Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a323833333a3a2f34382d3438203d3e203532303235.roa
File:                     326130353a646663343a323833333a3a2f34382d3438203d3e203532303235.roa (raw, json)
Hash identifier:          PbRPf7QRQI40678p/n/TdZ+OcG15gdabud5A1L4VM3k=
Subject key identifier:   34:F7:C1:7B:A0:51:CA:F4:04:80:44:E4:8B:48:9C:44:3C:06:10:4A
Certificate issuer:       /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial:       60A47BC270DE84ED955B96061CE316BC644080EB
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a323833333a3a2f34382d3438203d3e203532303235.roa
Signing time:             Thu 03 Jul 2025 15:54:11 +0000
ROA not before:           Thu 03 Jul 2025 15:49:11 +0000
ROA not after:            Thu 02 Jul 2026 15:54:11 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:2833::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 02:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:a4:7b:c2:70:de:84:ed:95:5b:96:06:1c:e3:16:bc:64:40:80:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
        Validity
            Not Before: Jul  3 15:49:11 2025 GMT
            Not After : Jul  2 15:54:11 2026 GMT
        Subject: CN=34F7C17BA051CAF4048044E48B489C443C06104A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:aa:c8:5e:06:4a:9e:32:03:63:9b:10:27:f9:
                    62:e5:4f:2c:39:ea:c0:38:52:fd:b9:c9:34:a9:d4:
                    3f:f9:ea:48:5f:d8:3e:a8:42:30:21:f5:be:a3:57:
                    8a:45:0c:d2:2a:21:28:1e:43:14:8b:f6:a6:b8:9e:
                    66:47:de:7a:00:b3:0b:71:bd:6a:f7:01:a8:a3:11:
                    cd:8d:5c:fe:2e:0d:e7:ae:6b:dc:d9:87:dc:a0:9e:
                    d3:4b:df:38:fe:16:42:b1:9d:c3:46:6d:7b:8c:d6:
                    a3:04:58:0f:e9:1b:df:70:9c:93:c4:c0:35:1e:2b:
                    75:ee:c2:49:fb:2c:8c:b0:6b:72:cc:24:19:90:7a:
                    fe:ac:ba:5f:ea:60:7a:fa:e1:9a:a3:ef:1a:a4:e9:
                    8a:f1:05:0c:30:5f:e3:8b:f0:3e:d5:2b:f9:8c:f3:
                    f9:0e:4e:fd:5f:82:85:26:cd:f0:8e:a5:ee:60:c1:
                    47:0f:4f:0f:07:d8:86:ac:6a:82:86:3d:98:f1:1e:
                    15:af:db:8d:b7:29:16:8e:e8:04:35:1c:7f:4e:3c:
                    1f:0c:23:94:80:b7:b1:04:65:60:69:06:3f:ff:08:
                    d4:a1:78:45:68:9e:04:d5:cd:cd:bf:7b:bf:75:71:
                    69:ee:b9:08:8c:27:03:f9:7d:7b:f2:98:dc:df:84:
                    e3:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:F7:C1:7B:A0:51:CA:F4:04:80:44:E4:8B:48:9C:44:3C:06:10:4A
            X509v3 Authority Key Identifier:
                keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a323833333a3a2f34382d3438203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:2833::/48

    Signature Algorithm: sha256WithRSAEncryption
