Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a6264663a3a2f34382d3438203d3e203532303235.roa
File:                     326130353a646663343a6264663a3a2f34382d3438203d3e203532303235.roa (raw, json)
Hash identifier:          +/5aXm4HoV5+K2B3oQ1cXFZGPqohTHuqlEi+HNPlC+I=
Subject key identifier:   7D:58:50:9F:A3:B0:FA:B8:1C:C7:79:F4:97:3B:83:1F:75:91:0E:D4
Certificate issuer:       /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial:       5817D4DF6926E91DFA5B13053E61E92CCCF3D61D
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a6264663a3a2f34382d3438203d3e203532303235.roa
Signing time:             Thu 03 Jul 2025 15:53:47 +0000
ROA not before:           Thu 03 Jul 2025 15:48:47 +0000
ROA not after:            Thu 02 Jul 2026 15:53:47 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:bdf::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 02:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:17:d4:df:69:26:e9:1d:fa:5b:13:05:3e:61:e9:2c:cc:f3:d6:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
        Validity
            Not Before: Jul  3 15:48:47 2025 GMT
            Not After : Jul  2 15:53:47 2026 GMT
        Subject: CN=7D58509FA3B0FAB81CC779F4973B831F75910ED4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:e7:00:ac:ef:f2:65:6e:28:f8:eb:59:16:6b:
                    0f:30:97:53:16:c2:7a:5f:ef:5b:99:1f:dd:b9:a1:
                    d8:ef:b0:ec:e4:f7:4d:8e:15:49:45:7b:7e:94:25:
                    90:ed:08:f1:86:76:ad:e7:71:eb:76:6b:38:ad:ed:
                    89:a2:42:23:e3:e3:b7:2c:f9:05:a6:28:2e:74:08:
                    33:e2:91:cf:cd:c4:c5:df:9a:e6:9b:b4:54:78:90:
                    71:f3:8c:6c:2c:e8:e1:a7:94:87:9d:3a:fe:c3:fb:
                    09:2d:85:f6:0c:7b:d8:43:25:d0:71:a6:eb:eb:3a:
                    7d:08:e7:13:a6:be:83:2d:8c:80:d6:9a:c0:3b:23:
                    73:99:1b:2b:7e:87:3c:2c:15:33:90:59:b1:76:83:
                    cd:ce:23:53:5e:c7:25:df:1b:b8:98:0c:d5:23:41:
                    d6:17:f7:44:05:50:d6:73:b7:6c:c4:55:08:7b:59:
                    7e:35:47:3d:4d:d5:97:c2:54:74:3e:4f:20:4e:98:
                    aa:76:bf:d2:7a:f8:09:70:9e:47:69:96:07:f3:b3:
                    5c:4d:d9:6d:d5:46:59:f6:b6:01:d9:d3:65:63:92:
                    8a:fa:81:18:c9:11:d2:3d:2a:6e:18:cc:92:ac:6f:
                    e2:5f:09:c6:08:69:1a:66:f5:32:de:84:7a:38:8a:
                    cb:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:58:50:9F:A3:B0:FA:B8:1C:C7:79:F4:97:3B:83:1F:75:91:0E:D4
            X509v3 Authority Key Identifier:
                keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a6264663a3a2f34382d3438203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:bdf::/48

    Signature Algorithm: sha256WithRSAEncryption
         8f:67:12:4c:2a:4e:e0:4a:a1:2d:0a:8d:06:f0:ce:0c:48:80:
         03:08:ad:cc:44:73:f8:d9:a9:49:e1:ac:57:49:7f:69:4c:21:
         9e:30:03:8d:34:a2:43:e7:2a:03:e7:b9:16:06:19:8b:07:28:
         53:6a:d8:af:33:dd:af:91:fd:28:6d:94:0b:13:e8:83:f9:f6:
         c3:c7:e9:37:d2:0f:e4:8d:0a:b5:d2:a6:ec:03:4d:d4:7d:e1:
         4b:14:33:f6:69:f7:fb:b7:c4:ad:ea:77:ef:2e:ce:76:89:89:
         09:65:2c:65:20:3a:16:05:34:06:54:8e:56:68:0f:26:97:ba:
         c7:65:f2:d6:27:e1:d8:36:17:88:95:f3:60:be:cb:05:92:78:
         43:f7:ef:41:e1:a1:5d:b4:09:f8:c6:d6:e8:60:7e:8a:d6:22:
         c2:9e:9f:c3:69:34:c9:3e:1d:1e:dd:88:1b:8d:23:49:20:e0:
         73:7c:75:3b:67:62:a5:34:62:7f:a1:09:82:2d:52:8f:20:38:
         89:37:e2:f6:c2:59:8e:ca:ef:07:6a:b6:cd:db:f8:3c:e1:24:
         89:c9:dc:c1:ea:d0:c2:81:ac:ce:3c:8e:2b:37:76:00:9b:9f:
         91:f8:30:6f:62:5c:7a:23:f3:de:ea:ad:1f:20:18:5e:f9:db:
         b4:d8:40:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 11:39:40 2025 by rpki-client