Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a323032353a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a323032353a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          fsQctXStu3ex+mHvtGv/MGgImPmTfqwF6uyhJ1QG47U=
Subject key identifier:   AE:2D:7A:0F:2C:90:CE:A8:82:F2:2A:41:5E:3A:90:F9:DF:9F:5B:63
Certificate issuer:       /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial:       0616B758D771A9CC7DDFCB3DF8D9EFB679331B07
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a323032353a3a2f34382d313238203d3e203532303235.roa
Signing time:             Thu 03 Jul 2025 15:53:55 +0000
ROA not before:           Thu 03 Jul 2025 15:48:55 +0000
ROA not after:            Thu 02 Jul 2026 15:53:55 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:2025::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 03:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:16:b7:58:d7:71:a9:cc:7d:df:cb:3d:f8:d9:ef:b6:79:33:1b:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
        Validity
            Not Before: Jul  3 15:48:55 2025 GMT
            Not After : Jul  2 15:53:55 2026 GMT
        Subject: CN=AE2D7A0F2C90CEA882F22A415E3A90F9DF9F5B63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:86:d0:e0:f9:b0:e0:87:04:9d:ad:10:b7:1b:
                    c1:84:96:f9:3b:94:cc:b6:6a:d1:0b:f7:af:e7:28:
                    80:05:dd:3e:cc:9a:29:95:d2:c0:b6:61:12:42:a9:
                    37:86:9d:18:ca:76:0a:be:25:2d:1c:55:f8:03:87:
                    06:d4:2e:40:dd:61:88:ca:3a:60:6f:7d:01:75:f3:
                    e3:4e:c7:37:be:fe:a4:db:69:65:e1:ff:a2:61:81:
                    11:05:0a:fd:1b:b1:d3:f7:82:64:dc:32:91:01:31:
                    17:42:f1:c8:a8:b1:90:ba:56:47:8f:63:af:b8:37:
                    53:a6:44:59:a6:af:e5:26:1e:83:78:3c:b6:44:10:
                    75:88:e3:e3:52:22:98:e3:29:03:a3:c9:8d:bc:cc:
                    cf:84:3e:5e:a8:03:1c:a8:2b:33:73:57:c1:01:e3:
                    71:7a:c1:ea:21:65:ce:9f:0b:4f:dd:a2:e5:0b:24:
                    3f:8c:d3:01:7f:6e:ef:28:73:bc:ea:8c:5a:42:89:
                    6c:6b:e3:4a:e7:07:a2:7f:76:08:2e:ad:ad:86:c8:
                    0e:c1:6c:68:a7:40:5f:b5:6a:61:1d:d3:aa:f7:85:
                    35:3b:d5:12:98:1e:1d:a4:84:e4:f8:6f:74:11:70:
                    da:06:2c:8e:4d:96:68:35:48:6a:92:98:d2:cf:a1:
                    ab:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:2D:7A:0F:2C:90:CE:A8:82:F2:2A:41:5E:3A:90:F9:DF:9F:5B:63
            X509v3 Authority Key Identifier:
                keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a323032353a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:2025::/48

    Signature Algorithm: sha256WithRSAEncryption
         78:3e:ea:6d:9e:0a:30:60:07:d4:4b:80:d8:02:07:04:62:61:
