Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a326633613a3a2f34382d3438203d3e203532303235.roa
File:                     326130353a646663343a326633613a3a2f34382d3438203d3e203532303235.roa (raw, json)
Hash identifier:          RPwDITva0ymc+KS4lJd+B6BW+tDrdSL6d0BdMCBso2M=
Subject key identifier:   11:CC:1B:DB:3F:9A:1C:65:2F:FF:6F:6F:D6:04:54:13:91:77:2F:9F
Certificate issuer:       /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial:       3E6593ADBA5EED23B38AC748D37DBE7DDD0F4974
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a326633613a3a2f34382d3438203d3e203532303235.roa
Signing time:             Thu 03 Jul 2025 15:53:52 +0000
ROA not before:           Thu 03 Jul 2025 15:48:52 +0000
ROA not after:            Thu 02 Jul 2026 15:53:52 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:2f3a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 02:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:65:93:ad:ba:5e:ed:23:b3:8a:c7:48:d3:7d:be:7d:dd:0f:49:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
        Validity
            Not Before: Jul  3 15:48:52 2025 GMT
            Not After : Jul  2 15:53:52 2026 GMT
        Subject: CN=11CC1BDB3F9A1C652FFF6F6FD604541391772F9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:63:51:6c:46:d0:0b:00:94:f8:27:75:fc:78:
                    3b:a6:0f:e9:b7:9b:4e:55:24:99:63:e9:9c:36:bd:
                    78:a0:b3:82:d3:80:d7:58:4a:94:74:23:a9:09:20:
                    43:56:ab:16:9e:3d:fe:d1:3d:ca:76:46:4e:90:a4:
                    b0:a2:33:2a:48:ad:72:bf:23:32:4f:b3:0c:c2:3c:
                    7e:b6:df:d6:bb:31:69:18:a0:9c:d2:01:ee:87:15:
                    b1:d9:79:9d:6d:c1:09:c8:f7:b9:4a:ad:94:60:dd:
                    cf:d2:93:4b:0e:ae:cf:b1:61:82:0e:03:73:71:ed:
                    b5:37:c9:0b:89:1a:1f:91:e5:58:ce:6b:27:61:fa:
                    a6:0a:00:ac:31:18:be:18:d8:5d:73:d1:6b:a4:6c:
                    8c:dc:cf:a2:85:8d:1b:75:35:90:c9:51:f2:d6:39:
                    1d:89:f9:b2:76:29:21:3c:05:db:20:fa:58:09:f9:
                    f8:29:83:56:82:ba:54:2b:d3:db:b3:dd:79:69:ec:
                    86:7e:62:88:9a:36:fd:7e:4e:14:b6:8e:e2:f7:5d:
                    32:c7:04:47:62:9a:6b:86:c9:e5:0e:96:9e:4a:dd:
                    c0:f2:b3:a4:f5:f8:17:66:f3:ab:0e:46:c8:9c:13:
                    bc:1f:a2:a1:ce:94:c5:3e:dc:4c:2e:06:7e:a5:b5:
                    cd:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:CC:1B:DB:3F:9A:1C:65:2F:FF:6F:6F:D6:04:54:13:91:77:2F:9F
            X509v3 Authority Key Identifier:
                keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a326633613a3a2f34382d3438203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:2f3a::/48

    Signature Algorithm: sha256WithRSAEncryption
         8b:7e:ce:76:ee:b9:9c:1d:63:8b:2b:a4:53:af:7b:d2:80:aa:
         73:ed:47:e9:f0:d7:d0:88:19:9e:6b:30:e0:d4:a4:e8:cd:aa:
         c6:07:9a:87:1f:83:7e:fd:ac:a9:7c:33:46:8b:f7:25:7d:f7:
         a8:54:5c:64:1f:6d:f8:d3:b7:fe:01:cd:f2:9c:ed:79:71:65:
         6f:08:2a:5f:b3:7e:6c:17:61:65:36:9c:e7:3c:c2:03:cf:24:
         2c:ef:5e:08:f1:08:9e:a1:0c:a4:ce:3c:ec:b8:b5:d5:36:70:
         06:ea:38:73:4e:82:6d:95:fe:19:c9:6a:28:16:f6:4b:65:d3:
         77:bc:54:0c:b7:23:ac:00:e9:50:ee:92:52:8f:29:78:14:c5:
         bf:fe:94:ba:01:c1:fc:cf:7e:01:81:27:47:64:07:9b:e7:55:
         2e:5a:44:24:f0:6f:59:87:4e:73:57:89:1e:4a:04:17:f9:34:
         8a:71:98:eb:21:97:53:e2:05:20:70:87:aa:2d:4c:84:5b:26:
         21:e0:ca:06:45:39:7b:77:3b:62:95:4b:d9:95:0e:8c:ea:b1:
         34:a4:97:a6:9a:e4:66:59:7d:0e:bb:91:e4:ec:f4:87:e3:fc:
         29:78:79:a3:5f:17:4a:7a:76:93:ea:33:b1:a0:4d:93:9a:70:
         cc:c8:1d:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 11:37:23 2025 by rpki-client