Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a373231663a3a2f34382d3438203d3e203532303235.roa
File:                     326130353a646663343a373231663a3a2f34382d3438203d3e203532303235.roa (raw, json)
Hash identifier:          aZNQ+3jG2a2LH5NteHpDjtt8t38ElEKkm4q8PEFnrYk=
Subject key identifier:   12:1B:F3:27:F8:48:F2:8B:53:80:24:18:C3:5F:AB:5D:F5:E7:C1:DE
Certificate issuer:       /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial:       53D4D01CBD817BF48241145672596E443419A344
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a373231663a3a2f34382d3438203d3e203532303235.roa
Signing time:             Thu 03 Jul 2025 15:53:54 +0000
ROA not before:           Thu 03 Jul 2025 15:48:54 +0000
ROA not after:            Thu 02 Jul 2026 15:53:54 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:721f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 02:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:d4:d0:1c:bd:81:7b:f4:82:41:14:56:72:59:6e:44:34:19:a3:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
        Validity
            Not Before: Jul  3 15:48:54 2025 GMT
            Not After : Jul  2 15:53:54 2026 GMT
        Subject: CN=121BF327F848F28B53802418C35FAB5DF5E7C1DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:50:2d:2a:51:31:e8:06:42:ad:93:6a:42:37:
                    a8:7c:f0:bc:71:22:90:71:12:52:a4:55:64:6f:1a:
                    bd:16:a1:20:6e:2a:cc:b1:d2:54:99:e5:12:6d:61:
                    0e:c8:0f:e8:c6:ef:53:52:ef:a0:2c:bb:aa:3c:cc:
                    e2:73:21:5c:f2:2c:84:7b:d9:21:eb:9d:33:7a:9a:
                    06:b9:12:de:55:7b:d3:d8:a1:4b:31:06:31:95:8f:
                    83:ff:2a:88:62:4d:d7:aa:24:7b:fe:b4:7f:d6:1a:
                    a7:32:fc:66:3f:af:3d:89:23:80:a2:50:0f:61:5b:
                    0e:2a:f6:55:a2:db:0f:5f:0d:57:e0:a7:26:0d:62:
                    10:ba:7e:4a:0d:a1:c1:83:2d:27:7b:15:af:56:74:
                    93:98:a2:e9:01:e0:44:57:ff:03:85:8b:32:ac:03:
                    1a:ac:50:86:8b:f0:55:c1:73:ab:56:a3:81:29:f9:
                    f4:50:e7:e3:78:e6:2d:e3:ce:f2:14:a4:21:3c:37:
                    ee:9b:8a:72:e7:30:13:80:4b:38:da:e0:20:40:08:
                    0f:6a:da:cc:e6:b5:17:fb:49:64:5a:6f:59:b7:5b:
                    08:92:8c:20:48:e8:8b:59:97:b3:b7:ec:b8:3e:aa:
                    4b:a1:ba:07:0f:b3:ed:6e:d4:15:9b:69:09:30:22:
                    c8:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:1B:F3:27:F8:48:F2:8B:53:80:24:18:C3:5F:AB:5D:F5:E7:C1:DE
            X509v3 Authority Key Identifier:
                keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a373231663a3a2f34382d3438203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:721f::/48

    Signature Algorithm: sha256WithRSAEncryption
         48:fa:cb:3a:6f:e4:12:b9:12:8e:8f:9f:1a:39:0b:57:9b:70:
         eb:01:6d:4a:b4:e3:39:2e:a8:e0:de:6b:5f:6e:1b:42:ec:80:
         18:87:7f:0f:1a:59:64:7f:40:93:79:8c:0d:7d:7b:37:a9:b3:
         d8:27:21:28:99:61:f6:dd:07:e8:d2:d1:f7:10:b6:5a:d7:b6:
         43:63:6a:17:06:32:54:df:4a:67:20:07:fe:e1:54:67:3a:a0:
         4a:5c:c9:85:2e:ff:59:f5:1b:f9:14:97:cc:65:05:8b:11:71:
         7b:3e:8a:c0:31:e1:51:66:54:3e:79:43:97:35:eb:80:41:f5:
         d5:5c:aa:4e:48:cd:ef:d4:05:16:8f:4c:69:bd:aa:2c:12:09:
         4f:9c:4f:91:d5:6d:ea:80:0c:6a:29:cf:9a:93:2c:9e:a3:87:
         16:be:3f:6f:10:55:f3:74:f4:e4:2a:cd:d0:bf:d5:6f:68:d7:
         5c:41:aa:c6:34:3d:4d:17:5a:0f:ac:65:39:c2:5e:67:46:9d:
         c3:84:fa:21:c6:63:cc:9b:e8:56:05:98:28:38:90:77:64:66:
         a5:64:b0:81:1b:45:80:f9:fd:64:c7:5c:57:b8:18:74:b9:d7:
         80:49:79:9e:32:97:f7:a4:15:f3:4f:12:50:44:46:cf:b5:f3:
         fc:30:53:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 11:22:38 2025 by rpki-client