Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a37393a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a37393a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          ygXfN/JB+BcCOI9TnDOKI0VLv6Dg8juZIGYDuNy4GOI=
Subject key identifier:   93:47:61:7B:51:7C:BB:61:45:2B:E9:A5:74:EB:97:84:B7:88:E9:41
Certificate issuer:       /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial:       572D5FC96E00585CB91EB9E2D7CAF4CC00BF24D5
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a37393a3a2f34382d313238203d3e203532303235.roa
Signing time:             Thu 03 Jul 2025 15:54:01 +0000
ROA not before:           Thu 03 Jul 2025 15:49:01 +0000
ROA not after:            Thu 02 Jul 2026 15:54:01 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:79::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 02:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:2d:5f:c9:6e:00:58:5c:b9:1e:b9:e2:d7:ca:f4:cc:00:bf:24:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
        Validity
            Not Before: Jul  3 15:49:01 2025 GMT
            Not After : Jul  2 15:54:01 2026 GMT
        Subject: CN=9347617B517CBB61452BE9A574EB9784B788E941
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d3:8f:07:c0:d7:f5:8d:54:a3:8d:dd:38:cc:
                    48:ef:95:b9:4c:4d:cd:53:5c:61:83:90:d7:16:f9:
                    ff:89:00:9a:25:71:bc:bc:f4:f3:05:0c:81:a5:e2:
                    9f:bc:55:22:bf:41:a2:cc:9d:11:a8:56:29:73:64:
                    73:6b:4b:20:f5:8e:5e:57:11:6e:d9:18:98:3e:d1:
                    37:7f:f6:29:8c:ce:44:fc:93:93:7d:01:59:cb:ce:
                    90:7e:91:c5:89:ae:47:40:f0:41:dd:54:dc:e4:fc:
                    d8:18:87:7d:30:14:0e:8b:d7:2f:8b:0d:03:11:c2:
                    c9:22:cb:be:84:09:f6:ff:40:db:e5:3c:a7:e2:9a:
                    f5:8f:07:aa:7a:6b:00:6d:20:21:fa:7a:8f:9e:fc:
                    c7:b2:42:74:cc:59:3e:9c:fd:4b:ea:56:90:b1:3f:
                    e1:b5:44:4a:2c:64:b6:50:2c:23:3d:9a:d3:84:4c:
                    2b:5b:5e:55:0f:12:99:09:0d:2d:39:26:bd:e5:d0:
                    1c:d7:8e:9a:5e:5e:b4:42:fd:04:27:a0:17:a9:71:
                    eb:fb:7f:32:b0:d8:67:06:e5:3d:2c:9e:f4:97:98:
                    cb:5c:e8:45:8a:28:7b:87:25:d7:b5:d5:6a:dc:7d:
                    1a:30:41:c8:be:76:c0:d4:96:33:66:d4:31:01:94:
                    6f:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:47:61:7B:51:7C:BB:61:45:2B:E9:A5:74:EB:97:84:B7:88:E9:41
            X509v3 Authority Key Identifier:
                keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a37393a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:79::/48

    Signature Algorithm: sha256WithRSAEncryption
         7f:fa:c6:c3:9d:e0:91:87:c5:77:58:0a:3f:c2:ed:ba:94:fe:
         e8:a3:92:f0:a8:d5:db:ac:f7:07:ea:9d:32:e0:19:76:c8:d5:
         3b:9a:b4:e9:72:b1:52:4f:a6:9c:fe:ed:32:e7:63:5f:62:2d:
         21:d8:d7:d4:a5:c3:62:89:87:12:f7:65:b5:df:43:c6:fd:62:
         d4:1e:2e:23:3b:19:ec:e1:22:7d:fc:77:4a:16:93:31:ab:18:
         32:19:30:68:15:ef:f4:be:21:43:f2:01:33:a9:63:bb:38:d2:
         26:ea:75:a3:c0:3d:01:9a:f4:4d:de:1c:87:f1:3e:c1:57:9b:
         24:38:cf:6b:4e:4a:c3:12:92:c8:2a:18:cc:c1:6c:28:70:1a:
         f7:22:da:cd:e9:50:88:1a:38:64:e6:06:2e:15:84:90:23:6d:
         c1:1b:f9:65:e0:1b:a0:8d:7f:c3:aa:89:8a:97:aa:07:ff:b9:
         f0:40:ce:06:8d:55:a7:e2:9f:24:86:20:ec:57:38:c6:84:de:
         5e:96:88:10:e0:c6:79:e4:8d:b2:be:07:5d:6e:0c:0b:11:30:
         ea:12:a7:da:bf:9e:c1:1b:3e:ce:c2:5b:9f:d0:e7:24:ce:bc:
         74:be:12:4d:3c:bb:25:c8:27:8d:aa:a2:7c:95:da:6a:8f:16:
         c6:78:72:51
-----BEGIN CERTIFICATE-----
MIIFHzCCBAegAwIBAgIUVy1fyW4AWFy5Hrni18r0zAC/JNUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjYzODZGQUJFQTM5MjEwQjY2NUE2QTU1QUU1REE2NkJF
Njc0MTU5NzAeFw0yNTA3MDMxNTQ5MDFaFw0yNjA3MDIxNTU0MDFaMDMxMTAvBgNV
BAMTKDkzNDc2MTdCNTE3Q0JCNjE0NTJCRTlBNTc0RUI5Nzg0Qjc4OEU5NDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4048HwNf1jVSjjd04zEjvlblM
Tc1TXGGDkNcW+f+JAJolcby89PMFDIGl4p+8VSK/QaLMnRGoVilzZHNrSyD1jl5X
EW7ZGJg+0Td/9imMzkT8k5N9AVnLzpB+kcWJrkdA8EHdVNzk/NgYh30wFA6L1y+L
DQMRwskiy76ECfb/QNvlPKfimvWPB6p6awBtICH6eo+e/MeyQnTMWT6c/UvqVpCx
P+G1REosZLZQLCM9mtOETCtbXlUPEpkJDS05Jr3l0BzXjppeXrRC/QQnoBepcev7
fzKw2GcG5T0snvSXmMtc6EWKKHuHJde11WrcfRowQci+dsDUljNm1DEBlG/5AgMB
AAGjggIpMIICJTAdBgNVHQ4EFgQUk0dhe1F8u2FFK+mldOuXhLeI6UEwHwYDVR0j
BBgwFoAU9jhvq+o5IQtmWmpVrl2ma+Z0FZcwDgYDVR0PAQH/BAQDAgeAMG4GA1Ud
HwRnMGUwY6BhoF+GXXJzeW5jOi8vcnBraS0wMS5wZHhuZXQudWsvcmVwby9wYXJh
ZG94bmV0d29ya3MvOC9GNjM4NkZBQkVBMzkyMTBCNjY1QTZBNTVBRTVEQTY2QkU2
NzQxNTk3LmNybDCBkwYIKwYBBQUHAQEEgYYwgYMwgYAGCCsGAQUFBzAChnRyc3lu
YzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYz
ZTAxODU3NTVjOTFiZTNmOWQvNy9GNjM4NkZBQkVBMzkyMTBCNjY1QTZBNTVBRTVE
QTY2QkU2NzQxNTk3LmNlcjCBjgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4Zx
cnN5bmM6Ly9ycGtpLTAxLnBkeG5ldC51ay9yZXBvL3BhcmFkb3huZXR3b3Jrcy84
LzMyNjEzMDM1M2E2NDY2NjMzNDNhMzczOTNhM2EyZjM0MzgyZDMxMzIzODIwM2Qz
ZTIwMzUzMjMwMzIzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggr
BgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF38QAeTANBgkqhkiG9w0BAQsFAAOC
AQEAf/rGw53gkYfFd1gKP8LtupT+6KOS8KjV26z3B+qdMuAZdsjVO5q06XKxUk+m
nP7tMudjX2ItIdjX1KXDYomHEvdltd9Dxv1i1B4uIzsZ7OEiffx3ShaTMasYMhkw
aBXv9L4hQ/IBM6ljuzjSJup1o8A9AZr0Td4ch/E+wVebJDjPa05KwxKSyCoYzMFs
KHAa9yLazelQiBo4ZOYGLhWEkCNtwRv5ZeAboI1/w6qJipeqB/+58EDOBo1Vp+Kf
JIYg7Fc4xoTeXpaIEODGeeSNsr4HXW4MCxEw6hKn2r+ewRs+zsJbn9DnJM68dL4S
TTy7JcgnjaqifJXaao8WxnhyUQ==
-----END CERTIFICATE-----
Generated at Sat Jul 5 11:57:37 2025 by rpki-client