Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a3831363a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a3831363a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          lDtBidQOkYdlQqFBCJSNG/lqchnru/Xs0A//Vc4xwmQ=
Subject key identifier:   DE:E4:1D:E6:78:E3:11:CE:59:B5:C2:FA:BF:24:C6:CA:95:8D:BD:85
Certificate issuer:       /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial:       7EDB2A8DC573C8A5747AF5D92F00AD02FB838F07
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a3831363a3a2f34382d313238203d3e203532303235.roa
Signing time:             Thu 03 Jul 2025 15:53:46 +0000
ROA not before:           Thu 03 Jul 2025 15:48:46 +0000
ROA not after:            Thu 02 Jul 2026 15:53:46 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:816::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 02:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:db:2a:8d:c5:73:c8:a5:74:7a:f5:d9:2f:00:ad:02:fb:83:8f:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
        Validity
            Not Before: Jul  3 15:48:46 2025 GMT
            Not After : Jul  2 15:53:46 2026 GMT
        Subject: CN=DEE41DE678E311CE59B5C2FABF24C6CA958DBD85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:94:06:45:5b:df:d4:76:02:e6:d1:9f:f7:c7:
                    36:81:8e:49:09:e1:65:fd:bd:fa:e9:5d:0d:87:58:
                    a3:84:71:a6:cc:dc:cc:9d:25:1f:6b:e2:50:f1:1e:
                    f8:01:1b:a8:6e:be:b8:86:e6:bc:ad:d7:d6:39:55:
                    6e:2f:12:e7:09:06:21:36:25:a0:60:fc:ec:07:02:
                    1f:ef:ab:7e:97:5e:80:e7:88:68:a9:0c:6e:c9:6e:
                    8f:44:81:b0:e7:dc:bd:96:6e:d1:80:a7:6f:d6:c7:
                    73:6a:59:f9:3f:39:ef:90:8d:33:f9:a1:6a:2e:3f:
                    af:27:32:7a:46:74:0a:92:ed:2c:9b:a3:5b:04:b3:
                    b1:ba:1b:14:dc:18:a3:02:68:c5:da:fe:1f:d0:83:
                    82:d0:56:d5:2b:c1:6e:22:94:3e:f1:54:c9:f5:21:
                    d9:78:ec:b7:3d:7f:9b:66:bb:42:e9:fd:25:23:5a:
                    32:a0:39:dc:82:03:9a:a8:e1:8b:64:c6:b8:4a:70:
                    0d:c2:45:c7:c1:87:dc:bc:e5:c3:46:e6:01:09:76:
                    96:c9:0f:1a:b6:5c:47:fb:a4:52:63:c1:22:3d:9c:
                    d5:18:5f:16:e9:11:be:e6:47:dd:5b:c5:2e:98:1e:
                    bd:bb:23:af:e1:39:32:5a:5f:74:33:15:3c:8d:67:
                    52:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:E4:1D:E6:78:E3:11:CE:59:B5:C2:FA:BF:24:C6:CA:95:8D:BD:85
            X509v3 Authority Key Identifier:
                keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a3831363a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:816::/48

    Signature Algorithm: sha256WithRSAEncryption
         71:08:db:d0:28:98:c4:72:7b:3b:97:33:26:23:05:67:70:24:
         d0:df:63:ea:d5:b7:9f:d3:ed:15:5b:c7:a1:cd:75:73:02:c4:
         56:22:2b:91:22:bb:96:37:bf:a6:0b:d6:dc:67:a7:e7:96:fd:
         0c:27:d4:db:ef:2b:2b:2a:25:83:bf:8e:8a:cf:99:a1:42:47:
         0d:50:9f:2e:73:7a:9f:ba:39:75:d3:ab:d2:8c:4e:59:9c:d3:
         6a:4b:0e:25:b2:c8:1e:5c:f5:0d:4d:68:43:0a:e0:d5:85:cf:
         d5:62:6c:f4:4b:d0:83:d5:6d:28:56:55:43:f9:5e:d5:0e:d2:
         42:f3:5a:c4:14:f9:ec:19:b2:50:54:49:59:ac:08:a6:66:e4:
         ad:7f:76:5c:64:a8:7b:ca:5d:ac:46:6a:35:fc:f7:00:64:8f:
         b8:f8:03:7c:c9:bc:da:58:54:c1:24:f9:18:38:ba:2c:6f:49:
         33:cd:74:c2:9f:5f:53:53:46:11:6e:ee:7f:c1:0a:5d:75:f2:
         ab:3b:37:3a:5e:37:46:de:37:3f:b7:05:3a:81:c9:80:32:9d:
         c0:f9:b9:5a:64:35:c3:15:c9:11:e8:a8:05:81:e4:16:64:0c:
         d2:cc:5c:69:82:30:48:5f:07:ed:d4:55:f0:12:c4:ab:21:3c:
         2a:6c:ad:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 11:28:41 2025 by rpki-client