Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a38643a3a2f34382d3438203d3e203532303235.roa
File:                     326130353a646663343a38643a3a2f34382d3438203d3e203532303235.roa (raw, json)
Hash identifier:          nBNaoCUY6EB5iDxGzq7AY7JkKT79OQchFXWfhZQQDDA=
Subject key identifier:   39:26:AA:3E:EE:FE:0D:0C:9E:29:75:A6:80:35:5B:B4:98:B7:07:AD
Certificate issuer:       /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial:       3E8E12B16FCB1346C11A769241788EC12AD9548D
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a38643a3a2f34382d3438203d3e203532303235.roa
Signing time:             Thu 03 Jul 2025 15:54:07 +0000
ROA not before:           Thu 03 Jul 2025 15:49:07 +0000
ROA not after:            Thu 02 Jul 2026 15:54:07 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:8d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 02:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:8e:12:b1:6f:cb:13:46:c1:1a:76:92:41:78:8e:c1:2a:d9:54:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
        Validity
            Not Before: Jul  3 15:49:07 2025 GMT
            Not After : Jul  2 15:54:07 2026 GMT
        Subject: CN=3926AA3EEEFE0D0C9E2975A680355BB498B707AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:54:41:20:88:a2:c4:72:9b:22:00:e8:af:10:
                    b2:7c:83:66:78:09:35:e5:7c:c1:27:c7:ad:6e:ca:
                    87:71:2c:02:76:8d:2d:f8:66:a9:02:ee:ff:41:f0:
                    3f:41:59:d6:fd:8e:7d:93:35:ed:a1:d9:8a:36:73:
                    c6:82:4c:d0:9f:01:12:80:6d:60:60:f7:53:ca:62:
                    fc:06:e4:9e:84:43:2a:98:63:a8:45:f6:51:15:63:
                    85:6b:4e:74:85:2a:e6:98:95:93:5e:15:a0:09:ab:
                    af:7f:a7:b8:3c:7b:3c:10:c7:de:98:e3:e7:26:d2:
                    c0:77:7b:21:f9:36:82:5c:3f:ab:73:94:e2:a8:64:
                    18:ff:2b:b1:eb:5b:bc:92:d8:30:cc:6b:36:83:0e:
                    66:a8:c1:7e:ea:db:fe:8b:bb:33:ee:47:b4:c0:33:
                    89:32:1b:bc:d5:97:b5:df:55:e5:cb:f9:34:cf:29:
                    18:62:5f:6d:14:5d:c4:0e:d6:bc:61:ea:b7:1e:eb:
                    b9:53:df:c1:15:81:b5:e2:db:f4:b5:73:d2:ca:fe:
                    00:5f:af:be:43:93:4d:51:b4:e8:d1:25:be:60:30:
                    e5:ad:9b:42:fc:cf:80:f4:9c:c3:32:38:09:47:a9:
                    b9:7b:73:02:9c:f9:fe:f9:ad:0e:b3:fb:39:8f:72:
                    43:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:26:AA:3E:EE:FE:0D:0C:9E:29:75:A6:80:35:5B:B4:98:B7:07:AD
            X509v3 Authority Key Identifier:
                keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a38643a3a2f34382d3438203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:8d::/48

    Signature Algorithm: sha256WithRSAEncryption
         8b:c4:7f:c7:65:7c:bb:d0:de:11:83:26:33:0c:89:22:ad:d1:
         80:6d:a4:2a:cb:68:22:48:bd:d2:5a:c1:09:09:9c:75:50:f0:
         29:7e:ef:20:e5:17:0f:ee:47:4b:90:23:c3:f8:c0:21:e6:d7:
         31:94:6a:60:26:cc:d3:c8:ca:0a:d5:0a:30:da:11:53:db:28:
         0a:25:e5:b8:6a:0f:a2:6d:61:f7:6b:75:f5:2a:af:c4:53:6d:
         40:57:12:c3:9e:23:bf:52:5d:ab:2f:f6:00:e4:e1:87:d3:f2:
         ea:b3:02:d5:02:2e:ba:fe:1c:b7:e4:02:3f:d6:19:a7:77:5c:
         62:11:32:ef:7a:51:4a:b8:59:02:90:ce:28:07:cf:5c:23:2d:
         66:5d:d4:4a:fe:bf:16:4b:9a:20:c8:f5:16:5e:a8:d0:05:8f:
         38:70:0f:1f:75:20:9b:84:9c:ec:f4:a4:bc:ac:3a:ed:5a:8a:
         6c:0a:39:85:18:93:1c:1e:8c:e1:ae:d8:bc:7e:c7:9a:8f:ed:
         2b:e3:ff:56:d4:26:65:a1:54:7d:58:6d:24:03:73:61:92:b1:
         03:47:56:28:da:9d:1c:99:11:30:0c:d0:b6:94:3d:5e:a2:96:
         50:0b:e4:03:83:e6:02:26:f7:7d:f4:22:a9:1d:69:7f:2e:d6:
         52:c7:60:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 11:17:06 2025 by rpki-client