Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a3731323a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a3731323a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          GjnRRpi5Pg95VMoVUl6qPnA9gCSu4j+C2c6fl4QYNfw=
Subject key identifier:   29:30:2F:90:D9:93:8D:2E:15:D2:1E:53:AF:43:D1:01:DB:D7:49:5C
Certificate issuer:       /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial:       4CC136BA4F8808EC6CEDB7DE544DC8FB07D0E768
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a3731323a3a2f34382d313238203d3e203532303235.roa
Signing time:             Thu 03 Jul 2025 15:54:01 +0000
ROA not before:           Thu 03 Jul 2025 15:49:01 +0000
ROA not after:            Thu 02 Jul 2026 15:54:01 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:712::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 02:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:c1:36:ba:4f:88:08:ec:6c:ed:b7:de:54:4d:c8:fb:07:d0:e7:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
        Validity
            Not Before: Jul  3 15:49:01 2025 GMT
            Not After : Jul  2 15:54:01 2026 GMT
        Subject: CN=29302F90D9938D2E15D21E53AF43D101DBD7495C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:99:2c:35:2a:b4:17:64:8d:82:f1:9d:f7:e8:
                    e0:8f:4f:a0:63:c8:53:7f:e7:e9:0a:05:fb:d5:0e:
                    20:ed:b1:57:3a:07:07:39:b7:a2:0b:13:3c:cf:74:
                    da:00:2f:73:32:75:42:4f:e2:53:03:e5:f5:ba:e2:
                    f0:d8:c8:ea:7f:da:4c:47:0d:f5:cd:c7:64:fb:fb:
                    b1:c5:b7:6f:e9:67:d6:14:5c:9c:b0:76:ab:2e:c3:
                    28:32:2c:11:ee:8a:e5:67:cd:36:e6:d5:b6:2b:d8:
                    1c:4a:db:55:3e:ab:6c:44:ef:46:c7:78:55:d1:0b:
                    59:ac:3c:d6:1c:03:33:d7:d4:fa:04:8e:cf:f1:9b:
                    33:70:13:93:a2:a6:8c:46:a4:03:83:f9:99:eb:bb:
                    b0:d2:cb:88:5b:80:cd:0f:e8:93:bd:49:a6:9e:8c:
                    fc:93:ea:83:f3:1b:4b:91:62:b1:f5:0a:76:1d:45:
                    90:00:35:c5:57:e2:c8:9e:83:3a:d6:3b:ce:bd:c7:
                    03:bf:70:b1:2f:39:c4:79:48:74:db:11:51:59:25:
                    b4:2f:34:aa:1f:88:ba:80:28:2c:0a:2e:68:04:98:
                    bb:30:87:d9:18:28:d3:d0:5d:7d:cb:a6:48:5d:fd:
                    bc:f5:21:a1:0b:0b:99:14:a0:6e:ab:88:31:51:cf:
                    03:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:30:2F:90:D9:93:8D:2E:15:D2:1E:53:AF:43:D1:01:DB:D7:49:5C
            X509v3 Authority Key Identifier:
                keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a3731323a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:712::/48

    Signature Algorithm: sha256WithRSAEncryption
         43:90:49:a2:e5:0d:3e:c2:1b:97:0a:c4:bc:85:5b:ad:31:03:
