:12 +0000
ROA not before:           Thu 03 Jul 2025 15:49:12 +0000
ROA not after:            Thu 02 Jul 2026 15:54:12 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:2024::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 02:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:50:2b:9a:18:19:0b:45:3e:54:2b:31:ca:0c:15:d4:41:f4:93:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
        Validity
            Not Before: Jul  3 15:49:12 2025 GMT
            Not After : Jul  2 15:54:12 2026 GMT
        Subject: CN=01D903B69A4133CB856F61CFBC2EEBAF537E1034
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:8d:1c:65:c2:b4:31:30:79:e8:90:50:8f:8c:
                    70:79:c5:a6:02:7f:aa:e9:00:5f:df:3e:5e:26:17:
                    d0:c3:1b:e8:a7:c6:57:e7:e1:2d:5e:78:8b:bf:24:
                    ea:6e:6e:34:35:58:fe:98:42:ee:92:50:c9:5c:7a:
                    f7:00:00:e5:7f:aa:ba:70:e1:6f:68:d5:60:39:c1:
                    67:59:db:87:bc:3a:45:fd:ff:18:5a:a0:33:6a:20:
                    6d:5c:2d:d7:f5:82:96:ff:38:8e:55:a2:01:c1:0c:
                    19:14:3a:43:60:7c:06:4d:05:6d:f5:8e:e3:02:a6:
                    a8:ca:f7:6d:ca:ba:3b:ce:5a:1a:c6:93:07:26:08:
                    02:3f:74:5e:55:59:88:24:e8:63:4c:ff:75:09:d8:
                    35:66:26:ab:5a:ed:7f:26:43:e2:96:7d:a6:02:b2:
                    47:a7:aa:ac:2d:4f:5d:f4:ac:d6:a0:e6:f3:94:f1:
                    ee:a8:fa:b5:ad:5e:21:07:0b:55:8b:bc:1c:4c:8b:
                    ba:d7:5e:f4:66:93:7e:93:a7:53:12:c0:0a:bc:b8:
                    f1:b3:2e:47:d9:6b:ca:af:cf:9d:e0:4f:75:90:3a:
                    9a:c1:c7:e1:73:c9:8d:e3:19:a7:fd:58:f2:88:4f:
                    5f:47:95:05:fa:92:32:c6:34:4d:09:75:00:6a:cf:
                    d6:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:D9:03:B6:9A:41:33:CB:85:6F:61:CF:BC:2E:EB:AF:53:7E:10:34
            X509v3 Authority Key Identifier:
                keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a323032343a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:2024::/48

    Signature Algorithm: sha256WithRSAEncryption
         0b:86:38:b1:0c:4f:32:bd:3b:b3:fd:76:97:c2:8b:3e:6b:9b:
         db:9a:34:b4:94:29:ea:25:43:8b:0a:2e:88:8e:9b:7f:a9:27:
         ac:e4:8c:5c:44:bd:22:d1:88:ed:de:a8:82:cd:c7:5b:f2:eb:
         5c:59:3c:6c:8b:27:6a:72:f7:de:7e:a6:3a:17:a9:3d:ac:b8:
         3b:29:bd:07:0e:8d:10:0a:81:23:3f:9c:67:f2:3e:16:e0:2e:
         ad:c6:74:b5:b3:8e:ec:ce:08:6e:62:cc:3e:a5:46:9b:0b:11:
         10:40:6d:6a:ff:da:e9:6e:de:8e:d5:a7:0f:d8:3c:58:6c:04:
         32:65:c2:4e:ea:85:94:1c:6d:15:df:2e:49:40:9d:a8:9e:a0:
         09:76:b5:11:58:a8:e5:a0:e0:af:1a:5a:3c:e7:a5:bc:58:e5:
         d2:a2:91:13:50:cc:99:35:8d:13:5c:cf:94:e2:70:12:b9:ea:
         1b:87:2b:1b:87:fc:49:54:36:39:e7:e3:fc:fa:c0:95:d0:ee:
         dc:db:28:dd:59:90:1c:36:59:2f:33:82:f5:21:ed:7c:0d:5b:
         d8:70:db:11:63:38:47:25:9b:b0:3a:4c:e3:21:18:bc:69:49:
         43:c1:68:70:3a:41:d4:57:90:b1:bf:c5:f5:97:40:5a:b7:5b:
         a1:a1:89:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 11:56:37 2025 by rpki-client