Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a323232613a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a323232613a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          qhoVbSCA1KteTr35t1JOBWcOpE9e3GBh1PzSWpsixJA=
Subject key identifier:   F0:1C:E1:49:33:F5:C0:71:BA:2B:2B:0C:79:F8:A0:FA:4D:72:B9:3C
Certificate issuer:       /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial:       24C10F24FBF2C0713736018925A3565A1C0E693C
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a323232613a3a2f34382d313238203d3e203532303235.roa
Signing time:             Thu 03 Jul 2025 15:53:56 +0000
ROA not before:           Thu 03 Jul 2025 15:48:56 +0000
ROA not after:            Thu 02 Jul 2026 15:53:56 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:222a::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 02:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:c1:0f:24:fb:f2:c0:71:37:36:01:89:25:a3:56:5a:1c:0e:69:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
        Validity
            Not Before: Jul  3 15:48:56 2025 GMT
            Not After : Jul  2 15:53:56 2026 GMT
        Subject: CN=F01CE14933F5C071BA2B2B0C79F8A0FA4D72B93C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:76:5e:38:48:f7:4b:87:72:74:24:5e:23:31:
                    89:26:60:f4:0c:f8:4a:20:15:89:e8:bb:d4:21:95:
                    f1:e7:19:07:00:ae:02:fd:e6:69:64:15:25:76:fb:
                    72:ba:e6:25:ef:14:0d:c0:4a:51:36:1d:71:59:ba:
                    b3:5d:e5:00:3d:18:cc:68:79:aa:3d:29:99:11:f1:
                    a8:a8:e0:9c:d2:74:f4:96:fb:24:4a:86:b5:99:00:
                    d8:b9:16:c8:41:2f:74:63:0a:f9:16:86:62:57:ad:
                    2a:fb:c3:43:54:64:ee:c6:52:ac:37:70:53:84:92:
                    ee:ba:05:bd:53:1f:64:21:0a:52:b9:8f:36:98:7d:
                    97:aa:ea:6e:00:15:fd:33:6c:07:9d:0d:5a:66:e6:
                    c6:bc:f0:92:46:03:26:63:3f:32:4b:3e:26:5b:92:
                    d8:5c:f8:d7:8e:3d:b0:70:f3:4f:68:97:ad:43:c9:
                    3e:ef:c5:19:46:3a:a0:cd:4c:a5:2c:37:1c:c2:88:
                    c6:13:85:fc:e4:8e:91:3f:cf:78:75:ff:bc:f1:86:
                    98:f4:38:b5:85:f9:8c:9e:09:97:0f:70:50:cd:8d:
                    79:82:b6:e9:93:04:7e:9f:45:6d:a2:f4:47:7d:a7:
                    85:c1:e0:d9:73:b7:91:f3:3c:23:94:ec:d0:bc:7e:
                    0e:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:1C:E1:49:33:F5:C0:71:BA:2B:2B:0C:79:F8:A0:FA:4D:72:B9:3C
            X509v3 Authority Key Identifier:
                keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a323232613a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:222a::/48

    Signature Algorithm: sha256WithRSAEncryption
         50:50:47:a0:3d:9f:d9:6e:05:22:8c:83:2e:8e:b5:0c:3f:d1:
         1e:e3:c3:69:d4:4e:45:26:ca:2c:82:3f:93:ef:d3:14:ba:5d:
         3c:b1:d9:eb:15:fd:19:7f:16:2b:97:1a:83:71:54:68:5a:81:
         2a:74:95:1d:cc:99:b4:b9:68:4f:4b:41:22:2c:81:d2:22:cb:
         49:23:d3:ae:39:7a:0b:0b:22:fc:f4:30:6e:56:07:17:31:ef:
         0b:23:74:8b:9d:0f:c2:0b:90:2d:3f:cb:90:0a:cc:eb:0f:68:
         71:44:41:0d:98:39:9a:b3:fc:86:31:7f:f7:94:57:17:a0:94:
         cd:b8:9a:b4:b1:48:d2:97:9b:04:76:2f:0d:7f:b3:66:40:3c:
         6d:2c:9d:82:0d:e8:93:02:3b:ed:57:02:17:16:cb:68:fd:53:
         81:15:ca:9a:02:d5:ab:1a:18:d9:b6:f3:2b:61:2f:e5:ad:13:
         09:e2:36:50:4c:1d:cd:08:f4:d4:53:56:41:0e:2a:24:c7:0a:
         83:de:80:15:35:87:bb:af:f0:76:91:b3:0a:33:78:55:87:60:
         33:dc:32:93:78:dc:62:c1:c4:28:20:31:66:d8:43:7e:c7:df:
         45:21:19:0f:4f:62:9f:3b:cc:c0:d2:f4:de:b0:bb:75:2e:66:
         5a:14:df:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 11:46:24 2025 by rpki-client