         a3:06:12:70:26:fc:3b:01:49:42:8a:38:a5:04:ac:df:1f:7e:
         1f:c6:60:28:58:8a:e1:83:42:49:63:8e:d9:42:e9:4e:92:2f:
         dc:44:cd:ff:59:24:63:06:b0:28:24:84:5d:cf:67:04:72:47:
         5c:50:79:ee:08:ef:7f:d9:57:7e:17:9e:3c:c5:32:3e:e8:b3:
         6d:f8:7e:f9:eb:04:33:33:77:27:1d:22:86:3d:b7:8a:59:56:
         ee:7d:21:a4:61:c7:98:3b:23:9f:43:6c:e8:e2:1f:c1:44:be:
         af:cd:63:ba:63:d0:c2:60:41:81:4b:c8:74:c9:36:35:09:3a:
         2a:7d:bf:a9:bf:99:72:a4:e9:af:cd:25:15:9d:0f:b5:d2:0f:
         58:7f:fd:63:07:ec:0e:e8:9e:b8:c3:1e:de:82:9a:63:94:91:
         87:4b:62:9a:2a:b6:64:4d:59:67:21:ce:d3:0d:ab:f1:11:77:
         84:dd:ca:67:d1:23:cf:e8:c6:5f:42:39:0e:c9:49:5d:76:b3:
         47:6e:bb:0e:cb:69:3d:b7:f4:d8:29:23:e7:ca:96:5b:5f:0a:
         65:1e:41:fe:01:db:76:5f:9d:04:c2:5b:18:b8:63:00:11:e5:
         9e:a9:1e:47
-----BEGIN CERTIFICATE-----
MIIFIjCCBAqgAwIBAgIUTME2uk+ICOxs7bfeVE3I+wfQ52gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjYzODZGQUJFQTM5MjEwQjY2NUE2QTU1QUU1REE2NkJF
Njc0MTU5NzAeFw0yNTA3MDMxNTQ5MDFaFw0yNjA3MDIxNTU0MDFaMDMxMTAvBgNV
BAMTKDI5MzAyRjkwRDk5MzhEMkUxNUQyMUU1M0FGNDNEMTAxREJENzQ5NUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQComSw1KrQXZI2C8Z336OCPT6Bj
yFN/5+kKBfvVDiDtsVc6Bwc5t6ILEzzPdNoAL3MydUJP4lMD5fW64vDYyOp/2kxH
DfXNx2T7+7HFt2/pZ9YUXJywdqsuwygyLBHuiuVnzTbm1bYr2BxK21U+q2xE70bH
eFXRC1msPNYcAzPX1PoEjs/xmzNwE5OipoxGpAOD+Znru7DSy4hbgM0P6JO9Saae
jPyT6oPzG0uRYrH1CnYdRZAANcVX4siegzrWO869xwO/cLEvOcR5SHTbEVFZJbQv
NKofiLqAKCwKLmgEmLswh9kYKNPQXX3Lpkhd/bz1IaELC5kUoG6riDFRzwMZAgMB
AAGjggIsMIICKDAdBgNVHQ4EFgQUKTAvkNmTjS4V0h5Tr0PRAdvXSVwwHwYDVR0j
BBgwFoAU9jhvq+o5IQtmWmpVrl2ma+Z0FZcwDgYDVR0PAQH/BAQDAgeAMG4GA1Ud
HwRnMGUwY6BhoF+GXXJzeW5jOi8vcnBraS0wMS5wZHhuZXQudWsvcmVwby9wYXJh
ZG94bmV0d29ya3MvOC9GNjM4NkZBQkVBMzkyMTBCNjY1QTZBNTVBRTVEQTY2QkU2
NzQxNTk3LmNybDCBkwYIKwYBBQUHAQEEgYYwgYMwgYAGCCsGAQUFBzAChnRyc3lu
YzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYz
ZTAxODU3NTVjOTFiZTNmOWQvNy9GNjM4NkZBQkVBMzkyMTBCNjY1QTZBNTVBRTVE
QTY2QkU2NzQxNTk3LmNlcjCBkQYIKwYBBQUHAQsEgYQwgYEwfwYIKwYBBQUHMAuG
c3JzeW5jOi8vcnBraS0wMS5wZHhuZXQudWsvcmVwby9wYXJhZG94bmV0d29ya3Mv
OC8zMjYxMzAzNTNhNjQ2NjYzMzQzYTM3MzEzMjNhM2EyZjM0MzgyZDMxMzIzODIw
M2QzZTIwMzUzMjMwMzIzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF38QHEjANBgkqhkiG9w0BAQsF
AAOCAQEAQ5BJouUNPsIblwrEvIVbrTEDowYScCb8OwFJQoo4pQSs3x9+H8ZgKFiK
4YNCSWOO2ULpTpIv3ETN/1kkYwawKCSEXc9nBHJHXFB57gjvf9lXfheePMUyPuiz
bfh++esEMzN3Jx0ihj23illW7n0hpGHHmDsjn0Ns6OIfwUS+r81jumPQwmBBgUvI
dMk2NQk6Kn2/qb+ZcqTpr80lFZ0PtdIPWH/9YwfsDuieuMMe3oKaY5SRh0timiq2
ZE1ZZyHO0w2r8RF3hN3KZ9Ejz+jGX0I5DslJXXazR267DstpPbf02Ckj58qWW18K
ZR5B/gHbdl+dBMJbGLhjABHlnqkeRw==
-----END CERTIFICATE-----
Generated at Sat Jul 5 11:38:56 2025 by rpki-client