Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a326533393a3a2f34382d3438203d3e203532303235.roa
File:                     326130353a646663343a326533393a3a2f34382d3438203d3e203532303235.roa (raw, json)
Hash identifier:          jjhFqjySuplN77wN4vgjKLiGS7TZ6tdX1cMCwANJPmo=
Subject key identifier:   B0:6B:BE:D2:79:6C:D1:05:93:44:92:74:09:03:15:5E:55:5E:42:29
Certificate issuer:       /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial:       1CF7B99DA68ACFE90A2DD22B30C01743ED280791
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a326533393a3a2f34382d3438203d3e203532303235.roa
Signing time:             Thu 03 Jul 2025 15:54:02 +0000
ROA not before:           Thu 03 Jul 2025 15:49:02 +0000
ROA not after:            Thu 02 Jul 2026 15:54:02 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:2e39::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 02:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:f7:b9:9d:a6:8a:cf:e9:0a:2d:d2:2b:30:c0:17:43:ed:28:07:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
        Validity
            Not Before: Jul  3 15:49:02 2025 GMT
            Not After : Jul  2 15:54:02 2026 GMT
        Subject: CN=B06BBED2796CD105934492740903155E555E4229
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c7:5c:2d:ab:da:f4:9d:21:8e:d7:41:d5:d1:
                    00:e1:db:6d:ad:c9:d0:3b:1b:2a:0d:7d:5d:1c:62:
                    89:64:8c:69:9e:8a:2a:ab:47:6b:6e:67:70:67:19:
                    f8:9e:3f:a1:2e:56:c0:4f:28:49:f3:b6:93:c5:09:
                    0f:5d:9e:63:03:2d:95:86:2f:75:fa:24:1e:13:de:
                    77:62:63:bc:42:d3:f5:1b:ca:3c:40:45:c0:16:43:
                    89:1f:fe:bf:d2:76:54:b6:c6:80:41:96:6f:ae:b8:
                    8f:59:2b:03:1b:b8:16:d6:12:33:46:ac:98:41:ab:
                    89:8f:8e:06:79:b5:b6:90:db:6b:9c:9b:4f:c3:67:
                    98:6f:c1:61:11:df:a6:8f:79:d1:75:af:e9:2b:43:
                    3a:cb:d1:ee:03:1f:3e:e6:92:0b:0a:48:5c:64:5c:
                    de:ee:95:17:6f:dd:32:15:3b:82:d8:72:ea:c8:b2:
                    1e:36:f0:4d:73:99:0a:c8:df:4a:72:47:5f:c0:b6:
                    3c:5b:3d:c9:81:12:b7:fd:69:1a:69:da:b9:ae:d4:
                    1f:b4:da:43:51:32:aa:fa:52:c2:c0:9a:24:c8:15:
                    8c:da:71:19:4c:6c:d9:7b:26:d0:dd:a3:24:83:a4:
                    bc:a4:34:ba:e5:4d:87:9d:87:bb:f7:88:14:38:d3:
                    2e:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:6B:BE:D2:79:6C:D1:05:93:44:92:74:09:03:15:5E:55:5E:42:29
            X509v3 Authority Key Identifier:
                keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a326533393a3a2f34382d3438203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:2e39::/48

    Signature Algorithm: sha256WithRSAEncryption