         0d:49:fb:46:07:b7:cb:b3:0c:bb:b1:49:91:ec:bf:bb:1c:94:
         08:84:d1:85:96:64:0e:6d:04:9a:b1:ee:99:85:f5:5d:ec:e5:
         ff:04:0a:98:00:c1:0b:14:2a:bd:f9:af:7c:31:4d:f5:71:8d:
         62:d0:65:77:bc:41:4c:f8:0a:56:37:78:40:9a:d3:a7:78:9c:
         e9:82:48:1f:92:ca:81:58:93:52:c1:53:26:6c:33:dc:a5:44:
         00:9c:89:9f:92:f6:93:0d:34:dd:26:64:4a:e0:dd:ca:8f:09:
         b5:20:e1:2e:9d:66:38:3d:15:c0:30:03:2a:00:c4:73:ea:b6:
         93:a4:3c:6b:7c:4a:e8:41:ac:b1:65:5b:0a:0d:32:bf:f7:4a:
         5e:86:fd:7d:6b:f4:2b:f1:e1:0c:78:d2:91:36:d8:98:23:32:
         76:0d:eb:29:c0:cb:d7:75:35:52:59:7f:95:68:3c:bc:5d:41:
         3e:16:21:ca:af:ac:bd:66:7b:db:1a:c7:9a:d7:c9:0e:8c:10:
         93:84:6b:5b:4b:17:dd:39:10:ad:aa:ec:2d:fa:48:5e:e5:f4:
         3b:c8:b2:b5:50:59:f2:0c:88:af:59:48:5d:56:9f:9f:f4:38:
         ca:1c:4c:54:8e:42:88:69:b2:6c:b2:91:f3:33:bb:81:37:3e:
         f4:ba:7a:dd
-----BEGIN CERTIFICATE-----
MIIFIjCCBAqgAwIBAgIUYKR7wnDehO2VW5YGHOMWvGRAgOswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjYzODZGQUJFQTM5MjEwQjY2NUE2QTU1QUU1REE2NkJF
Njc0MTU5NzAeFw0yNTA3MDMxNTQ5MTFaFw0yNjA3MDIxNTU0MTFaMDMxMTAvBgNV
BAMTKDM0RjdDMTdCQTA1MUNBRjQwNDgwNDRFNDhCNDg5QzQ0M0MwNjEwNEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1qsheBkqeMgNjmxAn+WLlTyw5
6sA4Uv25yTSp1D/56khf2D6oQjAh9b6jV4pFDNIqISgeQxSL9qa4nmZH3noAswtx
vWr3AaijEc2NXP4uDeeua9zZh9ygntNL3zj+FkKxncNGbXuM1qMEWA/pG99wnJPE
wDUeK3Xuwkn7LIywa3LMJBmQev6sul/qYHr64Zqj7xqk6YrxBQwwX+OL8D7VK/mM
8/kOTv1fgoUmzfCOpe5gwUcPTw8H2IasaoKGPZjxHhWv2423KRaO6AQ1HH9OPB8M
I5SAt7EEZWBpBj//CNSheEVongTVzc2/e791cWnuuQiMJwP5fXvymNzfhONrAgMB
AAGjggIsMIICKDAdBgNVHQ4EFgQUNPfBe6BRyvQEgETki0icRDwGEEowHwYDVR0j
BBgwFoAU9jhvq+o5IQtmWmpVrl2ma+Z0FZcwDgYDVR0PAQH/BAQDAgeAMG4GA1Ud
HwRnMGUwY6BhoF+GXXJzeW5jOi8vcnBraS0wMS5wZHhuZXQudWsvcmVwby9wYXJh
ZG94bmV0d29ya3MvOC9GNjM4NkZBQkVBMzkyMTBCNjY1QTZBNTVBRTVEQTY2QkU2
NzQxNTk3LmNybDCBkwYIKwYBBQUHAQEEgYYwgYMwgYAGCCsGAQUFBzAChnRyc3lu
YzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYz
ZTAxODU3NTVjOTFiZTNmOWQvNy9GNjM4NkZBQkVBMzkyMTBCNjY1QTZBNTVBRTVE
QTY2QkU2NzQxNTk3LmNlcjCBkQYIKwYBBQUHAQsEgYQwgYEwfwYIKwYBBQUHMAuG
c3JzeW5jOi8vcnBraS0wMS5wZHhuZXQudWsvcmVwby9wYXJhZG94bmV0d29ya3Mv
OC8zMjYxMzAzNTNhNjQ2NjYzMzQzYTMyMzgzMzMzM2EzYTJmMzQzODJkMzQzODIw
M2QzZTIwMzUzMjMwMzIzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF38QoMzANBgkqhkiG9w0BAQsF
AAOCAQEADUn7Rge3y7MMu7FJkey/uxyUCITRhZZkDm0EmrHumYX1Xezl/wQKmADB
CxQqvfmvfDFN9XGNYtBld7xBTPgKVjd4QJrTp3ic6YJIH5LKgViTUsFTJmwz3KVE
AJyJn5L2kw003SZkSuDdyo8JtSDhLp1mOD0VwDADKgDEc+q2k6Q8a3xK6EGssWVb
Cg0yv/dKXob9fWv0K/HhDHjSkTbYmCMydg3rKcDL13U1Ull/lWg8vF1BPhYhyq+s
vWZ72xrHmtfJDowQk4RrW0sX3TkQrarsLfpIXuX0O8iytVBZ8gyIr1lIXVafn/Q4
yhxMVI5CiGmybLKR8zO7gTc+9Lp63Q==
-----END CERTIFICATE-----
Generated at Sat Jul 5 11:38:56 2025 by rpki-client