Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a323432653a3a2f34382d3438203d3e203532303235.roa
File:                     326130353a646663343a323432653a3a2f34382d3438203d3e203532303235.roa (raw, json)
Hash identifier:          3aZt2j4q3hApyCAAl9910QqX2MRlkTMjkmVGU1roMEk=
Subject key identifier:   EE:BD:97:0A:98:89:17:65:88:C5:6D:C6:B2:F8:5B:95:D9:F6:A4:C0
Certificate issuer:       /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial:       54CF6FC33964554C84A2E8065433C5ACB7B9617A
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a323432653a3a2f34382d3438203d3e203532303235.roa
Signing time:             Thu 03 Jul 2025 15:54:03 +0000
ROA not before:           Thu 03 Jul 2025 15:49:03 +0000
ROA not after:            Thu 02 Jul 2026 15:54:03 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:242e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 02:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:cf:6f:c3:39:64:55:4c:84:a2:e8:06:54:33:c5:ac:b7:b9:61:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
        Validity
            Not Before: Jul  3 15:49:03 2025 GMT
            Not After : Jul  2 15:54:03 2026 GMT
        Subject: CN=EEBD970A9889176588C56DC6B2F85B95D9F6A4C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:c4:85:47:1d:28:dd:19:4b:61:04:9b:6c:ea:
                    ab:2e:33:1a:17:c7:51:c9:2f:9b:cc:15:a9:e6:db:
                    0f:ae:8a:4b:97:53:51:09:2e:60:15:7e:f4:2d:31:
                    6f:92:c7:98:4d:df:4f:ec:47:fb:08:2a:3e:5f:7b:
                    46:da:2c:fb:f7:4b:d5:27:23:f9:69:82:0a:21:30:
                    67:fd:aa:47:87:82:7a:4c:46:b3:2f:bc:b4:4c:04:
                    c1:d2:61:95:9e:a1:31:76:a5:8d:da:e6:2c:7e:41:
                    d7:4a:38:87:4e:f2:2d:13:9b:72:ad:1d:3e:da:8f:
                    45:5f:b6:d8:f7:6e:8d:a8:ba:bc:2f:0b:49:8b:2a:
                    f8:2b:a0:d4:38:00:32:f6:8d:ea:b8:1b:d2:92:bb:
                    64:12:56:f6:c5:84:82:6a:b8:61:cd:97:41:ea:79:
                    fd:a0:6c:c5:dc:67:c9:60:ce:b4:fc:97:1d:88:14:
                    75:cd:b1:14:52:1b:ab:6d:e7:b8:4a:c6:3d:20:ce:
                    cd:ad:fe:92:9a:e7:34:c7:49:5f:02:a2:cb:e6:52:
                    a8:12:66:1d:2d:d5:be:8a:04:79:55:e9:91:7d:e1:
                    7d:2a:54:d4:69:b1:3a:4c:62:df:4c:d3:9c:ca:9f:
                    8b:1b:93:0a:d8:b2:77:06:dd:71:f2:22:a8:9a:15:
                    7b:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:BD:97:0A:98:89:17:65:88:C5:6D:C6:B2:F8:5B:95:D9:F6:A4:C0
            X509v3 Authority Key Identifier:
                keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a323432653a3a2f34382d3438203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:242e::/48

    Signature Algorithm: sha256WithRSAEncryption
         20:8f:ca:e9:36:e7:2a:a4:36:9d:5d:b7:f6:54:7b:13:d9:68:
         88:98:e6:75:0a:23:9f:d3:74:0c:ff:42:9a:e7:b9:ce:69:65:
         1f:7e:d1:56:5c:d7:2e:45:19:e5:08:fe:bd:a9:8a:7f:1e:f8:
         d0:b1:93:a1:99:66:06:04:60:e3:fa:d4:5f:54:cf:fa:46:ba:
         68:46:9d:98:30:92:f8:37:16:28:c3:3e:43:4a:41:49:e3:14:
         ae:24:5d:7e:28:70:8b:9f:79:76:22:76:15:3f:ab:05:8b:c9:
         b1:0f:40:00:bc:19:ca:16:60:82:57:a8:60:40:36:79:0a:ff:
         09:da:75:9e:07:a8:79:8c:e0:f2:60:81:5d:0a:18:f6:c6:63:
         ea:31:f2:bf:61:49:ea:17:f5:8b:bc:31:24:35:51:af:89:4e:
         25:61:f1:bf:77:1c:8e:32:2a:ac:f2:da:ab:c3:13:5d:31:21:
         74:01:5e:f7:ac:59:b4:85:bf:8a:ab:04:ed:bf:38:a1:0e:3b:
         84:29:2a:f0:88:db:18:95:38:e0:62:6d:08:6f:c2:b9:02:1b:
         14:e6:b7:50:00:0c:aa:c4:0b:5b:31:dd:78:78:f8:3d:55:52:
         ef:ea:b4:c5:11:62:df:d0:9d:d1:70:db:ae:2a:c8:43:5f:15:
         95:b7:f5:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 11:52:22 2025 by rpki-client