Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a323633303a3a2f34382d3438203d3e203532303235.roa
File:                     326130353a646663343a323633303a3a2f34382d3438203d3e203532303235.roa (raw, json)
Hash identifier:          4I99AhEU3lt58Nt5OMehqEx8RxJuG+qW6Xlvb+chjdw=
Subject key identifier:   60:D1:2F:31:BB:7B:91:BC:D8:28:52:23:0F:7E:0B:B8:FB:2C:F0:54
Certificate issuer:       /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial:       6D9F54F5F7A071E341F625C5E17C5714AB6A0E86
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a323633303a3a2f34382d3438203d3e203532303235.roa
Signing time:             Thu 03 Jul 2025 15:53:57 +0000
ROA not before:           Thu 03 Jul 2025 15:48:57 +0000
ROA not after:            Thu 02 Jul 2026 15:53:57 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:2630::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 02:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:9f:54:f5:f7:a0:71:e3:41:f6:25:c5:e1:7c:57:14:ab:6a:0e:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
        Validity
            Not Before: Jul  3 15:48:57 2025 GMT
            Not After : Jul  2 15:53:57 2026 GMT
        Subject: CN=60D12F31BB7B91BCD82852230F7E0BB8FB2CF054
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:7b:80:ff:67:73:74:4f:40:58:7d:e8:78:d7:
                    2c:83:14:a7:ae:09:85:62:b3:15:03:34:9f:a0:03:
                    bf:6d:55:37:da:15:c8:c5:0f:e0:e2:d9:c1:c9:e1:
                    96:3f:05:4d:4e:f5:0d:e3:2d:fc:2e:b7:a3:14:60:
                    c8:cf:8b:ca:37:89:23:52:62:e9:46:52:09:bf:9c:
                    34:f8:23:e8:ce:bb:e8:19:6d:98:6f:88:34:64:99:
                    cc:3a:84:59:7e:12:6c:b5:c3:c0:4f:24:30:97:68:
                    bc:50:0f:b0:5a:33:44:1a:ed:9d:a3:3b:e0:55:66:
                    ce:49:86:fc:15:15:14:1e:27:45:8a:a7:7d:c3:b9:
                    f8:d2:12:b2:5c:34:c9:c5:e6:92:3e:8d:57:69:e6:
                    fe:2e:90:83:cc:8a:62:1c:35:33:27:82:52:01:fa:
                    b5:a2:0b:c1:b9:92:ac:8f:51:c4:83:48:05:4b:e0:
                    07:40:9d:2d:a1:23:db:e6:29:9d:82:3c:7a:3f:a7:
                    49:02:69:70:bb:74:54:f4:79:ed:84:cd:0b:0c:97:
                    88:6f:ed:e6:ec:02:cb:0c:85:4d:ad:5d:60:4e:69:
                    06:ef:73:67:ea:79:e9:7e:fb:f6:79:87:2d:24:8f:
                    c6:6e:d0:f0:2a:5b:d2:aa:26:7b:93:02:39:ca:e7:
                    48:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:D1:2F:31:BB:7B:91:BC:D8:28:52:23:0F:7E:0B:B8:FB:2C:F0:54
            X509v3 Authority Key Identifier:
                keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a323633303a3a2f34382d3438203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:2630::/48

    Signature Algorithm: sha256WithRSAEncryption
         84:e3:33:6c:2b:de:1f:70:a1:81:ae:0c:ea:87:fa:50:30:87:
         e1:67:71:3e:8c:48:8c:73:e9:ee:3e:8c:f7:e1:73:62:a3:7e:
         c8:48:9e:11:e0:02:b7:70:cd:86:fd:49:fd:85:fa:5b:e0:d2:
         28:b0:ba:99:ff:53:a1:89:c1:c0:5d:c8:77:63:2e:b1:56:06:
         37:1d:2f:55:af:8b:85:84:66:63:a9:20:fd:00:ab:59:4c:62:
         5a:49:34:98:36:bc:7c:e1:87:02:75:fa:62:4b:eb:b2:b2:d0:
         5c:07:55:d7:27:ac:7c:be:0d:35:18:46:cf:9b:af:e0:c0:e2:
         87:08:24:a8:cd:9a:5d:b5:22:8a:2f:cc:89:df:ca:a4:76:f9:
         ed:72:36:81:e7:3d:84:30:6e:5b:36:ec:41:55:39:cf:1a:f1:
         9d:b9:3c:60:3a:20:9d:3d:08:2e:f0:32:d7:b5:b6:13:b6:2d:
         a1:03:34:16:a6:d5:29:e4:6e:00:22:f1:08:d9:a1:d7:da:70:
         f1:7f:d6:1f:30:d0:cc:b9:fa:d8:c4:36:4c:c8:4a:ff:91:14:
         8b:4b:c7:81:82:f8:89:83:79:4a:46:b1:44:73:5e:97:74:fd:
         36:9d:e4:c9:01:40:ab:2a:5d:60:db:29:0f:c0:c3:58:b9:3c:
         7c:8f:7d:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 11:47:52 2025 by rpki-client