Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a32343a3a2f34382d3438203d3e203532303235.roa
File:                     326130353a646663343a32343a3a2f34382d3438203d3e203532303235.roa (raw, json)
Hash identifier:          +xu9YXDxcJqVHDbAjzZLGzawLgd2jH8sECDItV01Yn4=
Subject key identifier:   8B:38:26:F9:27:97:AA:61:CF:1C:D0:D4:22:EA:0A:66:C1:D4:49:EC
Certificate issuer:       /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial:       0ABEB930AB4B5E81100D4F2E49EDCEA81355CBBB
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a32343a3a2f34382d3438203d3e203532303235.roa
Signing time:             Thu 03 Jul 2025 15:53:47 +0000
ROA not before:           Thu 03 Jul 2025 15:48:47 +0000
ROA not after:            Thu 02 Jul 2026 15:53:47 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:24::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 02:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:be:b9:30:ab:4b:5e:81:10:0d:4f:2e:49:ed:ce:a8:13:55:cb:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
        Validity
            Not Before: Jul  3 15:48:47 2025 GMT
            Not After : Jul  2 15:53:47 2026 GMT
        Subject: CN=8B3826F92797AA61CF1CD0D422EA0A66C1D449EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:25:27:31:b8:99:f1:62:8d:94:55:f4:7c:4c:
                    f2:bf:13:d9:62:a0:82:78:32:28:90:9a:8d:4c:a9:
                    f3:85:04:f2:cc:3a:d7:b9:9f:bc:e6:4d:d5:7a:ef:
                    21:1b:d8:88:ad:1d:fa:11:23:51:18:7d:b8:79:a0:
                    23:35:8b:59:67:5f:c1:2e:ef:16:14:54:ff:a2:b3:
                    45:8b:79:5e:9f:45:09:f7:89:31:34:c4:24:b2:36:
                    8d:2a:26:7a:bd:18:c9:98:3f:dd:c9:fb:f4:6a:c7:
                    d7:c4:bc:61:2e:4e:20:d7:c7:f5:5f:cb:e5:36:2e:
                    1e:85:00:6b:9c:6c:7e:ef:9e:de:1b:7f:fc:45:c5:
                    e8:7b:e7:de:bd:ef:ab:69:95:2a:00:da:f3:7c:85:
                    a7:70:42:67:39:07:59:c9:b4:05:a0:03:b8:37:b4:
                    63:e2:d5:0b:4a:52:58:8c:60:03:86:82:8a:21:6c:
                    35:fb:05:e7:ea:5c:f5:96:ef:cb:e9:5e:3a:92:96:
                    05:ff:b3:9b:e4:1c:53:86:a5:ce:d3:f5:f2:c7:c7:
                    dc:12:c4:32:e4:76:6a:77:da:33:b2:50:00:80:71:
                    f3:0a:58:08:f7:9c:89:4e:8b:97:ce:43:ad:4f:69:
                    ec:c5:a6:ae:0d:26:82:c1:69:5b:a0:dc:13:b3:07:
                    0f:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:38:26:F9:27:97:AA:61:CF:1C:D0:D4:22:EA:0A:66:C1:D4:49:EC
            X509v3 Authority Key Identifier:
                keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a32343a3a2f34382d3438203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:24::/48

    Signature Algorithm: sha256WithRSAEncryption
         24:9c:cc:27:e4:72:d7:ef:36:f3:aa:72:97:68:60:44:8f:1e:
         87:eb:9e:1d:09:0a:7d:eb:5c:62:21:1a:93:75:b1:ee:e8:be:
         49:3f:3c:4c:81:ba:b2:9f:20:59:af:3d:42:4f:ec:3d:ab:ab:
         4c:a5:f4:d7:69:86:ac:69:be:86:88:6d:53:a5:bc:e5:24:1c:
         4e:1c:ef:06:5f:49:0b:30:b7:2b:58:35:d2:3e:da:c7:21:43:
         dc:f1:93:1a:54:77:7f:0c:42:8b:bf:c8:f7:e0:91:57:6d:2f:
         e8:53:de:fc:68:51:0d:83:05:f9:ea:31:41:cc:3c:37:91:c1:
         3d:59:a8:15:9c:87:87:09:19:d4:9d:36:78:8b:c3:cd:fe:f0:
         3d:b1:a6:b4:46:a0:3c:c1:7a:57:53:5f:b5:fc:fc:7d:7c:53:
         9c:2c:cc:8f:07:e4:19:3a:39:a0:c5:db:a1:c2:2e:09:45:93:
         8c:a7:3e:24:f5:c1:d3:64:93:f3:09:20:2a:a4:79:24:95:ac:
         98:57:95:f5:1d:fb:a6:12:f7:5e:c9:ed:6e:18:19:8e:e8:66:
         37:20:86:01:5f:f3:6f:80:20:6a:23:1c:51:03:1b:1a:b5:4e:
         e2:47:28:99:c8:2f:97:f6:25:ad:a5:59:02:9a:2c:d3:f1:69:
         7e:b5:36:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 11:19:40 2025 by rpki-client