Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a3a2f33322d3332203d3e203532303235.roa
File:                     326130353a646663343a3a2f33322d3332203d3e203532303235.roa (raw, json)
Hash identifier:          IfFTmfyWwVBt6SJCllc/RnCmxYGn8RqqJqytiFVzIlQ=
Subject key identifier:   60:0A:86:6C:EE:99:74:C3:63:48:41:9B:74:3E:2C:0A:79:AD:C4:66
Certificate issuer:       /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial:       5A4417C0F92288424ED1435ABBC4A214DBFBE0FA
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a3a2f33322d3332203d3e203532303235.roa
Signing time:             Thu 03 Jul 2025 15:53:47 +0000
ROA not before:           Thu 03 Jul 2025 15:48:47 +0000
ROA not after:            Thu 02 Jul 2026 15:53:47 +0000
asID:                     52025
IP address blocks:        2a05:dfc4::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 02:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:44:17:c0:f9:22:88:42:4e:d1:43:5a:bb:c4:a2:14:db:fb:e0:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
        Validity
            Not Before: Jul  3 15:48:47 2025 GMT
            Not After : Jul  2 15:53:47 2026 GMT
        Subject: CN=600A866CEE9974C36348419B743E2C0A79ADC466
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b4:c0:69:27:ce:d4:f3:a9:ba:b5:77:86:da:
                    b8:b0:1b:6f:9a:03:56:7c:8e:ce:86:79:22:32:62:
                    ae:54:68:9e:0d:e3:4d:b5:fa:ec:34:af:de:f7:85:
                    a7:5e:31:db:e8:d0:5f:34:9f:da:15:7a:08:f2:4e:
                    92:b4:0d:06:5f:92:a7:87:45:83:85:75:80:f8:9d:
                    e9:ec:ff:d4:d2:b9:a6:ac:f8:66:d5:52:44:1b:30:
                    6c:60:89:21:68:9a:c3:a1:d1:71:7e:46:c5:88:37:
                    ae:37:32:b8:de:25:52:89:9d:0f:2b:6d:30:3e:dc:
                    26:ce:3e:c6:d1:5e:b3:76:22:db:81:a6:42:23:7d:
                    05:c9:53:11:ed:5a:f3:34:bc:c8:03:76:67:f3:6b:
                    b6:c6:68:b4:cf:12:b0:c5:b4:74:1f:e4:a3:c0:e0:
                    ee:c8:c3:b4:fe:08:09:c2:ba:e9:88:0b:e2:88:1f:
                    19:c8:a8:f0:3d:1f:2c:83:c1:49:2e:6d:5c:25:95:
                    fc:5a:9e:75:e6:64:ca:0c:8a:ee:af:7b:93:fe:c0:
                    a1:7f:52:30:a1:f3:9b:f0:d4:90:a0:b5:b5:94:9b:
                    4e:b9:a9:2c:a2:63:78:b7:04:41:5b:d2:73:5f:f2:
                    5f:d3:18:df:33:fe:77:8a:82:b9:52:00:d3:c9:e8:
                    9b:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:0A:86:6C:EE:99:74:C3:63:48:41:9B:74:3E:2C:0A:79:AD:C4:66
            X509v3 Authority Key Identifier:
                keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a3a2f33322d3332203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4::/32

    Signature Algorithm: sha256WithRSAEncryption
         58:de:d2:07:3d:95:ab:24:51:fd:84:6d:70:d4:2d:50:ee:9c:
         36:b1:ec:42:1c:19:13:01:16:3d:c6:5d:a7:a7:ed:ec:a1:f5:
         c4:1d:c3:2d:22:24:eb:e3:fd:e3:f2:3b:3f:4b:34:2b:b5:6d:
         ad:ac:c6:3c:0d:3f:7a:7d:c9:f3:6a:2d:52:d6:a1:83:7e:5d:
         d0:1d:95:51:36:ba:bd:59:50:a4:87:c3:5c:b4:a8:fc:ce:41:
         c8:e0:fc:5f:df:ed:21:bc:95:48:06:57:75:25:5c:db:02:75:
         d8:79:b2:6d:72:af:ef:a6:b2:35:5b:06:73:1a:e6:69:a5:0d:
         e5:5f:a6:64:86:c4:d9:af:81:a6:d4:03:71:0c:96:14:53:b5:
         e0:0b:7d:e4:5f:10:3f:8a:e7:ca:0d:c6:2a:b5:5b:c1:07:e5:
         8e:b5:6a:a5:b1:40:b0:21:98:38:5f:a6:2a:29:01:79:db:5d:
         34:26:5e:ea:c4:ab:78:bc:61:58:5b:6f:70:df:c3:9e:8d:b1:
         27:a1:8f:d5:37:14:8f:4b:e8:34:bc:26:f6:7c:11:08:63:ff:
         d0:ff:fc:f6:02:f4:40:d9:d8:ce:69:d1:5f:c2:08:02:e9:81:
         cf:3b:ac:06:f3:f0:73:46:10:a1:af:c2:0b:9c:f5:09:cc:eb:
         38:6d:f5:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 11:36:01 2025 by rpki-client