Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a34353a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a34353a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          FV11mEjudGzDSFX62Fr6g1maUGoQjuW9/yCApEY/ads=
Subject key identifier:   9A:1B:C2:3F:07:A5:B7:F6:E0:B1:4E:CE:1A:8A:4D:FD:8A:B6:61:94
Certificate issuer:       /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial:       1341C9AF0963E679E623A280F81F96CF1153D5AB
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a34353a3a2f34382d313238203d3e203532303235.roa
Signing time:             Thu 03 Jul 2025 15:53:48 +0000
ROA not before:           Thu 03 Jul 2025 15:48:48 +0000
ROA not after:            Thu 02 Jul 2026 15:53:48 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:45::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 02:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:41:c9:af:09:63:e6:79:e6:23:a2:80:f8:1f:96:cf:11:53:d5:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
        Validity
            Not Before: Jul  3 15:48:48 2025 GMT
            Not After : Jul  2 15:53:48 2026 GMT
        Subject: CN=9A1BC23F07A5B7F6E0B14ECE1A8A4DFD8AB66194
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:79:85:63:cf:c5:b5:04:c5:d7:61:85:b0:90:
                    35:11:29:77:77:1e:ca:e3:f8:46:4d:f8:07:84:a1:
                    22:f2:c6:5d:c8:7c:d2:25:be:b6:d8:f4:4f:75:e9:
                    10:d7:1b:d6:5e:42:38:07:72:58:ab:a7:eb:93:e5:
                    91:ad:6b:f4:2f:7d:c9:3f:c6:fe:cf:03:d5:cb:b5:
                    1e:f4:06:fe:9e:0b:ad:ab:38:04:50:58:93:c1:44:
                    8d:94:ae:29:4d:00:ae:69:5c:b8:c7:78:c1:3e:76:
                    0b:fc:9f:be:c8:8b:f9:d9:3f:27:b3:df:cd:f5:96:
                    b8:11:db:2a:a6:c2:2e:58:01:27:63:4c:3b:22:83:
                    b9:14:66:9f:4e:9f:84:80:05:82:e8:df:a9:49:69:
                    d9:1c:6d:f0:88:7e:b1:d1:a3:36:0e:7b:ff:c5:62:
                    61:5d:d1:b2:da:b9:69:cc:c8:86:81:aa:73:63:70:
                    15:94:17:c0:83:e4:87:f3:85:91:89:48:4f:39:26:
                    43:1b:e1:4d:be:5b:b0:ba:b2:b6:4f:62:ee:ac:0a:
                    33:94:ef:b1:fe:0d:05:e4:3d:50:1b:53:09:f4:d0:
                    aa:93:de:c7:03:c4:c6:4a:e3:4b:30:db:45:e4:2e:
                    d5:47:b6:af:8c:fb:23:7a:8d:72:60:cd:29:dc:9b:
                    62:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:1B:C2:3F:07:A5:B7:F6:E0:B1:4E:CE:1A:8A:4D:FD:8A:B6:61:94
            X509v3 Authority Key Identifier:
                keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a34353a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:45::/48

    Signature Algorithm: sha256WithRSAEncryption
         86:09:be:e2:26:32:fa:b0:36:5d:39:0e:93:e1:a6:20:c7:6a:
