Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a39633a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a39633a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          tMr7x7O1aqaVc5D3XXhBiGJ1OuHKZwQSsXZY4/rJNXo=
Subject key identifier:   E4:24:54:B5:75:C1:7F:B1:5E:55:3F:5C:2C:3F:BE:08:73:8B:F1:8D
Certificate issuer:       /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial:       1AFA02AA89AFB599D7F2FF49C3E24C98D1CE5AF1
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a39633a3a2f34382d313238203d3e203532303235.roa
Signing time:             Thu 03 Jul 2025 15:53:50 +0000
ROA not before:           Thu 03 Jul 2025 15:48:50 +0000
ROA not after:            Thu 02 Jul 2026 15:53:50 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:9c::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 02:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:fa:02:aa:89:af:b5:99:d7:f2:ff:49:c3:e2:4c:98:d1:ce:5a:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
        Validity
            Not Before: Jul  3 15:48:50 2025 GMT
            Not After : Jul  2 15:53:50 2026 GMT
        Subject: CN=E42454B575C17FB15E553F5C2C3FBE08738BF18D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:e3:a2:9a:78:a9:d5:34:49:9b:50:70:ca:54:
                    e0:74:71:c4:fd:bf:63:c1:5b:ab:9d:b9:b4:c9:8d:
                    e8:55:af:b6:c2:b0:ec:21:96:f1:ab:2a:75:be:0e:
                    da:d5:fa:be:02:dd:52:19:2a:30:34:fa:e9:1b:3c:
                    48:5c:db:5d:58:99:1e:56:a4:f4:6b:1b:d6:99:a9:
                    63:67:57:19:3c:20:08:de:e9:a4:c2:07:d7:b3:2c:
                    35:8b:21:5c:13:9f:81:b9:e5:c8:44:6c:3f:97:44:
                    bc:06:9e:9d:24:ea:8b:f3:c7:af:45:33:eb:f4:4f:
                    a3:41:5b:fa:4c:c7:35:00:09:07:38:f1:3e:65:71:
                    8c:23:7f:1b:58:d7:85:84:d5:0e:3d:f8:5f:e2:cf:
                    01:4f:07:ac:94:ca:e8:a9:97:f6:88:9e:40:22:40:
                    9a:06:af:0c:8a:92:8b:0e:89:1a:0f:55:51:81:28:
                    a1:a1:45:fc:c8:2c:ea:3c:9f:3c:a3:94:1c:4a:7f:
                    84:07:ba:6c:3d:ec:b3:66:4d:ba:ad:27:24:a1:c1:
                    da:82:d3:db:34:66:71:71:be:ef:87:13:70:8a:97:
                    6d:de:ec:35:20:79:31:0a:34:ee:99:e3:67:90:d9:
                    7c:49:c7:fd:93:27:60:b7:cb:4d:44:13:ca:0c:57:
                    c2:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:24:54:B5:75:C1:7F:B1:5E:55:3F:5C:2C:3F:BE:08:73:8B:F1:8D
            X509v3 Authority Key Identifier:
                keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a39633a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:9c::/48

    Signature Algorithm: sha256WithRSAEncryption
         79:04:6e:be:d8:f1:b6:57:15:b8:3c:cf:e7:48:f2:72:fb:de:
         18:5e:e6:78:d6:90:7f:cb:3b:a5:2c:d2:7a:43:80:6f:78:cc:
         3e:e6:9b:1b:82:59:df:e2:b1:11:47:fc:9d:ad:2d:d8:60:28:
         ce:e4:5a:c4:98:4d:a0:5b:9f:35:6c:3e:80:b7:82:b2:38:ad:
         8b:87:72:b6:d0:57:c9:3e:6a:fd:9e:88:7d:3a:74:8d:cb:4f:
         bc:4a:09:46:b8:a8:99:3c:37:73:93:a9:68:62:4e:b6:90:f8:
         ef:0f:e4:aa:02:40:ef:43:31:7d:9a:37:92:39:f3:30:01:91:
         8a:f1:e2:57:47:f3:2b:b3:a8:47:a8:f0:a2:d8:ea:33:6c:98:
         d1:11:74:5e:9b:15:15:9a:77:cc:c0:df:f3:dc:cd:1a:e8:d0:
         0c:d9:50:5b:ae:93:b0:33:25:dd:63:04:36:f0:27:71:1a:35:
         65:4e:13:87:fa:d3:7e:24:c3:93:ff:8c:bb:61:74:d5:69:6b:
         93:ba:ff:83:c6:47:60:7b:a2:e9:c7:ab:c5:62:28:2f:26:7a:
         99:06:42:81:a6:34:89:33:0c:02:1c:d5:38:ac:81:d7:2c:f6:
         98:a2:f7:19:78:f3:b6:71:e6:e4:2d:00:45:38:46:41:5e:08:
         43:86:c5:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 11:39:40 2025 by rpki-client