         ee:ff:2d:1e:7a:3c:9c:07:66:2e:ee:c5:07:34:20:a9:e7:61:
         85:4d:fa:7d:69:7a:8d:3c:07:a4:b6:ff:76:37:67:e1:8f:bb:
         3c:fb:c2:6f:eb:21:fb:79:e2:c9:1a:5a:8a:0b:b7:2e:e8:f7:
         19:ae:e8:ba:70:8c:91:2e:d8:7f:11:b3:0a:1f:b1:2d:dc:3a:
         18:24:24:d1:0e:d6:a1:52:e1:a1:65:b6:70:a2:3c:ab:3f:c3:
         d3:45:52:4a:01:aa:54:3f:48:5d:bb:c3:de:22:99:4a:22:b1:
         6e:15:0c:d9:bb:5b:b3:ef:0f:ba:35:0a:f6:82:bf:e9:b9:ca:
         ae:06:65:8e:8a:81:3b:64:c8:d0:30:c8:b0:46:c1:b8:7c:f3:
         8d:f3:34:d8:bd:d2:fe:73:a3:77:1d:9e:cd:02:9c:de:9d:0a:
         a9:d1:91:b8:ac:24:3b:4b:59:41:a3:a0:77:a0:60:8c:fb:ba:
         64:fb:99:da:fc:29:40:f0:e2:50:b5:9e:b0:bd:d3:3e:76:49:
         09:bb:ff:f6:0c:66:48:6a:83:67:b8:e4:4e:4d:82:45:f8:f8:
         1e:d7:74:14:b2:f2:b8:72:fa:57:63:05:91:b5:98:c9:32:df:
         d7:43:18:7b
-----BEGIN CERTIFICATE-----
MIIFJTCCBA2gAwIBAgIUBha3WNdxqcx938s9+NnvtnkzGwcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjYzODZGQUJFQTM5MjEwQjY2NUE2QTU1QUU1REE2NkJF
Njc0MTU5NzAeFw0yNTA3MDMxNTQ4NTVaFw0yNjA3MDIxNTUzNTVaMDMxMTAvBgNV
BAMTKEFFMkQ3QTBGMkM5MENFQTg4MkYyMkE0MTVFM0E5MEY5REY5RjVCNjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGhtDg+bDghwSdrRC3G8GElvk7
lMy2atEL96/nKIAF3T7MmimV0sC2YRJCqTeGnRjKdgq+JS0cVfgDhwbULkDdYYjK
OmBvfQF18+NOxze+/qTbaWXh/6JhgREFCv0bsdP3gmTcMpEBMRdC8ciosZC6VkeP
Y6+4N1OmRFmmr+UmHoN4PLZEEHWI4+NSIpjjKQOjyY28zM+EPl6oAxyoKzNzV8EB
43F6weohZc6fC0/douULJD+M0wF/bu8oc7zqjFpCiWxr40rnB6J/dggura2GyA7B
bGinQF+1amEd06r3hTU71RKYHh2khOT4b3QRcNoGLI5Nlmg1SGqSmNLPoav7AgMB
AAGjggIvMIICKzAdBgNVHQ4EFgQUri16DyyQzqiC8ipBXjqQ+d+fW2MwHwYDVR0j
BBgwFoAU9jhvq+o5IQtmWmpVrl2ma+Z0FZcwDgYDVR0PAQH/BAQDAgeAMG4GA1Ud
HwRnMGUwY6BhoF+GXXJzeW5jOi8vcnBraS0wMS5wZHhuZXQudWsvcmVwby9wYXJh
ZG94bmV0d29ya3MvOC9GNjM4NkZBQkVBMzkyMTBCNjY1QTZBNTVBRTVEQTY2QkU2
NzQxNTk3LmNybDCBkwYIKwYBBQUHAQEEgYYwgYMwgYAGCCsGAQUFBzAChnRyc3lu
YzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYz
ZTAxODU3NTVjOTFiZTNmOWQvNy9GNjM4NkZBQkVBMzkyMTBCNjY1QTZBNTVBRTVE
QTY2QkU2NzQxNTk3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzAL
hnVyc3luYzovL3Jwa2ktMDEucGR4bmV0LnVrL3JlcG8vcGFyYWRveG5ldHdvcmtz
LzgvMzI2MTMwMzUzYTY0NjY2MzM0M2EzMjMwMzIzNTNhM2EyZjM0MzgyZDMxMzIz
ODIwM2QzZTIwMzUzMjMwMzIzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF38QgJTANBgkqhkiG9w0B
AQsFAAOCAQEAeD7qbZ4KMGAH1EuA2AIHBGJh7v8tHno8nAdmLu7FBzQgqedhhU36
fWl6jTwHpLb/djdn4Y+7PPvCb+sh+3niyRpaigu3Luj3Ga7ounCMkS7YfxGzCh+x
Ldw6GCQk0Q7WoVLhoWW2cKI8qz/D00VSSgGqVD9IXbvD3iKZSiKxbhUM2btbs+8P
ujUK9oK/6bnKrgZljoqBO2TI0DDIsEbBuHzzjfM02L3S/nOjdx2ezQKc3p0KqdGR
uKwkO0tZQaOgd6BgjPu6ZPuZ2vwpQPDiULWesL3TPnZJCbv/9gxmSGqDZ7jkTk2C
Rfj4Htd0FLLyuHL6V2MFkbWYyTLf10MYew==
-----END CERTIFICATE-----
Generated at Sat Jul 5 12:00:52 2025 by rpki-client