Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a3962663a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a3962663a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          7pkCL5+/0UpTqhLGKzVbHsscrj2Ko2oDqdq6CjlKEk8=
Subject key identifier:   B8:FA:A2:DA:8B:78:8A:B0:43:C4:15:0A:A3:04:D4:23:20:10:FA:23
Certificate issuer:       /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial:       75FBC92C8EF18C242DAEF5A748B1C3E916B0B9F6
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a3962663a3a2f34382d313238203d3e203532303235.roa
Signing time:             Thu 03 Jul 2025 15:53:46 +0000
ROA not before:           Thu 03 Jul 2025 15:48:46 +0000
ROA not after:            Thu 02 Jul 2026 15:53:46 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:9bf::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 02:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:fb:c9:2c:8e:f1:8c:24:2d:ae:f5:a7:48:b1:c3:e9:16:b0:b9:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
        Validity
            Not Before: Jul  3 15:48:46 2025 GMT
            Not After : Jul  2 15:53:46 2026 GMT
        Subject: CN=B8FAA2DA8B788AB043C4150AA304D4232010FA23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:6d:d9:c0:44:41:c2:1a:73:b8:aa:16:5d:50:
                    5b:0a:07:b1:93:4f:5e:af:f5:77:85:eb:18:49:c1:
                    bf:10:71:aa:4b:95:73:05:12:c5:1b:0f:f5:71:15:
                    58:81:4f:f7:51:60:2a:96:4d:9f:d2:29:24:10:8c:
                    87:f5:d3:0f:f9:39:06:13:de:d8:42:54:4a:92:62:
                    5f:a4:e9:1b:29:0d:ef:8c:22:53:8f:2b:29:91:7c:
                    ef:b9:ed:46:7b:75:ca:3f:99:d0:18:38:4e:18:e9:
                    ea:5e:cf:55:fd:9c:b2:57:45:7a:af:61:26:67:3f:
                    a0:12:9a:a8:13:6d:83:d8:1e:1f:04:c3:a5:3b:8c:
                    4b:a0:c9:53:a9:18:4c:bb:51:e4:f9:fb:93:4d:08:
                    04:47:4e:c8:76:5c:20:55:e6:c3:24:9d:f3:4e:5f:
                    2d:d2:6d:ef:91:24:a0:e5:2c:c4:66:b4:08:10:db:
                    1c:d8:95:b7:e3:80:11:cb:66:04:1a:8d:c5:97:96:
                    92:6d:28:1b:c9:49:44:2f:a1:79:43:96:7c:06:b9:
                    6c:26:69:4a:20:98:09:88:a8:e6:38:f5:29:db:0b:
                    b2:81:1e:7c:45:ea:27:a6:07:00:c5:d0:8a:fd:75:
                    2c:1c:11:c7:8a:dd:0d:ed:72:00:5c:10:f1:5d:2e:
                    12:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:FA:A2:DA:8B:78:8A:B0:43:C4:15:0A:A3:04:D4:23:20:10:FA:23
            X509v3 Authority Key Identifier:
                keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a3962663a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:9bf::/48

    Signature Algorithm: sha256WithRSAEncryption
         48:de:49:c5:da:2c:e1:c9:e1:99:ff:60:e2:b1:69:1b:67:a0:
         b3:7d:a7:d7:2d:8d:a4:76:68:f5:4b:af:76:7c:74:d8:5d:d0:
         27:8f:78:e3:33:7d:45:92:7e:6d:dc:3a:8b:c9:27:70:fb:ae:
         65:5c:5e:00:43:58:e5:1f:4a:ed:cc:55:56:37:15:e9:12:77:
         77:43:b4:f1:bc:c4:00:9c:b9:6e:cd:3a:61:bc:93:25:8b:bd:
         92:95:a3:2e:63:e1:7e:f6:3c:54:16:64:52:2e:af:ed:7e:0c:
         d5:57:11:e3:98:11:ed:85:cc:a9:8d:c9:a5:cc:88:93:31:18:
         03:d3:a9:db:2f:44:f2:a8:a1:da:3a:b1:bd:ba:ba:7d:f2:5e:
         99:c4:ed:cc:96:85:b3:c2:21:ad:43:ee:18:1f:37:87:3c:7e:
         c5:10:ec:0d:60:51:ea:ac:fa:93:8c:f0:61:8a:ad:2e:4a:db:
         3f:f3:96:79:99:0a:3f:69:1b:d7:71:1d:01:1b:9c:23:2e:c4:
         de:f1:77:63:79:40:6f:25:28:0e:08:88:0a:1b:01:94:d7:a0:
         a8:78:93:53:72:69:6f:c3:af:df:11:10:7a:54:30:1c:67:61:
         b3:b2:56:15:d0:c5:01:0c:ad:21:78:3b:f9:7f:d2:0f:2a:f2:
         c1:b6:63:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 11:49:21 2025 by rpki-client