Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a6132323a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a6132323a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          a1b8gkJ7T0El7WPzAacIz1ajr3asMP92kLeRWxs4NyQ=
Subject key identifier:   E2:98:D3:BE:6F:D8:6B:F7:15:03:D7:DC:2D:D8:EC:6E:AF:23:2B:5C
Certificate issuer:       /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial:       185AD7B066998DDD7AC6A3BF391B51CF182C48E0
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a6132323a3a2f34382d313238203d3e203532303235.roa
Signing time:             Thu 03 Jul 2025 15:54:06 +0000
ROA not before:           Thu 03 Jul 2025 15:49:06 +0000
ROA not after:            Thu 02 Jul 2026 15:54:06 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:a22::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 02:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:5a:d7:b0:66:99:8d:dd:7a:c6:a3:bf:39:1b:51:cf:18:2c:48:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
        Validity
            Not Before: Jul  3 15:49:06 2025 GMT
            Not After : Jul  2 15:54:06 2026 GMT
        Subject: CN=E298D3BE6FD86BF71503D7DC2DD8EC6EAF232B5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:74:b0:a6:29:51:b6:c8:68:0c:4c:88:c3:ca:
                    04:21:93:26:bd:49:16:dd:7b:a5:e6:53:b3:e5:1c:
                    a9:7b:7f:93:a1:22:1f:9c:bb:78:73:09:cb:23:77:
                    83:04:86:20:39:0f:3e:28:2d:d6:cc:54:24:19:ab:
                    77:98:90:8d:e8:66:06:46:9c:2f:a5:89:2c:1f:66:
                    60:59:ea:cc:ca:90:ff:1c:03:ed:7d:25:6f:3d:99:
                    df:bf:fd:27:2e:8b:73:2c:65:99:56:a2:d9:16:b2:
                    aa:be:67:e3:15:cf:f4:49:a2:47:5a:d3:c7:28:af:
                    a0:30:d1:4d:94:93:0e:b4:9f:e3:06:ab:1d:7d:ef:
                    d9:89:56:7c:f9:f0:10:3a:e9:70:6c:11:79:4d:24:
                    e9:7f:10:76:c2:a9:18:3a:e5:c6:8a:9f:2c:3c:28:
                    f7:fe:91:b9:24:0e:7f:60:2a:72:ab:33:df:8f:fb:
                    61:a9:8b:11:a4:cb:7d:a6:4b:df:e3:ba:86:7c:98:
                    0f:f0:a5:68:48:33:7b:37:c1:2f:50:79:7b:7e:ed:
                    25:5f:78:5a:27:d3:2a:07:df:16:38:27:f7:95:ec:
                    d2:23:3a:29:39:cd:61:d9:87:13:a2:f3:fe:0b:e8:
                    ce:01:21:87:fb:93:44:ec:fc:42:41:14:ed:3b:df:
                    ff:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:98:D3:BE:6F:D8:6B:F7:15:03:D7:DC:2D:D8:EC:6E:AF:23:2B:5C
            X509v3 Authority Key Identifier:
                keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a6132323a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:a22::/48

    Signature Algorithm: sha256WithRSAEncryption
         1d:2a:7f:d0:94:af:1b:fa:ef:d0:dd:bb:4b:ca:74:72:6a:ee:
         72:eb:19:c4:67:5d:8c:af:bc:57:7c:11:57:ae:ad:c0:f4:d4:
         fe:f1:4e:06:c8:4e:56:53:5f:6a:87:3e:19:bb:7c:4d:b7:aa:
         f4:4c:e5:a2:b1:4f:a2:6d:ad:7f:5d:a0:8f:f0:7f:c8:ef:c4:
         2a:42:98:a6:6b:b4:c5:ce:bd:d6:11:e8:eb:81:90:ab:7b:1d:
         5c:81:c5:b6:5d:96:b3:2d:bd:3d:bc:9b:ff:9d:af:ec:5c:7e:
         fa:3a:01:4c:78:8e:c7:78:79:51:8e:d9:bd:cd:37:6c:b4:c6:
         31:b3:77:90:8b:0a:1f:9d:94:20:a9:5f:90:c1:33:21:bc:44:
         32:7c:00:80:39:c9:f3:bf:3a:fd:e7:4e:04:33:01:c9:bd:61:
         b2:8c:7a:07:b7:aa:79:01:64:fe:63:aa:08:22:0d:f6:01:a3:
         c9:7c:96:84:f2:e2:f8:5a:7f:92:ee:44:85:8c:9f:34:15:72:
         25:e9:f0:b3:4b:05:65:ae:f5:a5:73:d4:cb:e7:a5:fd:68:72:
         93:8f:61:d7:d1:35:29:98:7b:ce:95:ac:a5:2a:3a:08:f3:95:
         52:7c:52:ff:48:7e:15:9e:30:46:70:28:a5:6c:14:7d:73:34:
         e2:a1:94:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 11:44:50 2025 by rpki-client