Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a33363a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a33363a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          3kUcBUMkq5Am30CKLuImX+lWXYT/Bu+Fg8xlEpx+FzY=
Subject key identifier:   EF:1E:3E:BE:DA:83:D0:E4:58:29:A0:75:37:9B:86:69:92:8B:61:D4
Certificate issuer:       /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial:       5B9AC555BA7B2B919931B75F99353D90265FF479
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a33363a3a2f34382d313238203d3e203532303235.roa
Signing time:             Thu 03 Jul 2025 15:53:56 +0000
ROA not before:           Thu 03 Jul 2025 15:48:56 +0000
ROA not after:            Thu 02 Jul 2026 15:53:56 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:36::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 02:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:9a:c5:55:ba:7b:2b:91:99:31:b7:5f:99:35:3d:90:26:5f:f4:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
        Validity
            Not Before: Jul  3 15:48:56 2025 GMT
            Not After : Jul  2 15:53:56 2026 GMT
        Subject: CN=EF1E3EBEDA83D0E45829A075379B8669928B61D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:4f:55:be:eb:9a:56:a6:52:70:77:f8:89:bf:
                    bf:53:61:d6:87:04:0b:e1:3f:b3:7e:34:2b:ea:3f:
                    55:6e:b0:5d:be:ad:fa:07:cb:8d:f3:33:7a:a7:f3:
                    33:15:1d:3e:f0:4c:48:24:da:04:a2:b6:f4:fa:46:
                    39:d6:bb:29:66:6f:f1:7b:d0:c0:7a:23:e6:3f:94:
                    68:b8:a2:97:18:51:62:82:e7:9b:b8:7c:54:f2:a2:
                    b9:8b:26:a5:2e:cc:61:1f:7b:78:d8:c3:ff:bb:18:
                    ef:43:60:3f:c5:4c:f4:77:d1:a9:74:da:7c:c9:3b:
                    8d:00:8a:53:84:fa:f0:84:ef:83:46:b6:d3:5f:d3:
                    6d:e9:c3:55:8c:9f:de:b6:16:4a:a4:4a:08:a4:2e:
                    2d:ba:e1:18:8a:6c:55:18:9a:ca:20:0e:f3:70:ca:
                    09:60:60:53:f9:66:75:2e:92:82:dc:04:ea:06:15:
                    df:05:fe:f5:ce:95:d0:44:74:0a:f3:7a:52:7d:ac:
                    ad:26:96:1c:2b:ae:e8:53:7c:2e:b1:db:d8:d7:56:
                    3f:cc:20:5d:d7:18:98:36:96:73:22:55:ba:ab:1e:
                    ff:3c:2e:dd:e8:fc:5d:b0:a9:26:ff:82:c3:04:43:
                    66:09:fb:31:76:3c:38:df:c9:ac:d0:a1:79:c9:e5:
                    39:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:1E:3E:BE:DA:83:D0:E4:58:29:A0:75:37:9B:86:69:92:8B:61:D4
            X509v3 Authority Key Identifier:
                keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a33363a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:36::/48

    Signature Algorithm: sha256WithRSAEncryption
         7d:49:79:e6:48:bb:84:46:10:59:25:09:73:2c:89:6a:9f:d7:
         2f:b7:82:1c:17:02:bf:a5:72:3c:e1:f2:ef:f4:26:80:fb:7c:
         c4:5c:48:10:db:7b:7c:06:6a:e0:3d:87:cf:b2:b3:8a:1b:e1:
         f0:fb:f1:9f:87:92:3e:d5:06:03:c1:57:87:07:85:58:cf:d9:
         2b:f0:fb:9f:f4:e5:21:7f:c5:fe:01:7a:64:8a:97:51:6a:5f:
         09:f3:29:d1:43:c6:61:fe:a2:ba:6e:c1:18:54:c1:4d:2a:ed:
         54:b6:7a:c5:3b:b2:f8:04:9d:44:59:90:02:4b:c5:58:a1:87:
         a4:f2:fc:73:48:9e:13:a0:96:22:ba:1d:df:43:da:dc:4a:00:
         2a:d5:9b:7e:e8:23:bb:b1:8e:1d:a8:6c:b4:45:7b:1d:62:2d:
         ee:b9:3e:d5:c5:a1:6c:9c:44:85:98:0d:b1:f6:13:84:da:1c:
         69:5e:82:d6:fb:01:ec:d0:2c:ec:54:58:f6:11:ce:92:0c:19:
         a6:d5:9a:e5:19:db:f4:6d:23:be:2e:b2:34:a7:69:39:56:3c:
         5a:d4:f5:01:6d:67:d1:41:a7:e3:c5:f7:a1:6e:99:89:d4:1a:
         47:91:2a:a0:c8:f5:7f:d2:86:45:4d:08:80:5b:c6:6e:4a:fe:
         ec:e3:46:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 11:55:36 2025 by rpki-client