Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a326233363a3a2f34382d3438203d3e203532303235.roa
File:                     326130353a646663343a326233363a3a2f34382d3438203d3e203532303235.roa (raw, json)
Hash identifier:          G52AUbk7o226IbCL8qdOyOhj5VI3dYztb65vVWysoug=
Subject key identifier:   F4:7E:97:F3:26:78:F9:08:F0:D1:C3:EA:64:B1:D0:61:BF:88:FE:6E
Certificate issuer:       /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial:       386111559459142A77B8F5612805F53485762075
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a326233363a3a2f34382d3438203d3e203532303235.roa
Signing time:             Thu 03 Jul 2025 15:54:03 +0000
ROA not before:           Thu 03 Jul 2025 15:49:03 +0000
ROA not after:            Thu 02 Jul 2026 15:54:03 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:2b36::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 02:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:61:11:55:94:59:14:2a:77:b8:f5:61:28:05:f5:34:85:76:20:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
        Validity
            Not Before: Jul  3 15:49:03 2025 GMT
            Not After : Jul  2 15:54:03 2026 GMT
        Subject: CN=F47E97F32678F908F0D1C3EA64B1D061BF88FE6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:7f:18:61:4e:ad:9f:f9:7f:a6:27:89:c0:22:
                    e1:8a:80:1b:b3:e9:25:56:a0:90:e7:94:2a:51:b8:
                    e4:39:42:03:42:13:30:b3:2b:c5:5f:6f:bf:ca:ec:
                    e6:7f:08:ae:72:63:2d:e8:f1:fa:26:ef:d1:17:0a:
                    9d:38:74:40:31:fa:a5:58:60:19:e6:d1:bb:1b:ad:
                    9c:4d:ea:e3:3c:59:e2:e7:ff:19:bf:a4:02:ad:6d:
                    69:21:2b:d6:dc:d5:24:a7:3b:e4:fc:cb:37:ce:c1:
                    b9:cc:e1:73:7a:8d:a0:60:3a:e3:91:44:1b:cf:e5:
                    40:21:91:38:96:7b:b6:c1:16:97:0c:e0:29:9b:81:
                    7d:e9:a5:dc:cb:29:b9:1e:9c:74:ad:0f:49:b8:12:
                    f6:e5:f8:fb:08:6b:36:6d:40:f9:72:a5:e1:65:ec:
                    49:17:2a:dd:ff:9a:5f:02:4a:15:cb:f5:be:af:32:
                    7c:72:7b:cc:e8:0c:36:48:57:c1:61:ff:94:51:36:
                    23:75:d0:91:1d:58:55:0a:6c:9a:fc:ac:f6:8e:ea:
                    a9:ea:4b:a9:17:18:b0:b5:0b:ed:cf:cd:ac:c3:4d:
                    8b:0b:97:33:8a:a7:b5:90:86:d0:02:5b:09:70:b7:
                    dc:26:af:26:d3:63:c5:7c:f6:e8:12:6a:5e:da:3d:
                    20:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:7E:97:F3:26:78:F9:08:F0:D1:C3:EA:64:B1:D0:61:BF:88:FE:6E
            X509v3 Authority Key Identifier:
                keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a326233363a3a2f34382d3438203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:2b36::/48

    Signature Algorithm: sha256WithRSAEncryption
         7e:ef:df:73:7d:d0:8d:2b:ae:82:0e:02:44:3b:4d:8f:ba:11:
         65:db:34:e5:a5:50:53:a1:d0:ab:2c:d4:a2:cc:13:77:71:58:
         36:09:61:3c:b5:ec:d5:58:83:db:4e:38:83:e2:aa:60:51:17:
         52:fa:23:d7:a2:81:21:35:55:fd:f9:10:65:03:e8:68:8a:55:
         ff:80:63:92:e6:1d:f2:3d:a0:e6:0b:87:51:85:a0:26:30:fd:
         d7:a1:80:31:d1:88:04:f2:8c:0e:bd:48:3b:78:b6:aa:c9:2e:
         f5:91:21:64:74:04:02:ca:57:ed:4e:74:61:5a:d5:03:e1:4b:
         83:84:5e:cb:e5:b2:56:33:9d:e5:b2:c7:a9:49:51:2f:ec:ee:
         48:65:86:c8:ac:46:0d:9f:1d:8d:b7:6b:ba:2a:93:7c:ce:71:
         1b:21:4f:30:16:d7:f6:cd:68:c6:1a:40:a3:bd:34:53:0c:7c:
         7b:9b:a2:96:df:ec:ad:fe:0c:cc:59:fb:4d:84:69:dc:8d:88:
         db:77:54:57:4c:07:0a:e6:0f:c2:71:38:7c:f1:0b:1d:0c:4f:
         7a:59:92:56:0a:a9:af:e1:fa:05:09:0f:69:6f:12:1f:a0:29:
         95:61:4b:ab:4f:f4:34:76:ad:2f:c8:1f:67:03:4b:3e:2c:6a:
         b8:db:5d:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 11:46:25 2025 by rpki-client