         f5:6c:da:22:03:fc:56:16:13:da:8f:85:8b:76:cb:6c:bf:6b:
         b9:ed:2f:49:14:f4:84:46:6a:42:c4:7c:0e:a6:e9:75:35:c1:
         19:a7:c3:2c:05:f2:20:74:58:91:da:18:97:b9:9e:3d:f6:55:
         66:3a:ae:c6:82:be:44:02:d8:4c:2a:45:77:61:b0:a5:11:1f:
         6b:28:29:f8:26:6a:14:1b:08:0d:a5:04:4b:be:ae:15:cd:59:
         5e:ef:45:4a:9e:27:48:a8:44:4e:9b:36:8a:b3:f9:86:20:31:
         bb:8e:fe:bb:fd:fa:88:f7:2b:2f:f6:bd:d0:63:bd:bd:c3:19:
         e5:0b:fc:4e:09:fe:39:d2:11:11:cc:0d:f5:c8:10:d9:b8:ff:
         c3:35:c7:fb:31:b3:81:40:99:f7:12:85:06:1c:8f:bd:da:46:
         27:47:36:19:9a:38:7a:d2:2a:54:ae:71:a5:4a:75:6b:16:5c:
         aa:75:10:4d:5f:97:a7:e2:91:9a:57:2d:2c:e2:00:a8:16:3e:
         ab:de:1c:e5:3a:46:e6:fe:ea:02:a8:1c:8d:5a:33:77:b0:5c:
         87:3f:1a:5b:a1:b9:79:52:f3:fe:19:aa:d4:98:c1:cb:e7:f2:
         60:d5:0f:c7
-----BEGIN CERTIFICATE-----
MIIFHzCCBAegAwIBAgIUE0HJrwlj5nnmI6KA+B+WzxFT1aswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjYzODZGQUJFQTM5MjEwQjY2NUE2QTU1QUU1REE2NkJF
Njc0MTU5NzAeFw0yNTA3MDMxNTQ4NDhaFw0yNjA3MDIxNTUzNDhaMDMxMTAvBgNV
BAMTKDlBMUJDMjNGMDdBNUI3RjZFMEIxNEVDRTFBOEE0REZEOEFCNjYxOTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD7eYVjz8W1BMXXYYWwkDURKXd3
Hsrj+EZN+AeEoSLyxl3IfNIlvrbY9E916RDXG9ZeQjgHclirp+uT5ZGta/Qvfck/
xv7PA9XLtR70Bv6eC62rOARQWJPBRI2UrilNAK5pXLjHeME+dgv8n77Ii/nZPyez
3831lrgR2yqmwi5YASdjTDsig7kUZp9On4SABYLo36lJadkcbfCIfrHRozYOe//F
YmFd0bLauWnMyIaBqnNjcBWUF8CD5IfzhZGJSE85JkMb4U2+W7C6srZPYu6sCjOU
77H+DQXkPVAbUwn00KqT3scDxMZK40sw20XkLtVHtq+M+yN6jXJgzSncm2LjAgMB
AAGjggIpMIICJTAdBgNVHQ4EFgQUmhvCPwelt/bgsU7OGopN/Yq2YZQwHwYDVR0j
BBgwFoAU9jhvq+o5IQtmWmpVrl2ma+Z0FZcwDgYDVR0PAQH/BAQDAgeAMG4GA1Ud
HwRnMGUwY6BhoF+GXXJzeW5jOi8vcnBraS0wMS5wZHhuZXQudWsvcmVwby9wYXJh
ZG94bmV0d29ya3MvOC9GNjM4NkZBQkVBMzkyMTBCNjY1QTZBNTVBRTVEQTY2QkU2
NzQxNTk3LmNybDCBkwYIKwYBBQUHAQEEgYYwgYMwgYAGCCsGAQUFBzAChnRyc3lu
YzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYz
ZTAxODU3NTVjOTFiZTNmOWQvNy9GNjM4NkZBQkVBMzkyMTBCNjY1QTZBNTVBRTVE
QTY2QkU2NzQxNTk3LmNlcjCBjgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4Zx
cnN5bmM6Ly9ycGtpLTAxLnBkeG5ldC51ay9yZXBvL3BhcmFkb3huZXR3b3Jrcy84
LzMyNjEzMDM1M2E2NDY2NjMzNDNhMzQzNTNhM2EyZjM0MzgyZDMxMzIzODIwM2Qz
ZTIwMzUzMjMwMzIzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggr
BgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF38QARTANBgkqhkiG9w0BAQsFAAOC
AQEAhgm+4iYy+rA2XTkOk+GmIMdq9WzaIgP8VhYT2o+Fi3bLbL9rue0vSRT0hEZq
QsR8DqbpdTXBGafDLAXyIHRYkdoYl7mePfZVZjquxoK+RALYTCpFd2GwpREfaygp
+CZqFBsIDaUES76uFc1ZXu9FSp4nSKhETps2irP5hiAxu47+u/36iPcrL/a90GO9
vcMZ5Qv8Tgn+OdIREcwN9cgQ2bj/wzXH+zGzgUCZ9xKFBhyPvdpGJ0c2GZo4etIq
VK5xpUp1axZcqnUQTV+Xp+KRmlctLOIAqBY+q94c5TpG5v7qAqgcjVozd7Bchz8a
W6G5eVLz/hmq1JjBy+fyYNUPxw==
-----END CERTIFICATE-----
Generated at Sat Jul 5 11:46:24 2025 by rpki-client