Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a323132363a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a323132363a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          eO7VpgFdNwGHqGgFZqbjxcWBFuhi04JKdDsOKNqitCI=
Subject key identifier:   CD:C1:DD:D2:F6:5F:10:95:38:EC:AC:A9:2A:18:E5:68:E6:27:1C:4C
Certificate issuer:       /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial:       0DF9DA057EDA7B3DCC16782234A366A0846C370A
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a323132363a3a2f34382d313238203d3e203532303235.roa
Signing time:             Thu 03 Jul 2025 15:53:57 +0000
ROA not before:           Thu 03 Jul 2025 15:48:57 +0000
ROA not after:            Thu 02 Jul 2026 15:53:57 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:2126::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 02:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:f9:da:05:7e:da:7b:3d:cc:16:78:22:34:a3:66:a0:84:6c:37:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
        Validity
            Not Before: Jul  3 15:48:57 2025 GMT
            Not After : Jul  2 15:53:57 2026 GMT
        Subject: CN=CDC1DDD2F65F109538ECACA92A18E568E6271C4C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:a5:f1:62:42:69:ff:18:18:9b:44:c0:ff:94:
                    6c:67:6f:cc:7c:53:0f:b4:b7:e4:b8:d4:75:89:93:
                    50:17:1e:4c:9e:75:3e:51:af:22:f9:2c:b4:40:67:
                    4e:66:ad:df:0c:57:a8:19:23:1a:38:1c:49:db:fc:
                    e7:a2:c0:93:c7:c2:4f:e7:6a:63:66:f5:7a:73:6f:
                    83:e4:4c:73:44:ff:d9:0d:aa:d4:45:0b:ea:57:84:
                    3a:c0:fd:63:fd:2e:7e:c0:cc:03:e2:61:8e:08:df:
                    48:65:57:20:77:23:bc:e7:67:c2:71:48:5f:12:37:
                    09:65:0f:e5:68:a3:64:db:17:a0:ab:e9:d0:73:78:
                    30:d9:6b:fe:b1:bc:24:aa:15:d6:7a:d3:05:e7:16:
                    ff:50:54:ce:5a:34:04:45:1d:db:97:5f:1b:9a:f5:
                    bd:ae:a1:dd:6f:06:67:e0:2c:56:1c:a8:dd:4a:b6:
                    11:a1:74:e3:72:a5:6a:1e:1c:45:89:89:21:4d:52:
                    a9:ea:e8:ed:12:4d:c3:e1:0c:73:eb:22:89:6e:b5:
                    25:fd:ed:45:96:15:ea:cf:4e:16:40:f6:30:73:7d:
                    7e:34:e7:58:da:3f:a2:9f:dc:71:6d:de:5d:7b:29:
                    05:b1:84:e8:0b:8a:69:85:9f:f1:bb:80:85:b8:50:
                    66:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:C1:DD:D2:F6:5F:10:95:38:EC:AC:A9:2A:18:E5:68:E6:27:1C:4C
            X509v3 Authority Key Identifier:
                keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a323132363a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:2126::/48

    Signature Algorithm: sha256WithRSAEncryption
         4b:7b:1f:59:af:b7:3b:52:91:11:5a:1d:ce:b0:5e:aa:29:2a:
