Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a326133353a3a2f34382d3438203d3e203532303235.roa
File:                     326130353a646663343a326133353a3a2f34382d3438203d3e203532303235.roa (raw, json)
Hash identifier:          u2xewsAMpjyb2hwMT+wq8Sumq8Uqd4pCjrVfz55XFVs=
Subject key identifier:   23:A8:8A:C7:7D:EC:53:76:26:CF:37:EC:C0:EE:54:FC:04:6F:AB:9D
Certificate issuer:       /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial:       6A32EA539496411FDAFA88847D4842C6F83DF349
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a326133353a3a2f34382d3438203d3e203532303235.roa
Signing time:             Thu 03 Jul 2025 15:54:12 +0000
ROA not before:           Thu 03 Jul 2025 15:49:12 +0000
ROA not after:            Thu 02 Jul 2026 15:54:12 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:2a35::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 02:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:32:ea:53:94:96:41:1f:da:fa:88:84:7d:48:42:c6:f8:3d:f3:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
        Validity
            Not Before: Jul  3 15:49:12 2025 GMT
            Not After : Jul  2 15:54:12 2026 GMT
        Subject: CN=23A88AC77DEC537626CF37ECC0EE54FC046FAB9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:36:11:bd:59:15:a3:a8:7d:c1:48:22:b1:0a:
                    1d:66:70:3e:5c:b9:8c:7a:7d:ff:34:fd:c3:f0:ed:
                    83:5c:5d:db:b5:6f:e3:61:d3:37:aa:bd:72:71:8b:
                    5c:c8:67:22:7b:00:87:aa:6c:10:7f:89:e9:b7:e9:
                    f2:4d:ba:e0:38:0d:89:2a:4f:0b:5c:57:da:6c:13:
                    01:ea:7c:6a:50:98:d7:53:cc:80:14:9b:84:dd:76:
                    2e:21:05:ca:dd:43:b3:1b:e9:99:d4:6a:3a:a6:e7:
                    9c:44:9f:71:ec:fa:80:30:1a:40:d6:d7:ca:af:59:
                    06:f7:56:26:46:e7:6a:d7:4e:d1:35:8c:8b:97:54:
                    2d:8a:f2:f9:5e:c1:51:9d:bc:01:1f:0c:16:5a:9e:
                    ab:a6:e6:70:64:f8:11:bd:07:d9:6a:05:41:41:54:
                    72:75:7a:73:71:cd:75:df:0b:66:9b:45:fa:b9:e3:
                    ce:f3:d7:e5:55:8e:b7:cb:dc:7d:d3:19:b3:55:59:
                    38:cf:b2:87:5f:6a:c6:52:0d:bb:12:15:b1:33:fb:
                    e1:a1:f9:0d:c3:6e:c9:2e:51:2d:ec:54:04:1a:b6:
                    f4:fb:29:2e:c7:83:a8:18:c9:36:50:13:dd:2b:d9:
                    d7:2d:ea:cb:01:db:4f:95:42:f5:0f:9d:60:0c:5c:
                    7b:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:A8:8A:C7:7D:EC:53:76:26:CF:37:EC:C0:EE:54:FC:04:6F:AB:9D
            X509v3 Authority Key Identifier:
                keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a326133353a3a2f34382d3438203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:2a35::/48

    Signature Algorithm: sha256WithRSAEncryption
         62:0d:3e:9e:2e:3d:cf:e0:81:7c:15:c9:1a:45:e6:4f:47:3d:
         aa:56:ee:bb:47:34:e3:64:1f:33:8f:68:c1:11:ea:4f:08:50:
         b6:0a:a7:02:87:dd:35:00:46:51:0d:29:cb:e2:75:28:02:8a:
         b3:df:56:75:77:80:0d:2b:1d:da:68:bb:7b:4c:f6:43:85:8f:
         cd:7a:5e:9e:42:2a:18:4c:2b:81:49:b0:a4:56:ad:be:fa:dd:
         bd:39:d0:35:f3:99:f7:e4:a8:bc:09:38:6a:e0:b7:ad:06:91:
         3c:da:b1:c6:19:0f:c0:91:7d:e3:2e:37:e8:02:3e:84:4c:38:
         f3:21:fc:07:8c:67:9c:50:f7:7d:82:9b:fe:72:3c:1f:94:6d:
         56:fc:90:8a:b6:9a:eb:0c:a6:4f:51:0c:b6:c8:85:9b:31:c8:
         07:df:3f:5a:8e:bf:be:cf:5a:ce:4a:87:fc:91:f4:c3:14:f6:
         e0:9e:d9:26:1b:f2:ef:f6:4d:2e:94:1e:c8:52:b3:c8:3a:10:
         aa:0e:25:41:ad:51:be:39:25:b3:18:89:9d:35:cc:a1:2b:16:
         af:06:e5:6e:11:06:fb:b5:d4:f3:37:89:9e:14:5f:e1:db:56:
         17:15:0a:28:b2:99:dd:45:76:ff:1f:ab:ab:04:6c:42:61:d4:
         4b:b7:c8:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 11:44:50 2025 by rpki-client