Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a323733313a3a2f34382d3438203d3e203532303235.roa
File:                     326130353a646663343a323733313a3a2f34382d3438203d3e203532303235.roa (raw, json)
Hash identifier:          qG6TvKeLdw2pYr4lqH5lS+j7l4X7xeWETHLhXyTWpgk=
Subject key identifier:   95:B9:7C:C9:0C:68:42:6B:7C:EE:03:26:1F:9D:93:6E:FC:0C:66:F5
Certificate issuer:       /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial:       0DED3C0A2F0E3E60EA01A61B714E2D88D25C8379
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a323733313a3a2f34382d3438203d3e203532303235.roa
Signing time:             Thu 03 Jul 2025 15:53:47 +0000
ROA not before:           Thu 03 Jul 2025 15:48:47 +0000
ROA not after:            Thu 02 Jul 2026 15:53:47 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:2731::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 02:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:ed:3c:0a:2f:0e:3e:60:ea:01:a6:1b:71:4e:2d:88:d2:5c:83:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
        Validity
            Not Before: Jul  3 15:48:47 2025 GMT
            Not After : Jul  2 15:53:47 2026 GMT
        Subject: CN=95B97CC90C68426B7CEE03261F9D936EFC0C66F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:09:c3:ff:b7:31:10:d4:99:f0:49:ea:02:85:
                    14:76:a1:87:30:b5:a7:be:51:6d:26:d9:0c:6f:fb:
                    9b:30:22:a7:f1:e5:e5:8e:1b:e8:02:a2:04:16:b8:
                    37:85:08:27:fc:6e:9d:58:d5:13:5e:a3:9f:59:40:
                    84:fb:9e:18:5b:51:5c:61:0e:e1:d1:0c:ca:12:a4:
                    10:fd:23:df:f7:93:e1:ef:25:e1:d5:33:49:51:2a:
                    d2:f4:a6:d0:fa:fe:90:1b:38:4c:ad:22:9c:ef:1e:
                    92:4d:49:21:71:2c:23:a1:76:3a:7d:53:a2:fd:62:
                    87:02:6d:67:7f:d4:05:d2:db:25:7e:19:6e:e3:7a:
                    f8:91:43:64:31:27:da:fc:c7:42:bc:a3:0e:01:7d:
                    04:af:6e:2d:23:42:30:18:cf:d9:a5:3c:ca:68:66:
                    dd:9f:aa:be:e8:74:30:7e:d6:a7:74:97:6c:10:76:
                    dc:20:73:2b:ab:18:04:e3:d3:8e:88:76:a4:79:f7:
                    a0:39:0b:eb:48:62:0f:66:73:91:50:d1:00:bb:78:
                    aa:9e:c2:05:25:70:0b:9d:43:90:b2:ad:72:68:67:
                    32:ef:17:e9:60:9e:a6:11:09:fa:0f:fa:77:0a:8b:
                    27:9d:b5:3e:b0:92:51:6b:fd:7c:af:4f:c2:9c:d7:
                    ab:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:B9:7C:C9:0C:68:42:6B:7C:EE:03:26:1F:9D:93:6E:FC:0C:66:F5
            X509v3 Authority Key Identifier:
                keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a323733313a3a2f34382d3438203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:2731::/48

    Signature Algorithm: sha256WithRSAEncryption
         6d:2f:37:3f:f8:44:c0:c5:70:7c:49:b8:97:8c:e9:55:69:b3:
         6d:f2:4b:18:67:bc:c8:a7:56:c0:3a:65:71:9c:3c:e2:3b:30:
         01:72:27:9c:ec:9e:46:e4:f7:fb:f5:ce:07:1b:95:54:ee:73:
         91:fa:9d:fb:5b:72:ed:ef:85:ad:75:d3:0b:46:f2:da:e1:7c:
         12:13:f4:d3:f8:d8:b4:3e:b8:8d:f9:54:47:c4:d3:d5:c0:d0:
         bd:08:f3:9e:bd:1b:c1:24:b3:d6:97:6d:be:32:16:79:82:76:
         8d:b2:06:c2:48:c9:0a:18:ae:69:c4:d3:1a:40:7a:d2:c3:b4:
         33:bd:4c:75:31:57:36:94:d7:d2:c6:0b:20:d0:56:39:83:11:
         b7:01:dd:42:03:d3:0e:e7:fa:63:c4:ea:78:03:31:f8:1c:eb:
         84:6f:8d:8a:a7:0a:eb:0d:7e:35:98:d2:ae:c8:22:19:b9:03:
         1c:09:9e:b8:27:38:0e:ea:a3:1b:26:2b:d7:7a:a5:84:3b:05:
         54:76:6e:a8:69:77:db:f4:2c:24:c5:f2:b5:b6:6b:6f:f2:ff:
         3c:e2:a9:14:b2:18:be:34:6b:75:9c:9d:38:a2:3e:fb:1a:e7:
         6d:96:ec:84:4e:c2:95:69:a2:b8:45:1e:2c:67:b2:13:48:48:
         21:32:63:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 11:17:06 2025 by rpki-client