Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a3732313a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a3732313a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          UMJKv7yuM1mal1rXvfrLWVw1/g8i6Hhoc/kNchtwC3w=
Subject key identifier:   8C:78:F0:B6:FD:88:50:B1:69:75:63:D5:42:B4:19:72:AB:01:2C:62
Certificate issuer:       /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial:       40F7F9CDFA5A028EE605BF63BD42010E5A16311C
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a3732313a3a2f34382d313238203d3e203532303235.roa
Signing time:             Thu 03 Jul 2025 15:53:59 +0000
ROA not before:           Thu 03 Jul 2025 15:48:59 +0000
ROA not after:            Thu 02 Jul 2026 15:53:59 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:721::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 02:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:f7:f9:cd:fa:5a:02:8e:e6:05:bf:63:bd:42:01:0e:5a:16:31:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
        Validity
            Not Before: Jul  3 15:48:59 2025 GMT
            Not After : Jul  2 15:53:59 2026 GMT
        Subject: CN=8C78F0B6FD8850B1697563D542B41972AB012C62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:4b:31:69:14:28:1f:91:b9:5d:2e:bd:75:49:
                    77:a9:71:8d:f2:c3:5e:c4:99:22:9c:cd:9a:bd:57:
                    78:05:41:98:4c:28:d9:31:26:5d:6f:92:87:4f:9f:
                    24:36:c3:56:bd:76:1a:a5:96:36:4c:ca:10:1c:3e:
                    32:13:93:66:14:de:e7:46:ac:a6:37:47:62:88:0a:
                    ac:68:e0:2a:25:fe:ec:0c:ef:26:de:ae:c9:ac:46:
                    10:86:db:4d:32:34:f4:cc:de:90:20:f4:8e:49:8c:
                    92:3f:d0:56:dd:c4:fc:bd:71:2c:3f:82:d7:b8:6b:
                    c4:0c:c1:e8:7e:5f:98:dc:16:5e:69:84:b8:50:08:
                    44:0a:e6:47:aa:79:7e:b8:49:c1:25:7b:ef:db:d5:
                    6f:a2:af:00:6e:ef:4d:c9:45:ad:2f:95:49:f4:41:
                    13:49:2c:da:1d:1d:a1:4a:60:12:fc:80:08:14:81:
                    2e:40:a0:72:41:28:52:f8:77:1d:e5:df:59:37:47:
                    7d:4a:8a:a0:ea:ff:9b:23:ee:f4:b0:fb:d3:6d:00:
                    02:cc:38:2d:28:7e:a1:12:36:62:7a:e3:8f:16:5a:
                    b7:02:89:07:3c:f5:5e:1d:8d:1d:1a:6c:07:7c:84:
                    7b:4b:b7:80:91:1a:4c:3d:b9:9d:43:01:26:46:39:
                    3a:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:78:F0:B6:FD:88:50:B1:69:75:63:D5:42:B4:19:72:AB:01:2C:62
            X509v3 Authority Key Identifier:
                keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a3732313a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:721::/48

    Signature Algorithm: sha256WithRSAEncryption
         5f:04:bf:e3:f0:97:62:6f:96:fb:4e:c7:8d:be:17:9c:e7:7e:
         9a:51:82:93:a0:5f:47:0a:1c:bf:55:15:6d:37:65:a7:38:ce:
         d6:e9:a4:b0:ab:2b:17:86:19:27:a9:79:65:d3:70:03:79:23:
         f0:c9:c4:50:81:30:3b:91:59:64:62:d3:48:ec:36:e5:6e:70:
         a1:bb:68:3e:4f:b7:c9:bf:79:88:e8:eb:14:be:53:20:2c:6b:
         25:35:b0:cf:fb:14:de:67:d1:43:d5:e3:0d:aa:c5:98:cb:19:
         bd:f2:23:c1:32:44:e6:59:bd:d4:5e:4c:19:d3:68:1f:56:25:
         e6:1d:2c:df:9e:0e:44:f6:43:06:bf:d8:f8:51:cc:c8:b3:ad:
         45:4c:92:e3:90:46:49:ee:81:b5:7d:87:02:30:51:64:5d:75:
         fb:04:91:b5:45:08:02:2a:b3:4f:a4:b1:c2:7a:23:08:67:52:
         03:d1:b8:83:72:26:7d:c7:fe:9a:b3:b4:74:35:35:a1:42:11:
         48:71:de:a2:6a:23:2e:08:0f:5c:f5:18:aa:01:65:6f:79:fa:
         d6:42:92:9a:de:93:e9:64:5e:2e:60:25:82:94:99:9f:9a:eb:
         91:8a:b3:50:42:4e:65:88:fc:e9:6f:b8:11:de:18:b3:95:3e:
         a0:f3:08:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 11:43:58 2025 by rpki-client