Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a62643a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a62643a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          ou2j/6xdPbKRG7Pi4cdAYqNdPmHPiUxeQI2F//wNGSw=
Subject key identifier:   6D:73:3D:A8:BF:3E:14:92:98:E4:12:04:EC:A1:97:56:94:62:AD:44
Certificate issuer:       /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial:       7BAAD1540B81073D26059AE65D9B328CA87F240A
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a62643a3a2f34382d313238203d3e203532303235.roa
Signing time:             Thu 03 Jul 2025 15:53:52 +0000
ROA not before:           Thu 03 Jul 2025 15:48:52 +0000
ROA not after:            Thu 02 Jul 2026 15:53:52 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:bd::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 02:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:aa:d1:54:0b:81:07:3d:26:05:9a:e6:5d:9b:32:8c:a8:7f:24:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
        Validity
            Not Before: Jul  3 15:48:52 2025 GMT
            Not After : Jul  2 15:53:52 2026 GMT
        Subject: CN=6D733DA8BF3E149298E41204ECA197569462AD44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:b1:88:8b:84:91:92:5f:f8:df:dc:c7:2e:e2:
                    3b:78:d7:bb:9d:97:1a:2d:4f:96:e9:78:96:ef:bd:
                    ab:5c:67:42:80:9a:1f:94:5f:b1:b5:26:e6:1b:c7:
                    3f:29:b6:ce:43:1d:b5:e5:ed:c5:e4:3a:a9:19:40:
                    92:ca:54:d4:c5:8b:5d:e9:63:9b:c1:db:f3:31:e7:
                    48:5f:34:ab:41:b8:49:8f:2c:d0:68:cb:2f:52:a0:
                    42:73:6c:92:46:b8:25:15:ca:9a:91:6f:eb:45:10:
                    ca:a7:ce:b7:96:42:6e:21:48:6c:06:24:08:89:67:
                    0c:e9:56:1b:0a:da:44:0d:8e:92:cb:15:7d:87:1a:
                    ea:4b:9b:32:7c:63:49:59:39:b3:ce:1c:fb:60:b1:
                    0b:cc:db:72:d1:c4:ff:69:07:3b:b3:d7:23:b4:4a:
                    db:77:f5:7d:09:f1:3a:6e:15:93:f3:34:9c:89:c4:
                    1f:a8:bd:fe:ea:3b:3e:70:f3:ec:8f:9c:55:c5:31:
                    7d:ea:a4:7a:70:b5:03:57:18:0f:63:00:ff:e6:ae:
                    e1:79:6a:d8:c6:f5:e8:5c:13:9a:4d:3f:15:2b:d4:
                    4d:a9:9a:05:52:cf:b5:26:26:94:65:3a:16:87:1c:
                    04:94:da:3b:75:9d:2e:9e:fa:1a:30:86:a8:97:0f:
                    75:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:73:3D:A8:BF:3E:14:92:98:E4:12:04:EC:A1:97:56:94:62:AD:44
            X509v3 Authority Key Identifier:
                keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a62643a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:bd::/48

    Signature Algorithm: sha256WithRSAEncryption
         64:ca:d1:b9:34:32:e0:08:b8:71:c6:86:d8:9c:53:ac:01:32:
         2d:c4:f3:25:47:38:cf:32:51:bd:94:c9:0f:9b:5a:c2:50:2f:
         9a:69:9f:7a:16:18:0f:4f:c2:42:31:5c:07:8d:06:c5:51:8f:
         09:29:3c:61:19:b1:17:11:a9:57:4d:dd:19:58:eb:3e:f0:68:
         43:c9:ba:28:45:26:34:8d:d7:c9:6c:eb:95:bd:e1:f6:54:cd:
         98:23:0d:93:99:29:a5:7d:86:86:3e:85:57:19:38:53:43:a5:
         2b:15:fc:06:84:bd:58:d3:95:b1:92:ea:31:bc:2c:88:7a:15:
         fc:60:5f:fe:6c:03:75:0c:55:c2:a6:3b:36:be:fe:3d:16:e8:
         3c:6d:2c:b5:9a:29:26:cc:d7:a3:ea:53:c7:ad:c9:63:1a:2e:
         28:b7:7c:e5:cc:86:4f:8b:cf:3b:b8:31:dc:e4:8e:9b:de:ef:
         90:7e:ae:76:33:9b:8f:04:4b:0f:9f:86:38:7b:40:f9:3b:40:
         e7:82:84:fe:81:fc:85:55:5f:b6:db:6b:14:9f:96:72:f5:d8:
         b6:ea:eb:97:c1:1d:0c:9d:3a:c3:b6:9a:cb:18:f8:8d:85:46:
         6a:f2:71:b1:bb:fa:a9:9f:f2:f4:0f:d4:b9:5f:34:6f:f5:ef:
         14:2d:ba:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 11:41:37 2025 by rpki-client