Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a61653a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a61653a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          /KnRh/1teeaPKriqnKgHbiNAXhh+F4x2cvzg5ZICWjk=
Subject key identifier:   88:91:FE:19:26:62:56:4C:C4:93:01:EB:5F:64:5D:63:FC:6B:42:88
Certificate issuer:       /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial:       3E2CF3AA3A179EC027806A3FB45C56B86EED01C7
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a61653a3a2f34382d313238203d3e203532303235.roa
Signing time:             Thu 03 Jul 2025 15:53:46 +0000
ROA not before:           Thu 03 Jul 2025 15:48:46 +0000
ROA not after:            Thu 02 Jul 2026 15:53:46 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:ae::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 02:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:2c:f3:aa:3a:17:9e:c0:27:80:6a:3f:b4:5c:56:b8:6e:ed:01:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
        Validity
            Not Before: Jul  3 15:48:46 2025 GMT
            Not After : Jul  2 15:53:46 2026 GMT
        Subject: CN=8891FE192662564CC49301EB5F645D63FC6B4288
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:5e:3d:76:a5:29:5a:6a:7a:b2:23:e3:4f:5a:
                    40:4e:00:64:7d:f5:61:5b:33:dc:27:1d:e1:f7:a5:
                    31:79:c5:0e:67:f7:41:55:ce:f3:51:de:40:c3:a6:
                    4e:d9:b3:1f:23:17:fe:8a:2b:b3:97:ef:27:42:8b:
                    1a:a5:3e:77:76:eb:dd:10:b7:1f:bf:74:64:2f:6f:
                    5d:4f:6e:63:a6:4f:d0:5b:26:85:2f:bd:c9:2c:1c:
                    af:7c:d2:99:e2:7f:2b:34:47:5b:e6:98:32:80:1d:
                    50:22:03:07:3a:ae:d6:4f:df:9d:01:28:ce:a0:16:
                    c8:f0:5f:56:8c:b1:8d:f9:d0:1c:72:6a:97:a5:34:
                    9c:78:ce:b2:33:8e:13:c1:e0:21:12:39:c2:57:56:
                    5c:be:fd:a2:a7:03:f5:bd:40:d0:8e:6b:7d:20:89:
                    80:21:94:06:a1:89:f3:59:9b:c0:1a:a7:ad:6a:d5:
                    96:7b:78:a2:c5:ed:3c:84:62:89:de:c4:78:19:ad:
                    d4:0f:e5:cc:9f:28:7c:27:ac:61:de:65:86:a2:80:
                    dd:72:b6:94:a9:c4:17:83:1c:28:b7:58:b6:9e:22:
                    d2:e6:a5:c4:9d:98:f1:7e:47:3a:92:b5:79:b4:5c:
                    35:46:0f:85:7a:38:eb:47:41:12:97:26:5b:64:2f:
                    ec:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:91:FE:19:26:62:56:4C:C4:93:01:EB:5F:64:5D:63:FC:6B:42:88
            X509v3 Authority Key Identifier:
                keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a61653a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:ae::/48

    Signature Algorithm: sha256WithRSAEncryption
         7a:25:38:36:f8:7e:a5:21:d4:cb:cb:3d:87:62:11:92:ef:85:
