Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a323532663a3a2f34382d3438203d3e203532303235.roa
File:                     326130353a646663343a323532663a3a2f34382d3438203d3e203532303235.roa (raw, json)
Hash identifier:          Qc47lCQg8ntmUit7mizPZT2/HrGiGqeLIkEm2AriJCQ=
Subject key identifier:   03:04:68:5B:33:3D:12:18:47:F1:65:BC:DB:FA:57:48:3D:70:F0:A9
Certificate issuer:       /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial:       11D7F1F901B286456B5B3611B226F9AB978497FA
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a323532663a3a2f34382d3438203d3e203532303235.roa
Signing time:             Thu 03 Jul 2025 15:53:46 +0000
ROA not before:           Thu 03 Jul 2025 15:48:46 +0000
ROA not after:            Thu 02 Jul 2026 15:53:46 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:252f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 02:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:d7:f1:f9:01:b2:86:45:6b:5b:36:11:b2:26:f9:ab:97:84:97:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
        Validity
            Not Before: Jul  3 15:48:46 2025 GMT
            Not After : Jul  2 15:53:46 2026 GMT
        Subject: CN=0304685B333D121847F165BCDBFA57483D70F0A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:62:95:02:d2:d7:b5:ab:60:fa:2a:12:85:ce:
                    46:41:9e:59:dd:aa:40:ce:02:a6:36:39:dc:fd:ff:
                    1f:ac:e8:c8:cd:85:cb:ae:4c:db:54:48:62:ef:bc:
                    2d:2b:c7:7b:8f:31:1c:2d:9f:99:30:56:f7:f4:ab:
                    d2:78:d6:bf:d4:f6:e6:40:21:c0:75:8c:e0:28:20:
                    98:99:c2:3d:c3:0f:38:2c:bf:90:06:a5:f5:68:f9:
                    ff:a6:5b:6b:fb:5b:17:54:d5:30:78:1c:cb:a8:d5:
                    b0:c5:d8:0b:96:9f:b1:cd:11:2f:d3:dd:1f:51:dc:
                    ff:75:ea:d6:80:6f:09:bf:0d:0a:d6:38:36:0e:b5:
                    e0:ed:a3:bd:97:ef:b1:7a:ab:80:40:8d:6a:10:0e:
                    72:9c:1d:6b:c1:55:4a:33:ca:d8:08:eb:79:4e:46:
                    fb:01:e0:b9:d2:cc:40:df:fa:f8:c3:7c:96:1a:e3:
                    2e:6b:0d:16:0a:fa:0e:fb:8e:c7:c8:43:56:bf:67:
                    1d:30:7d:51:0f:48:9d:f9:81:06:a4:d6:3b:f9:3e:
                    05:27:71:76:61:b4:e1:d7:a0:eb:71:09:9f:ec:62:
                    ab:9d:91:bd:21:5c:aa:8a:48:3f:ef:c2:5d:45:90:
                    b9:49:f6:a0:d4:24:13:ac:71:00:22:2e:a9:53:f5:
                    ac:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:04:68:5B:33:3D:12:18:47:F1:65:BC:DB:FA:57:48:3D:70:F0:A9
            X509v3 Authority Key Identifier:
                keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a323532663a3a2f34382d3438203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:252f::/48

    Signature Algorithm: sha256WithRSAEncryption
         4e:ee:e8:8d:55:bb:2f:20:b0:c8:f4:7e:30:79:b2:e0:7d:50:
         e0:b5:37:ca:97:ce:79:04:9a:4b:c3:ed:f8:1b:f4:40:a8:86:
         a0:3d:1f:04:21:ac:5e:05:30:1c:27:f1:f6:c6:3a:37:59:d1:
         23:3b:6e:a0:4e:02:b7:47:3a:5b:d4:d6:99:0c:3d:96:f5:d2:
         31:a9:1b:dc:d4:b2:0e:4d:98:6b:95:11:55:2a:75:d4:d9:0f:
         2b:25:59:e7:56:66:74:a7:de:4d:79:eb:a0:57:8c:72:79:a0:
         af:cc:c2:86:e8:ab:88:80:be:8d:80:42:70:9c:64:c8:cb:cc:
         b8:98:85:4b:29:ab:c2:27:fd:de:5e:48:9e:21:04:94:7f:c7:
         5b:8d:f6:3f:8b:4f:ed:9b:24:7c:da:68:0c:87:26:d5:ea:e2:
         9a:62:09:4a:55:80:53:2e:4b:dc:6b:52:2f:df:9c:33:25:2b:
         c3:d0:4d:35:ce:6e:73:f4:8b:b0:56:13:ed:65:1e:74:be:3a:
         78:f8:80:b9:d3:ef:4a:ae:d3:6d:fa:ea:8e:14:94:3e:8d:c6:
         38:18:c5:8c:f4:95:73:98:6d:0f:88:79:bc:40:bf:12:0e:0f:
         06:66:c8:38:9d:49:d7:08:cf:ae:0e:68:79:b2:c9:89:09:8b:
         ff:59:76:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 11:42:18 2025 by rpki-client