Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a3a2f34382d3438203d3e203532303235.roa
File:                     326130353a646663343a3a2f34382d3438203d3e203532303235.roa (raw, json)
Hash identifier:          9G2bchtkgdbQuBvDl4FxglLofRKCtbpl7WMb5NTS6ug=
Subject key identifier:   AA:EB:59:C5:A1:22:BD:D0:14:75:6F:91:50:C7:08:C1:4E:34:0F:3F
Certificate issuer:       /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial:       4F3F211DEF2732FAC3F7306F23092357D6B78EE6
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a3a2f34382d3438203d3e203532303235.roa
Signing time:             Thu 03 Jul 2025 15:53:46 +0000
ROA not before:           Thu 03 Jul 2025 15:48:46 +0000
ROA not after:            Thu 02 Jul 2026 15:53:46 +0000
asID:                     52025
IP address blocks:        2a05:dfc4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 02:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:3f:21:1d:ef:27:32:fa:c3:f7:30:6f:23:09:23:57:d6:b7:8e:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
        Validity
            Not Before: Jul  3 15:48:46 2025 GMT
            Not After : Jul  2 15:53:46 2026 GMT
        Subject: CN=AAEB59C5A122BDD014756F9150C708C14E340F3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c6:b2:fd:1a:5a:63:61:33:de:3e:83:88:09:
                    9b:e5:25:2c:b4:fe:73:f2:47:08:c6:66:70:64:f0:
                    7f:86:22:2a:c6:6e:87:69:3c:1b:31:7e:aa:31:84:
                    ea:e4:2c:fb:ca:2b:0f:57:80:b7:67:da:64:a6:2d:
                    b4:e4:2a:51:5a:94:47:28:73:1c:5d:a9:14:90:75:
                    ae:13:4c:b0:69:5a:ea:e9:7a:c6:84:86:2a:20:0e:
                    24:09:fb:4a:83:6f:bd:9e:df:a2:53:5e:35:15:cb:
                    6d:48:47:cd:19:85:3f:a1:ae:8d:b3:fa:c5:7b:a7:
                    9e:d9:ae:2f:1d:72:83:eb:63:ee:fe:73:db:c6:69:
                    7a:bb:a0:56:86:0a:be:36:a1:6b:fa:3e:aa:1a:58:
                    87:2d:94:14:bb:76:36:6a:63:26:7b:b7:37:f5:0d:
                    1d:5a:4a:c8:4b:66:30:95:b4:9c:47:d5:61:d4:a8:
                    bd:70:ca:44:bd:c5:fc:a0:de:f7:93:8c:df:c2:e4:
                    5b:3d:a5:1d:c0:43:23:9f:aa:06:f0:91:9e:c3:b3:
                    cc:9b:07:76:11:16:b2:d6:c6:0a:46:fc:23:17:00:
                    fc:56:9b:f9:ca:d9:7c:40:84:74:34:27:ae:20:19:
                    33:73:2e:ba:54:a7:b3:e2:8b:9f:93:77:01:9c:45:
                    70:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:EB:59:C5:A1:22:BD:D0:14:75:6F:91:50:C7:08:C1:4E:34:0F:3F
            X509v3 Authority Key Identifier:
                keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a3a2f34382d3438203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4::/48

    Signature Algorithm: sha256WithRSAEncryption
         79:05:1f:06:f6:3b:c0:39:78:39:7a:38:50:b4:71:af:dc:08:
         32:57:25:b3:cd:d8:5f:7d:e2:a5:5f:fa:8a:c0:86:57:36:1b:
         9d:c5:ae:64:01:21:58:43:94:ee:f5:0c:39:02:03:2f:72:ee:
         f6:88:24:e4:a9:5a:43:bd:b9:dd:64:58:72:d5:27:be:52:05:
         81:8a:9d:8f:0a:e6:7f:9e:f4:8a:80:ab:6e:e9:b5:a1:e5:21:
         4c:64:b6:3b:60:21:d7:73:17:68:33:e0:4d:38:17:5d:56:bb:
         4f:2f:25:08:9d:47:fe:eb:c7:8b:ba:6c:79:f1:cb:2d:b1:f0:
         07:48:4b:ad:71:86:ab:36:08:3d:f3:62:04:64:da:64:9f:18:
         38:27:15:aa:09:20:6d:bf:b3:42:5a:0e:25:d4:7d:80:b1:08:
         95:55:78:d6:66:ac:81:e6:1c:e7:04:35:1e:e5:7e:1c:03:97:
         1b:bd:3c:47:43:88:f2:93:be:03:ec:2e:8c:25:7a:b7:17:b8:
         98:85:d8:dd:ca:1f:dc:a6:0f:ae:05:ae:ba:f0:f9:06:dd:55:
         4c:1b:46:02:2c:d1:5d:85:cb:27:f0:63:1b:0c:74:d3:51:44:
         4b:7c:4c:bc:66:cf:27:e5:ba:68:2e:3f:89:40:b7:9e:82:7d:
         d3:77:d9:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 11:28:41 2025 by rpki-client