         3b:89:9f:ed:40:3b:80:7f:35:41:a5:d4:9b:4e:90:54:0c:9d:
         4a:cd:e2:3a:e1:80:50:6d:1f:4f:00:0c:47:59:fb:58:80:34:
         34:62:5c:97:9b:24:e2:b7:32:f3:0a:52:97:be:fc:ee:d2:db:
         92:92:a8:e4:e5:bd:fe:04:c1:59:2a:ea:5f:79:c5:63:0d:78:
         00:55:45:2b:85:78:db:43:14:fc:86:2d:47:df:c1:2a:64:44:
         6f:d2:ff:85:60:d8:03:55:18:83:d2:1b:c7:35:90:3e:b4:1d:
         20:1a:08:75:eb:db:4e:a7:d3:93:90:85:cf:b7:f2:f4:84:ef:
         a8:e9:3c:bc:8e:28:7d:d7:a4:67:a2:99:0b:6d:98:51:cf:8f:
         9b:d8:63:6f:6e:29:11:0b:a2:88:16:9f:1c:f9:7e:62:49:20:
         86:75:56:7b:21:f7:a2:79:0a:78:43:0d:7a:c6:d5:d1:c0:84:
         f3:d6:65:18:89:d7:96:2b:ea:4e:8d:d7:0f:b7:d6:05:75:99:
         4a:e4:c0:d2:2a:36:29:47:8e:f7:6d:86:02:45:bc:51:98:5b:
         7d:32:ea:3e:6f:6d:a4:06:c5:bc:bf:3b:0b:7a:2a:4e:15:19:
         b6:22:0e:0b
-----BEGIN CERTIFICATE-----
MIIFHzCCBAegAwIBAgIUPizzqjoXnsAngGo/tFxWuG7tAccwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjYzODZGQUJFQTM5MjEwQjY2NUE2QTU1QUU1REE2NkJF
Njc0MTU5NzAeFw0yNTA3MDMxNTQ4NDZaFw0yNjA3MDIxNTUzNDZaMDMxMTAvBgNV
BAMTKDg4OTFGRTE5MjY2MjU2NENDNDkzMDFFQjVGNjQ1RDYzRkM2QjQyODgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXXj12pSlaanqyI+NPWkBOAGR9
9WFbM9wnHeH3pTF5xQ5n90FVzvNR3kDDpk7Zsx8jF/6KK7OX7ydCixqlPnd2690Q
tx+/dGQvb11PbmOmT9BbJoUvvcksHK980pnifys0R1vmmDKAHVAiAwc6rtZP350B
KM6gFsjwX1aMsY350BxyapelNJx4zrIzjhPB4CESOcJXVly+/aKnA/W9QNCOa30g
iYAhlAahifNZm8Aap61q1ZZ7eKLF7TyEYonexHgZrdQP5cyfKHwnrGHeZYaigN1y
tpSpxBeDHCi3WLaeItLmpcSdmPF+RzqStXm0XDVGD4V6OOtHQRKXJltkL+xrAgMB
AAGjggIpMIICJTAdBgNVHQ4EFgQUiJH+GSZiVkzEkwHrX2RdY/xrQogwHwYDVR0j
BBgwFoAU9jhvq+o5IQtmWmpVrl2ma+Z0FZcwDgYDVR0PAQH/BAQDAgeAMG4GA1Ud
HwRnMGUwY6BhoF+GXXJzeW5jOi8vcnBraS0wMS5wZHhuZXQudWsvcmVwby9wYXJh
ZG94bmV0d29ya3MvOC9GNjM4NkZBQkVBMzkyMTBCNjY1QTZBNTVBRTVEQTY2QkU2
NzQxNTk3LmNybDCBkwYIKwYBBQUHAQEEgYYwgYMwgYAGCCsGAQUFBzAChnRyc3lu
YzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYz
ZTAxODU3NTVjOTFiZTNmOWQvNy9GNjM4NkZBQkVBMzkyMTBCNjY1QTZBNTVBRTVE
QTY2QkU2NzQxNTk3LmNlcjCBjgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4Zx
cnN5bmM6Ly9ycGtpLTAxLnBkeG5ldC51ay9yZXBvL3BhcmFkb3huZXR3b3Jrcy84
LzMyNjEzMDM1M2E2NDY2NjMzNDNhNjE2NTNhM2EyZjM0MzgyZDMxMzIzODIwM2Qz
ZTIwMzUzMjMwMzIzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggr
BgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF38QArjANBgkqhkiG9w0BAQsFAAOC
AQEAeiU4Nvh+pSHUy8s9h2IRku+FO4mf7UA7gH81QaXUm06QVAydSs3iOuGAUG0f
TwAMR1n7WIA0NGJcl5sk4rcy8wpSl7787tLbkpKo5OW9/gTBWSrqX3nFYw14AFVF
K4V420MU/IYtR9/BKmREb9L/hWDYA1UYg9IbxzWQPrQdIBoIdevbTqfTk5CFz7fy
9ITvqOk8vI4ofdekZ6KZC22YUc+Pm9hjb24pEQuiiBafHPl+YkkghnVWeyH3onkK
eEMNesbV0cCE89ZlGInXlivqTo3XD7fWBXWZSuTA0io2KUeO922GAkW8UZhbfTLq
Pm9tpAbFvL87C3oqThUZtiIOCw==
-----END CERTIFICATE-----
Generated at Sat Jul 5 12:00:11 2025 by rpki-client