         78:68:41:df:c6:9b:ae:b2:e6:c1:3a:f8:9d:6b:6f:92:16:28:
         29:f3:25:50:5f:22:d6:bc:47:a3:f5:6f:47:63:c4:40:9b:95:
         be:c1:d5:81:9d:71:09:04:7a:39:27:04:6b:74:79:5f:61:a8:
         72:96:17:49:16:cc:7c:6e:01:22:7e:41:2f:1d:de:a4:3a:26:
         d8:4b:74:76:9a:8d:a1:9f:ac:08:7c:df:93:e3:67:a4:fb:5c:
         cf:4b:d1:06:db:d8:5c:8b:83:ad:dc:36:6c:c1:a3:a9:6d:83:
         49:dd:18:af:c6:2f:4a:49:b6:b8:69:fb:f2:4f:5b:7b:b9:6a:
         c0:5f:cb:0c:ea:dd:ca:01:da:94:46:7e:8f:e2:7d:e4:40:81:
         63:e1:6d:f9:91:da:a8:1f:80:80:31:ff:b7:1b:c4:4b:db:85:
         ac:e4:98:de:91:34:36:28:64:72:46:e8:34:19:37:a7:56:1f:
         9b:b3:14:f5:5e:93:68:e7:dd:9c:21:5e:39:16:47:9c:47:c6:
         fc:58:74:bb:c4:48:d7:35:ef:5c:e5:09:5c:4c:f3:c9:f6:8a:
         21:1b:25:de:ec:af:96:23:4e:12:1c:28:d8:4a:51:c0:7e:1f:
         8c:e4:99:d1:e4:1c:aa:06:f3:c2:20:08:47:59:20:71:62:a4:
         8f:97:39:46
-----BEGIN CERTIFICATE-----
MIIFIjCCBAqgAwIBAgIUHPe5naaKz+kKLdIrMMAXQ+0oB5EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjYzODZGQUJFQTM5MjEwQjY2NUE2QTU1QUU1REE2NkJF
Njc0MTU5NzAeFw0yNTA3MDMxNTQ5MDJaFw0yNjA3MDIxNTU0MDJaMDMxMTAvBgNV
BAMTKEIwNkJCRUQyNzk2Q0QxMDU5MzQ0OTI3NDA5MDMxNTVFNTU1RTQyMjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7x1wtq9r0nSGO10HV0QDh222t
ydA7GyoNfV0cYolkjGmeiiqrR2tuZ3BnGfieP6EuVsBPKEnztpPFCQ9dnmMDLZWG
L3X6JB4T3ndiY7xC0/UbyjxARcAWQ4kf/r/SdlS2xoBBlm+uuI9ZKwMbuBbWEjNG
rJhBq4mPjgZ5tbaQ22ucm0/DZ5hvwWER36aPedF1r+krQzrL0e4DHz7mkgsKSFxk
XN7ulRdv3TIVO4LYcurIsh428E1zmQrI30pyR1/AtjxbPcmBErf9aRpp2rmu1B+0
2kNRMqr6UsLAmiTIFYzacRlMbNl7JtDdoySDpLykNLrlTYedh7v3iBQ40y7HAgMB
AAGjggIsMIICKDAdBgNVHQ4EFgQUsGu+0nls0QWTRJJ0CQMVXlVeQikwHwYDVR0j
BBgwFoAU9jhvq+o5IQtmWmpVrl2ma+Z0FZcwDgYDVR0PAQH/BAQDAgeAMG4GA1Ud
HwRnMGUwY6BhoF+GXXJzeW5jOi8vcnBraS0wMS5wZHhuZXQudWsvcmVwby9wYXJh
ZG94bmV0d29ya3MvOC9GNjM4NkZBQkVBMzkyMTBCNjY1QTZBNTVBRTVEQTY2QkU2
NzQxNTk3LmNybDCBkwYIKwYBBQUHAQEEgYYwgYMwgYAGCCsGAQUFBzAChnRyc3lu
YzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYz
ZTAxODU3NTVjOTFiZTNmOWQvNy9GNjM4NkZBQkVBMzkyMTBCNjY1QTZBNTVBRTVE
QTY2QkU2NzQxNTk3LmNlcjCBkQYIKwYBBQUHAQsEgYQwgYEwfwYIKwYBBQUHMAuG
c3JzeW5jOi8vcnBraS0wMS5wZHhuZXQudWsvcmVwby9wYXJhZG94bmV0d29ya3Mv
OC8zMjYxMzAzNTNhNjQ2NjYzMzQzYTMyNjUzMzM5M2EzYTJmMzQzODJkMzQzODIw
M2QzZTIwMzUzMjMwMzIzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF38QuOTANBgkqhkiG9w0BAQsF
AAOCAQEAeGhB38abrrLmwTr4nWtvkhYoKfMlUF8i1rxHo/VvR2PEQJuVvsHVgZ1x
CQR6OScEa3R5X2GocpYXSRbMfG4BIn5BLx3epDom2Et0dpqNoZ+sCHzfk+NnpPtc
z0vRBtvYXIuDrdw2bMGjqW2DSd0Yr8YvSkm2uGn78k9be7lqwF/LDOrdygHalEZ+
j+J95ECBY+Ft+ZHaqB+AgDH/txvES9uFrOSY3pE0NihkckboNBk3p1Yfm7MU9V6T
aOfdnCFeORZHnEfG/Fh0u8RI1zXvXOUJXEzzyfaKIRsl3uyvliNOEhwo2EpRwH4f
jOSZ0eQcqgbzwiAIR1kgcWKkj5c5Rg==
-----END CERTIFICATE-----
Generated at Sat Jul 5 11:34:25 2025 by rpki-client