Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a3331313a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a3331313a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          8AEvbqKS5w8RTsXxOna+H+fpFIbSDxxw02PbeF0S0Xk=
Subject key identifier:   D5:D2:8B:25:3A:55:C7:7E:9A:16:0A:74:CD:C0:E4:DD:55:B7:CE:AD
Certificate issuer:       /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial:       439D3F62EC3E7FAFA6EE761DD7583212726B2E26
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a3331313a3a2f34382d313238203d3e203532303235.roa
Signing time:             Thu 03 Jul 2025 15:53:53 +0000
ROA not before:           Thu 03 Jul 2025 15:48:53 +0000
ROA not after:            Thu 02 Jul 2026 15:53:53 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:311::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 02:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:9d:3f:62:ec:3e:7f:af:a6:ee:76:1d:d7:58:32:12:72:6b:2e:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
        Validity
            Not Before: Jul  3 15:48:53 2025 GMT
            Not After : Jul  2 15:53:53 2026 GMT
        Subject: CN=D5D28B253A55C77E9A160A74CDC0E4DD55B7CEAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:7b:03:2b:70:03:e6:18:e0:c7:46:dc:3f:9d:
                    8e:eb:3b:8e:81:82:38:34:58:ad:9e:04:aa:df:22:
                    17:18:6c:54:dc:49:80:ea:9f:a0:a4:3d:05:40:2b:
                    85:97:cb:db:5b:a9:de:8d:2b:bd:d8:1c:71:c6:c4:
                    ce:4b:de:f6:cc:21:06:42:5b:29:2c:4e:27:c5:68:
                    8d:ed:70:30:18:d7:30:4d:a5:1d:3d:c1:cb:25:d8:
                    fc:16:35:4f:57:0f:e7:92:1f:0c:6e:ef:e7:26:1e:
                    32:38:09:c2:73:7a:6f:32:fb:fe:da:de:94:85:e7:
                    a8:50:18:39:c0:d1:82:fd:75:ee:e8:1d:02:47:ce:
                    87:64:9e:3b:aa:4b:36:b4:e1:cd:06:a7:a0:0e:43:
                    6a:57:c0:42:52:e2:b6:a5:4f:5e:67:b2:7c:00:db:
                    7b:f4:3e:04:de:6d:aa:f6:3f:db:c4:3f:95:fa:34:
                    1d:27:2f:22:fe:f3:34:8c:2b:60:1a:e9:a1:fd:ac:
                    da:39:4e:f2:56:06:f9:03:fb:8b:26:f2:e1:a8:4c:
                    aa:8e:a4:17:da:23:a8:b4:c2:d5:b9:51:fd:b4:00:
                    02:e8:11:f4:18:73:9e:e4:1f:c8:30:90:8f:72:d0:
                    f3:7b:4a:44:43:a6:72:84:6c:75:61:72:d1:c8:ae:
                    20:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:D2:8B:25:3A:55:C7:7E:9A:16:0A:74:CD:C0:E4:DD:55:B7:CE:AD
            X509v3 Authority Key Identifier:
                keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a3331313a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:311::/48

    Signature Algorithm: sha256WithRSAEncryption
         78:42:2a:e3:89:d7:dc:b6:a5:69:c5:d8:72:bd:36:27:eb:38:
         2a:1d:9e:fd:58:40:df:62:18:34:d7:d4:86:38:a0:d7:c7:37:
         1b:dd:2c:57:1a:ef:c1:ec:f3:29:5e:38:e9:1b:99:9e:df:bc:
         90:b8:56:a2:ef:18:95:5b:bd:36:25:dd:c6:30:67:08:bd:5c:
         37:ab:ba:7a:25:34:cc:c1:24:6b:a0:70:98:f6:7e:6e:1a:6a:
         28:64:70:e1:46:43:99:6b:00:8a:bc:94:24:bd:93:ae:12:34:
         72:a8:23:0e:99:c7:72:0f:e8:6e:35:56:ce:91:ba:71:61:f3:
         e2:c3:b1:d7:84:08:e6:b5:ea:af:b4:d1:82:e0:a8:78:5f:a1:
         58:c9:2d:82:ee:6a:d2:96:9c:c4:33:4c:68:da:41:7a:85:3a:
         7a:dd:2c:8a:c6:7c:2b:7b:61:ca:fe:49:bd:c4:35:e9:f7:df:
         b6:77:52:4c:db:3e:37:65:fd:b1:78:2b:be:b9:7d:d9:89:c6:
         bd:fe:0f:49:a0:f0:4b:7c:6d:eb:60:79:14:63:96:b9:cc:db:
         03:18:cb:b1:53:4f:17:a4:cf:00:5e:9a:fe:84:c6:ae:6b:bf:
         8c:9b:37:9a:f0:40:3a:37:d8:35:17:0d:7f:23:91:3b:4b:21:
         51:54:02:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 11:35:02 2025 by rpki-client