         96:f8:e7:57:60:ff:d2:54:a0:2a:0b:74:bc:27:ff:54:52:ee:
         d5:49:32:11:38:49:f8:86:29:2d:ce:7d:e2:3b:b7:d8:42:c7:
         7f:0f:3f:7c:7c:2d:3c:f0:17:5f:02:fb:46:7c:d6:06:d3:80:
         f4:62:5e:e3:a5:42:ca:0b:c4:3d:78:54:bd:14:fc:51:d0:3f:
         fc:56:8d:e2:8f:77:3d:2b:0a:a7:41:2a:f3:0e:4b:7e:26:f2:
         b2:4f:ba:38:40:db:e9:db:89:5a:89:77:75:a9:b6:9c:7f:1f:
         5c:d3:1a:5d:ca:ce:46:72:ce:dd:00:3f:7a:81:0b:f0:9f:ce:
         fb:c0:41:2d:d0:94:8b:63:33:f6:e9:b4:41:ff:5b:c3:f6:b9:
         ba:98:66:74:bf:9b:bb:44:e5:25:14:cd:ed:ed:e1:19:d5:8f:
         e8:6a:0c:63:77:20:37:ab:ca:12:03:6e:38:3a:c9:5e:ec:ea:
         6b:ee:a3:a9:e1:be:73:52:42:93:e8:e5:4b:d1:d5:62:4f:ed:
         3a:84:5a:20:ee:6e:e7:54:03:00:e6:1a:f9:c7:ac:aa:f1:c5:
         f6:19:7b:07:ef:7a:09:64:17:39:2b:86:9a:9f:b9:51:e5:d2:
         c2:54:6e:cb
-----BEGIN CERTIFICATE-----
MIIFJTCCBA2gAwIBAgIUDfnaBX7aez3MFngiNKNmoIRsNwowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjYzODZGQUJFQTM5MjEwQjY2NUE2QTU1QUU1REE2NkJF
Njc0MTU5NzAeFw0yNTA3MDMxNTQ4NTdaFw0yNjA3MDIxNTUzNTdaMDMxMTAvBgNV
BAMTKENEQzFEREQyRjY1RjEwOTUzOEVDQUNBOTJBMThFNTY4RTYyNzFDNEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnpfFiQmn/GBibRMD/lGxnb8x8
Uw+0t+S41HWJk1AXHkyedT5RryL5LLRAZ05mrd8MV6gZIxo4HEnb/OeiwJPHwk/n
amNm9Xpzb4PkTHNE/9kNqtRFC+pXhDrA/WP9Ln7AzAPiYY4I30hlVyB3I7znZ8Jx
SF8SNwllD+Voo2TbF6Cr6dBzeDDZa/6xvCSqFdZ60wXnFv9QVM5aNARFHduXXxua
9b2uod1vBmfgLFYcqN1KthGhdONypWoeHEWJiSFNUqnq6O0STcPhDHPrIolutSX9
7UWWFerPThZA9jBzfX4051jaP6Kf3HFt3l17KQWxhOgLimmFn/G7gIW4UGaBAgMB
AAGjggIvMIICKzAdBgNVHQ4EFgQUzcHd0vZfEJU47KypKhjlaOYnHEwwHwYDVR0j
BBgwFoAU9jhvq+o5IQtmWmpVrl2ma+Z0FZcwDgYDVR0PAQH/BAQDAgeAMG4GA1Ud
HwRnMGUwY6BhoF+GXXJzeW5jOi8vcnBraS0wMS5wZHhuZXQudWsvcmVwby9wYXJh
ZG94bmV0d29ya3MvOC9GNjM4NkZBQkVBMzkyMTBCNjY1QTZBNTVBRTVEQTY2QkU2
NzQxNTk3LmNybDCBkwYIKwYBBQUHAQEEgYYwgYMwgYAGCCsGAQUFBzAChnRyc3lu
YzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYz
ZTAxODU3NTVjOTFiZTNmOWQvNy9GNjM4NkZBQkVBMzkyMTBCNjY1QTZBNTVBRTVE
QTY2QkU2NzQxNTk3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzAL
hnVyc3luYzovL3Jwa2ktMDEucGR4bmV0LnVrL3JlcG8vcGFyYWRveG5ldHdvcmtz
LzgvMzI2MTMwMzUzYTY0NjY2MzM0M2EzMjMxMzIzNjNhM2EyZjM0MzgyZDMxMzIz
ODIwM2QzZTIwMzUzMjMwMzIzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF38QhJjANBgkqhkiG9w0B
AQsFAAOCAQEAS3sfWa+3O1KREVodzrBeqikqlvjnV2D/0lSgKgt0vCf/VFLu1Uky
EThJ+IYpLc594ju32ELHfw8/fHwtPPAXXwL7RnzWBtOA9GJe46VCygvEPXhUvRT8
UdA//FaN4o93PSsKp0Eq8w5Lfibysk+6OEDb6duJWol3dam2nH8fXNMaXcrORnLO
3QA/eoEL8J/O+8BBLdCUi2Mz9um0Qf9bw/a5uphmdL+bu0TlJRTN7e3hGdWP6GoM
Y3cgN6vKEgNuODrJXuzqa+6jqeG+c1JCk+jlS9HVYk/tOoRaIO5u51QDAOYa+ces
qvHF9hl7B+96CWQXOSuGmp+5UeXSwlRuyw==
-----END CERTIFICATE-----
Generated at Sat Jul 5 11:58:38 2025 by rpki-client