Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a383136663a3a2f34382d3438203d3e203532303235.roa
File:                     326130353a646663343a383136663a3a2f34382d3438203d3e203532303235.roa (raw, json)
Hash identifier:          U/IEuauxIhtYF0odhhGpIH1sS6L8jIqGWaCNfJ9EJfY=
Subject key identifier:   65:35:56:63:49:BA:17:AB:80:17:AF:0D:81:C9:67:2C:2D:15:BE:9A
Certificate issuer:       /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial:       533C11A8A7A2071CE4856E8464AE73220FC2A4E0
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a383136663a3a2f34382d3438203d3e203532303235.roa
Signing time:             Thu 03 Jul 2025 15:53:56 +0000
ROA not before:           Thu 03 Jul 2025 15:48:56 +0000
ROA not after:            Thu 02 Jul 2026 15:53:56 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:816f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 02:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:3c:11:a8:a7:a2:07:1c:e4:85:6e:84:64:ae:73:22:0f:c2:a4:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
        Validity
            Not Before: Jul  3 15:48:56 2025 GMT
            Not After : Jul  2 15:53:56 2026 GMT
        Subject: CN=6535566349BA17AB8017AF0D81C9672C2D15BE9A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ef:f6:61:0c:5d:dd:be:a4:2d:90:7f:8a:ef:
                    8e:65:71:f4:eb:91:f7:cd:9d:dd:69:93:44:9d:68:
                    2c:3d:40:54:b9:8f:1f:c2:de:ae:50:17:11:4e:36:
                    13:68:83:55:64:7a:95:76:d8:d1:76:ed:e4:29:fd:
                    70:01:80:f4:e1:7e:33:ab:33:5a:b7:49:d0:43:01:
                    60:24:e0:72:88:65:ed:5a:94:f6:06:51:5b:af:97:
                    03:ec:ec:54:9c:e3:40:b9:3b:fc:67:0e:f5:ce:12:
                    ab:03:2c:7c:d7:ab:9a:36:3f:71:36:3e:ae:13:ed:
                    b4:0c:0e:b5:db:7d:dc:b8:0f:60:07:59:bf:5f:8e:
                    d6:a6:0a:1a:1e:99:fc:03:db:75:b6:3b:d2:a3:f2:
                    c5:d4:32:a2:e0:a0:08:7e:fb:d1:4a:36:1f:b5:f2:
                    f1:6f:16:0d:0a:f4:a7:c9:eb:f2:8e:09:ec:7e:c7:
                    a8:73:06:e9:e3:7f:5b:4b:67:e7:e5:ae:9e:f4:ec:
                    67:17:c7:7f:49:78:57:ea:83:8d:5d:75:ea:7d:ec:
                    82:8c:54:a5:09:98:fc:b6:34:d8:29:42:19:04:2c:
                    89:7a:ab:5c:2d:dd:46:0f:06:11:4c:45:79:7b:02:
                    5f:c6:45:08:e7:36:f8:01:b0:87:e1:1d:b2:a6:d1:
                    a9:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:35:56:63:49:BA:17:AB:80:17:AF:0D:81:C9:67:2C:2D:15:BE:9A
            X509v3 Authority Key Identifier:
                keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a383136663a3a2f34382d3438203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:816f::/48

    Signature Algorithm: sha256WithRSAEncryption
         8d:5d:bd:fa:de:8c:cb:c0:ab:43:88:c4:6b:1d:5b:d7:98:38:
         12:5a:f8:f9:ec:4a:e2:8e:5d:02:e7:86:9c:dd:f6:b2:c0:89:
         8f:58:f8:ee:17:19:7b:87:37:cc:63:ef:2e:3f:ea:dd:d6:0a:
         7c:3e:0f:39:e0:21:aa:8b:9d:1d:c2:4d:e5:6c:16:60:44:f8:
         d4:56:fc:3c:18:de:03:97:b1:84:f0:8e:67:83:d8:5f:c5:71:
         7d:a0:37:99:ca:b6:07:ff:88:21:be:74:a5:22:31:b3:9b:f1:
         a4:0a:af:91:f5:04:1b:d6:ed:77:06:66:de:4e:e9:d9:cf:b5:
         ad:68:7a:6b:28:e0:d1:2d:84:da:79:93:d1:e2:45:44:7f:e9:
         ee:f5:33:80:1f:df:5f:61:26:0a:94:19:59:82:2f:18:12:9a:
         04:2c:f9:17:58:71:05:eb:b6:f3:b2:ce:10:f7:26:a3:67:b9:
         1f:fb:80:18:87:78:2e:d0:b5:a0:95:8f:42:f9:39:67:2f:8d:
         f2:0b:36:c2:d1:a5:67:5d:74:da:41:10:ea:b3:3b:2b:43:29:
         c9:58:7e:f9:85:a7:8f:e4:40:d9:ef:67:df:eb:4e:2a:e6:7d:
         91:13:dc:18:67:98:d2:f5:87:88:e9:18:58:c0:4d:85:7b:c8:
         ca:66:0e:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 11:29:27 2025 by rpki-client