Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a323332623a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a323332623a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          RfxEFwhdQiHiQK16myIF4BYBRFnSkdb9kHvIL7rw0Ow=
Subject key identifier:   E0:9F:57:55:7F:5C:EF:8E:E3:14:81:DA:C9:8A:5A:47:C3:D8:85:CA
Certificate issuer:       /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial:       1AE7B8D21C9D871378855A59FA857015B6BDB783
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a323332623a3a2f34382d313238203d3e203532303235.roa
Signing time:             Thu 03 Jul 2025 15:53:58 +0000
ROA not before:           Thu 03 Jul 2025 15:48:58 +0000
ROA not after:            Thu 02 Jul 2026 15:53:58 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:232b::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 02:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:e7:b8:d2:1c:9d:87:13:78:85:5a:59:fa:85:70:15:b6:bd:b7:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
        Validity
            Not Before: Jul  3 15:48:58 2025 GMT
            Not After : Jul  2 15:53:58 2026 GMT
        Subject: CN=E09F57557F5CEF8EE31481DAC98A5A47C3D885CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:37:52:d7:09:30:cd:04:e9:8a:22:0f:f2:54:
                    f3:ed:ae:4a:6a:69:f4:74:3e:6a:37:14:45:3f:bf:
                    61:8f:2c:f8:dc:be:43:09:dd:ee:65:cf:7d:39:6e:
                    50:6e:f8:b9:46:a1:39:de:55:86:c4:a7:46:47:b8:
                    42:4c:52:6b:fb:58:b0:6a:0c:7d:3f:11:4b:f2:45:
                    3b:95:89:6e:c6:84:bb:99:da:e7:99:fa:c3:1b:03:
                    0f:82:9c:9d:21:b5:a6:cb:46:e0:8e:d0:7d:5d:9a:
                    67:4b:90:bc:4f:b6:78:bc:2e:b9:b0:25:58:d1:d7:
                    cd:a5:b4:bc:a6:03:f7:2c:88:7a:4c:89:68:18:42:
                    26:41:80:0f:ef:07:82:7c:d1:21:40:4d:88:4b:a1:
                    e0:10:b2:04:00:3b:d0:51:5b:6e:60:5b:dc:67:2f:
                    29:0a:7a:8f:1a:44:78:f0:da:13:94:f0:77:00:5f:
                    8d:e7:78:b2:cb:db:e8:b8:93:c8:cc:17:69:3d:3a:
                    fc:ef:7b:fa:ca:39:01:a3:89:3f:b2:8c:d8:3c:39:
                    79:78:2f:21:ef:84:dd:5f:47:00:de:b8:3c:d4:da:
                    be:2d:a6:b7:d2:34:e5:59:d7:13:f9:0d:ea:de:16:
                    d7:8f:5f:5b:b4:bf:97:6b:79:25:0d:67:59:49:c5:
                    d9:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:9F:57:55:7F:5C:EF:8E:E3:14:81:DA:C9:8A:5A:47:C3:D8:85:CA
            X509v3 Authority Key Identifier:
                keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a323332623a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:232b::/48

    Signature Algorithm: sha256WithRSAEncryption
         6d:97:90:7d:4b:86:b3:46:34:4a:0e:19:95:70:7d:c1:ff:0a:
         a1:06:3b:aa:dc:32:21:05:ac:0a:2e:05:cf:08:79:ba:be:42:
         d6:00:46:be:b9:10:6f:a3:16:85:91:f4:9d:26:98:ef:7f:a9:
         a4:c8:9a:40:c9:b7:ef:7a:2d:25:0a:1d:3f:58:06:22:6c:2c:
         53:fb:75:e1:45:5d:7e:1b:05:30:c9:de:47:66:7e:00:94:6a:
         c7:aa:68:70:70:21:21:a1:5e:d7:42:e0:82:e6:9f:d2:88:b4:
         94:20:a8:75:79:49:e6:f2:66:37:30:fc:16:f5:45:07:a0:90:
         e4:d1:35:55:7b:8b:8b:bb:fa:e9:ed:84:a6:e2:d7:9d:86:50:
         02:d1:6b:d3:de:4f:f5:33:ce:67:ed:af:4b:e7:50:59:c6:63:
         9a:48:24:59:45:d6:ef:86:ad:aa:0b:1a:c3:d1:58:56:9d:2d:
         cc:07:42:ff:7d:5f:6c:ee:3a:6d:d1:b1:0c:33:88:6f:e9:a7:
         e9:02:bf:7c:35:bc:44:24:27:74:64:5b:8d:0b:40:ec:14:b0:
         6e:fe:c4:38:fa:5c:fd:28:47:fb:26:f7:d7:fe:27:f5:7c:77:
         0a:46:59:9b:c7:c4:42:0b:e8:f9:be:0c:74:8b:2a:80:c8:62:
         71:cd:b5:a4
-----BEGIN CERTIFICATE-----
MIIFJTCCBA2gAwIBAgIUGue40hydhxN4hVpZ+oVwFba9t4MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjYzODZGQUJFQTM5MjEwQjY2NUE2QTU1QUU1REE2NkJF
Njc0MTU5NzAeFw0yNTA3MDMxNTQ4NThaFw0yNjA3MDIxNTUzNThaMDMxMTAvBgNV
BAMTKEUwOUY1NzU1N0Y1Q0VGOEVFMzE0ODFEQUM5OEE1QTQ3QzNEODg1Q0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDON1LXCTDNBOmKIg/yVPPtrkpq
afR0Pmo3FEU/v2GPLPjcvkMJ3e5lz305blBu+LlGoTneVYbEp0ZHuEJMUmv7WLBq
DH0/EUvyRTuViW7GhLuZ2ueZ+sMbAw+CnJ0htabLRuCO0H1dmmdLkLxPtni8Lrmw
JVjR182ltLymA/csiHpMiWgYQiZBgA/vB4J80SFATYhLoeAQsgQAO9BRW25gW9xn
LykKeo8aRHjw2hOU8HcAX43neLLL2+i4k8jMF2k9Ovzve/rKOQGjiT+yjNg8OXl4
LyHvhN1fRwDeuDzU2r4tprfSNOVZ1xP5DereFtePX1u0v5dreSUNZ1lJxdnlAgMB
AAGjggIvMIICKzAdBgNVHQ4EFgQU4J9XVX9c747jFIHayYpaR8PYhcowHwYDVR0j
BBgwFoAU9jhvq+o5IQtmWmpVrl2ma+Z0FZcwDgYDVR0PAQH/BAQDAgeAMG4GA1Ud
HwRnMGUwY6BhoF+GXXJzeW5jOi8vcnBraS0wMS5wZHhuZXQudWsvcmVwby9wYXJh
ZG94bmV0d29ya3MvOC9GNjM4NkZBQkVBMzkyMTBCNjY1QTZBNTVBRTVEQTY2QkU2
NzQxNTk3LmNybDCBkwYIKwYBBQUHAQEEgYYwgYMwgYAGCCsGAQUFBzAChnRyc3lu
YzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYz
ZTAxODU3NTVjOTFiZTNmOWQvNy9GNjM4NkZBQkVBMzkyMTBCNjY1QTZBNTVBRTVE
QTY2QkU2NzQxNTk3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzAL
hnVyc3luYzovL3Jwa2ktMDEucGR4bmV0LnVrL3JlcG8vcGFyYWRveG5ldHdvcmtz
LzgvMzI2MTMwMzUzYTY0NjY2MzM0M2EzMjMzMzI2MjNhM2EyZjM0MzgyZDMxMzIz
ODIwM2QzZTIwMzUzMjMwMzIzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF38QjKzANBgkqhkiG9w0B
AQsFAAOCAQEAbZeQfUuGs0Y0Sg4ZlXB9wf8KoQY7qtwyIQWsCi4Fzwh5ur5C1gBG
vrkQb6MWhZH0nSaY73+ppMiaQMm373otJQodP1gGImwsU/t14UVdfhsFMMneR2Z+
AJRqx6pocHAhIaFe10Lgguaf0oi0lCCodXlJ5vJmNzD8FvVFB6CQ5NE1VXuLi7v6
6e2EpuLXnYZQAtFr095P9TPOZ+2vS+dQWcZjmkgkWUXW74atqgsaw9FYVp0tzAdC
/31fbO46bdGxDDOIb+mn6QK/fDW8RCQndGRbjQtA7BSwbv7EOPpc/ShH+yb31/4n
9Xx3CkZZm8fEQgvo+b4MdIsqgMhicc21pA==
-----END CERTIFICATE-----
Generated at Sat Jul 5 11:59:37 2025 by rpki-client