Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a323332643a3a2f34382d3438203d3e203532303235.roa
File:                     326130353a646663343a323332643a3a2f34382d3438203d3e203532303235.roa (raw, json)
Hash identifier:          rBhH/TtZs8VMomjUeXRWwQr7wuBRND53DaXWoQzvJnA=
Subject key identifier:   ED:B8:79:8B:E2:0F:F7:F5:20:C9:32:BA:22:5A:8B:C6:2E:26:7B:F2
Certificate issuer:       /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial:       76D094683DDA470A60959073E041C42FD6B2F43D
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a323332643a3a2f34382d3438203d3e203532303235.roa
Signing time:             Thu 03 Jul 2025 15:53:55 +0000
ROA not before:           Thu 03 Jul 2025 15:48:55 +0000
ROA not after:            Thu 02 Jul 2026 15:53:55 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:232d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 02:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:d0:94:68:3d:da:47:0a:60:95:90:73:e0:41:c4:2f:d6:b2:f4:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
        Validity
            Not Before: Jul  3 15:48:55 2025 GMT
            Not After : Jul  2 15:53:55 2026 GMT
        Subject: CN=EDB8798BE20FF7F520C932BA225A8BC62E267BF2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:e6:93:3f:f2:4c:64:38:0b:b6:be:82:be:6c:
                    c0:35:72:eb:67:a8:a2:4d:af:04:12:cd:af:93:1f:
                    55:1e:5a:4f:52:50:ec:72:d7:01:82:ce:0f:e0:a7:
                    f0:11:f1:09:37:9a:a9:b8:d9:0d:3d:54:00:a3:fa:
                    20:75:32:cd:7c:74:2c:70:5f:13:7f:20:f1:ca:93:
                    66:12:b2:19:74:49:8b:3c:66:8a:62:90:81:88:f0:
                    30:ca:89:4b:51:94:29:78:6a:e3:c8:34:66:b6:f6:
                    ac:4e:82:c5:a6:67:b7:19:3e:9d:67:74:03:e7:e9:
                    a4:cf:47:57:33:96:bb:c1:50:d6:39:24:a2:a0:26:
                    84:76:df:c9:12:7a:53:e1:9b:05:25:7f:09:48:4e:
                    c0:af:21:31:b7:61:a2:27:64:ea:3b:b0:92:72:f3:
                    6c:68:ce:db:4e:ff:af:85:2b:ac:bd:a5:f3:ed:c2:
                    7d:75:2d:ff:c4:7e:6b:a3:27:1a:cd:84:d6:35:da:
                    d2:54:e2:94:96:94:ad:91:3a:ec:69:b1:bb:ec:90:
                    6f:8f:6c:04:e4:5e:3e:3f:6d:a8:f4:e8:f5:c8:13:
                    6f:5f:6b:33:c0:8e:f5:71:cc:dd:d7:0d:66:40:ec:
                    c0:d4:c7:5b:76:29:d5:77:94:96:71:d8:22:75:4d:
                    39:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:B8:79:8B:E2:0F:F7:F5:20:C9:32:BA:22:5A:8B:C6:2E:26:7B:F2
            X509v3 Authority Key Identifier:
                keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a323332643a3a2f34382d3438203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:232d::/48

    Signature Algorithm: sha256WithRSAEncryption
         31:73:1a:54:fd:83:df:20:1d:95:2d:ce:f1:8f:fb:33:d2:e9:
         a4:7e:48:9d:c5:9e:fa:a9:c9:13:91:3d:f1:56:e7:6d:6e:5e:
         cc:6b:18:3e:c0:a7:89:9c:ae:5b:0a:8f:3c:f1:1b:ce:b7:1e:
         84:e6:d2:04:b7:27:60:37:77:67:fe:7e:61:fa:fb:70:7f:b5:
         ab:1d:ac:53:c3:9b:34:ff:69:8b:cb:55:47:c5:71:4c:15:0d:
         6b:c7:b0:88:3a:8d:e6:8e:58:b8:4a:f6:46:ae:4f:be:a0:96:
         94:30:18:1d:84:a1:94:a3:3f:42:e2:ea:d8:b2:b8:47:73:b7:
         23:b1:6f:d6:8e:60:ce:f5:ed:db:aa:e2:b0:fd:de:99:05:8d:
         a7:0f:40:4e:76:8c:7d:77:44:66:8b:8f:09:89:0a:86:32:3a:
         2a:df:03:52:3b:cf:c0:9e:8f:e2:70:22:05:a6:b0:74:7e:1b:
         36:5e:1e:a2:de:93:b4:bd:93:0e:96:d5:47:e9:c6:c8:83:aa:
         94:e8:6b:96:62:b8:76:d5:26:08:ae:81:ee:8b:4f:a8:ad:29:
         75:91:7b:80:9a:26:30:8f:1f:e2:81:16:99:0c:b4:d3:b5:2e:
         d4:59:d8:34:0c:f3:f5:4c:70:e3:98:25:41:9d:4e:a1:3b:76:
         00:08:63:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 11:25:20 2025 by rpki-client