Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a323933343a3a2f34382d3438203d3e203532303235.roa
File:                     326130353a646663343a323933343a3a2f34382d3438203d3e203532303235.roa (raw, json)
Hash identifier:          cpejEv0a60sxOi6F2G8/MTui3VEbOeM7CscoUMxpfNM=
Subject key identifier:   48:F9:89:63:66:32:C1:A4:36:5C:92:71:B0:C9:55:D8:1F:D5:B4:E0
Certificate issuer:       /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial:       17DFC9A6E1827BE5C38A371CAAD4AC932F2CFD30
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a323933343a3a2f34382d3438203d3e203532303235.roa
Signing time:             Thu 03 Jul 2025 15:54:09 +0000
ROA not before:           Thu 03 Jul 2025 15:49:09 +0000
ROA not after:            Thu 02 Jul 2026 15:54:09 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:2934::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 02:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:df:c9:a6:e1:82:7b:e5:c3:8a:37:1c:aa:d4:ac:93:2f:2c:fd:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
        Validity
            Not Before: Jul  3 15:49:09 2025 GMT
            Not After : Jul  2 15:54:09 2026 GMT
        Subject: CN=48F989636632C1A4365C9271B0C955D81FD5B4E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:dd:a0:0b:8b:60:54:db:67:d0:04:2a:d3:e1:
                    f6:03:bc:93:2a:ed:28:b3:60:09:61:62:c8:d8:5f:
                    a8:16:20:e0:66:9b:b5:4b:05:ac:36:3a:5d:2e:59:
                    ff:40:fd:e9:64:57:47:98:72:2f:7b:e3:69:e1:d6:
                    2c:b7:5c:db:8c:e1:df:d0:cc:95:f0:f1:7d:a6:63:
                    dc:cb:e4:0a:75:30:9c:1f:1a:03:1b:b2:8c:d7:1e:
                    bc:f4:46:ad:9b:73:35:2e:33:8e:c5:f4:36:94:7a:
                    51:e7:74:a4:89:2b:e4:4c:19:7a:de:6e:e3:af:b2:
                    50:b0:d2:3c:48:2c:8b:f4:c8:f5:9f:a4:43:90:12:
                    a1:94:94:95:b5:20:66:1f:70:d3:7c:e8:eb:3a:2e:
                    f1:ad:44:db:94:74:e0:e1:57:7e:94:90:00:b4:be:
                    ec:56:73:8b:70:5a:d9:06:8e:89:bd:a5:d1:50:2b:
                    0d:72:90:8c:ae:0b:c9:41:8e:bb:9a:0e:90:c9:a4:
                    10:16:73:4b:58:a0:5b:61:e8:23:7f:c7:7f:91:7b:
                    2f:d2:4b:33:6b:d6:98:2b:4a:2c:f1:c3:e2:9f:bd:
                    bb:5a:f8:38:4f:62:30:2e:f1:ec:f7:36:07:fd:44:
                    0f:3a:21:cc:33:1b:66:f6:a0:42:77:ef:dd:0d:66:
                    1f:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:F9:89:63:66:32:C1:A4:36:5C:92:71:B0:C9:55:D8:1F:D5:B4:E0
            X509v3 Authority Key Identifier:
                keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a323933343a3a2f34382d3438203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:2934::/48

    Signature Algorithm: sha256WithRSAEncryption
         47:e7:b0:8c:2c:ba:a4:26:af:df:59:1b:79:06:b4:d6:db:57:
         a4:7c:e2:03:e1:db:a0:3a:66:0e:b8:c5:52:0d:1a:79:da:3e:
         3f:63:96:c7:ff:52:fd:43:36:6c:82:cb:cf:54:c3:98:b8:00:
         23:46:5d:63:fa:fd:42:f4:f9:a9:ba:ab:63:5d:d8:10:05:4f:
         c1:a1:d7:7c:94:59:c5:5f:27:36:3a:62:62:86:dd:da:00:29:
         24:13:23:6d:c1:b3:24:67:22:40:ac:c1:d4:a7:19:af:aa:77:
         74:4a:b9:75:10:92:c1:3c:f4:29:4e:3c:11:31:75:35:f8:63:
         b6:b9:f8:44:89:c8:86:27:b4:c6:d3:31:8a:6f:f7:66:ce:c8:
         8f:24:66:0a:ee:14:21:91:61:ce:ea:fa:7b:5e:05:05:5d:91:
         95:7b:44:8f:3e:9c:fc:df:23:db:d6:71:4e:37:ef:1b:b6:11:
         f6:25:b8:d8:3b:7c:97:b5:65:d9:b8:d7:a7:bb:6d:bc:28:50:
         d0:e8:43:29:19:4c:c1:a8:93:ab:85:35:88:c2:58:5c:44:b5:
         b0:3f:62:39:bf:a1:c5:7f:eb:c9:ac:05:3b:c1:89:a3:0a:69:
         d7:9a:be:8a:d5:d5:d1:95:af:3d:45:bb:e0:69:6d:cb:d1:bc:
         62:e7:3f:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 11:35:02 2025 by rpki-client