Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a3739663a3a2f34382d3438203d3e203532303235.roa
File:                     326130353a646663343a3739663a3a2f34382d3438203d3e203532303235.roa (raw, json)
Hash identifier:          Ybbjn37UtgCo2H6tWVp2rjhF8/yqZtmlqc2aFj86f9s=
Subject key identifier:   35:89:76:E7:2B:95:CE:65:48:88:7E:F1:99:C1:C1:F2:80:8D:B3:BD
Certificate issuer:       /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial:       3DACB7D38F6FBC096567D5D07DA7719306611973
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a3739663a3a2f34382d3438203d3e203532303235.roa
Signing time:             Thu 03 Jul 2025 15:53:54 +0000
ROA not before:           Thu 03 Jul 2025 15:48:54 +0000
ROA not after:            Thu 02 Jul 2026 15:53:54 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:79f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 02:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:ac:b7:d3:8f:6f:bc:09:65:67:d5:d0:7d:a7:71:93:06:61:19:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
        Validity
            Not Before: Jul  3 15:48:54 2025 GMT
            Not After : Jul  2 15:53:54 2026 GMT
        Subject: CN=358976E72B95CE6548887EF199C1C1F2808DB3BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:32:3c:ca:b9:cf:42:ea:a9:a7:00:23:cc:b2:
                    38:49:ae:a3:cf:6b:70:fc:7d:db:b1:2d:36:bd:1f:
                    98:f7:67:48:d7:49:9c:1b:aa:e6:32:4f:4c:ef:e8:
                    2e:80:44:ea:4e:bd:b4:25:24:7c:fb:c7:51:25:b7:
                    ca:26:81:1b:32:dc:08:90:f6:1e:85:4c:cd:37:af:
                    7b:fd:2d:6f:73:97:e0:0b:f4:46:96:18:89:37:b6:
                    d9:f5:95:0b:8f:1e:bd:c4:1b:96:5b:ad:20:ae:e2:
                    3a:15:82:8c:2e:02:74:7b:22:02:04:67:a7:9e:0d:
                    c8:b2:20:2f:11:10:eb:d6:74:1c:9a:bc:a4:48:ad:
                    f5:26:08:5e:65:e9:99:6d:9f:b7:d9:b5:eb:ed:fa:
                    cf:7a:7e:e2:f6:6d:40:83:ca:23:5d:ca:4e:66:79:
                    d6:4a:fd:10:1b:8f:03:9a:95:3f:6d:b0:04:cf:9f:
                    07:a9:99:16:6f:3f:04:5f:82:c4:50:cc:cd:33:f1:
                    d5:3d:7d:c2:f6:3a:b6:39:58:e3:1e:70:0b:27:10:
                    a8:1b:20:fe:26:a1:bb:58:57:ac:14:d1:96:da:5e:
                    fc:1d:66:93:b4:ee:e4:45:31:8b:96:bd:38:2e:e3:
                    7a:b8:3d:f9:14:60:cd:ff:ac:87:96:1d:d3:19:a3:
                    bf:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:89:76:E7:2B:95:CE:65:48:88:7E:F1:99:C1:C1:F2:80:8D:B3:BD
            X509v3 Authority Key Identifier:
                keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a3739663a3a2f34382d3438203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:79f::/48

    Signature Algorithm: sha256WithRSAEncryption
         56:8a:e5:c5:d0:0e:68:56:4c:43:6c:9b:7a:4e:ce:b0:b1:0e:
         3a:7a:64:d8:67:e9:7c:f5:4a:58:c9:60:5e:7f:4b:15:90:f9:
         9a:cb:fa:5a:38:d0:e7:85:76:1b:97:7d:6b:05:90:75:32:cf:
         db:73:76:a5:e6:8b:b5:50:63:92:dd:d7:b7:cc:f1:53:c7:0f:
         80:1a:83:26:eb:37:b4:24:bf:de:45:55:e1:cc:5b:b7:26:d0:
         6e:be:2b:78:a2:0a:f7:88:15:00:05:c7:48:df:bb:8a:12:bb:
         5a:d8:5d:bf:77:02:8e:63:60:f7:b9:c7:e2:b0:2f:91:8d:c0:
         f9:e6:47:19:da:5f:18:b8:65:38:47:72:ac:6d:22:dd:59:69:
         3e:23:de:61:ca:12:87:1c:22:9b:bb:26:b7:01:75:1b:84:c4:
         ad:0c:d0:54:48:1b:76:97:81:f8:26:06:9d:41:2b:51:59:8c:
         87:0d:21:34:fe:4d:bd:55:3b:c6:57:0f:02:91:58:a5:ce:1c:
         41:15:68:1f:fa:5c:36:e2:28:ec:8e:e3:38:6e:18:aa:c7:db:
         51:39:c9:36:93:80:49:17:f2:03:47:62:e7:92:d2:e0:a6:48:
         fb:09:48:c0:4c:e6:18:ae:20:43:09:5e:79:d2:8e:d8:d5:d1:
         4a:30:68:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 11:30:01 2025 by rpki-client