Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a6331623a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a6331623a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          IkuGdf7bMDNKcCKN1AFpykDrFdBL/I5nytS5LoJHVrY=
Subject key identifier:   F3:8C:34:62:A5:1B:F5:C2:2F:93:C0:21:2E:52:05:DC:A2:13:49:E2
Certificate issuer:       /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial:       45165795CC617FA3581AF4EEDD89C39FCC2351A7
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a6331623a3a2f34382d313238203d3e203532303235.roa
Signing time:             Thu 03 Jul 2025 15:53:51 +0000
ROA not before:           Thu 03 Jul 2025 15:48:51 +0000
ROA not after:            Thu 02 Jul 2026 15:53:51 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:c1b::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 02:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:16:57:95:cc:61:7f:a3:58:1a:f4:ee:dd:89:c3:9f:cc:23:51:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
        Validity
            Not Before: Jul  3 15:48:51 2025 GMT
            Not After : Jul  2 15:53:51 2026 GMT
        Subject: CN=F38C3462A51BF5C22F93C0212E5205DCA21349E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:e7:33:ee:fd:9f:36:b7:af:b3:5f:11:a2:10:
                    c4:b9:83:b8:ea:7e:8a:64:5a:da:20:6a:76:36:83:
                    4a:94:83:a6:70:a8:cd:58:07:f1:d4:9e:cc:2e:a2:
                    bd:2f:95:fd:cf:aa:dc:ff:58:82:e1:d8:05:61:49:
                    b8:50:5a:16:d6:ae:4b:90:11:13:25:58:c4:f8:7a:
                    2e:6f:07:58:34:c9:b8:da:6a:f6:4c:36:88:c5:95:
                    11:84:ac:c0:c2:2d:ed:9c:68:2b:51:2a:87:bf:43:
                    cb:06:83:8d:ea:1c:6c:89:1c:6c:3b:01:5c:cc:c9:
                    52:d3:97:57:06:80:2c:7f:0c:c0:bd:b7:e1:c2:7c:
                    9e:b3:bb:36:48:af:cc:2e:2e:ec:2f:21:56:25:2d:
                    c7:79:40:06:de:55:68:63:6e:2c:80:4d:93:28:fc:
                    2f:31:5f:1d:dd:02:ce:28:74:7f:6a:4d:38:92:3e:
                    f3:55:8e:19:13:6f:04:bc:0a:37:e3:00:6d:32:6e:
                    f1:cf:52:98:bb:87:73:7e:22:6b:b2:ed:b8:46:3f:
                    30:95:63:13:09:fa:5c:8e:f4:48:b6:fb:25:ed:28:
                    27:8c:ab:fe:d7:aa:ca:bd:e1:7c:d4:cf:4d:80:d2:
                    2d:52:7e:50:52:c7:74:15:bf:1e:27:73:f7:70:70:
                    68:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:8C:34:62:A5:1B:F5:C2:2F:93:C0:21:2E:52:05:DC:A2:13:49:E2
            X509v3 Authority Key Identifier:
                keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a6331623a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:c1b::/48

    Signature Algorithm: sha256WithRSAEncryption
         81:bd:81:04:6e:ee:85:35:5a:16:0a:a0:fb:97:2a:42:16:90:
         23:44:95:21:28:1c:82:9c:8e:2a:b8:49:f5:54:25:6c:ae:52:
         20:69:c3:86:e0:92:2f:79:7f:d4:47:0f:b5:49:5d:ef:7f:17:
         8f:2d:9f:1e:ab:3a:d6:d0:7c:c1:cf:7c:a7:d1:04:e1:6b:e6:
         9a:19:2c:14:65:b7:ee:08:32:74:69:af:28:cf:da:ef:de:31:
         cf:4d:76:70:d0:29:61:d1:7c:94:4a:4d:c0:51:ac:c7:5c:8a:
         78:2f:10:ca:87:c2:73:a1:0c:7c:ab:51:31:6c:b1:4d:2c:4f:
         10:c1:4c:28:d5:28:44:2b:ee:e6:5f:a5:35:8e:3f:c3:e7:0a:
         25:8a:cc:e4:12:b2:b8:51:37:27:08:dd:d3:7a:36:b9:f8:38:
         2a:3a:d3:41:30:55:f1:43:44:b4:41:ed:7c:bf:87:15:4d:ae:
         1a:64:8f:d8:5c:8f:4c:ba:55:b6:0b:47:87:8c:a9:0f:a2:fc:
         b3:33:62:dd:90:00:df:2c:c6:14:6e:97:63:a9:20:dd:e1:10:
         ad:ea:3d:1f:3c:c8:01:3f:d2:94:3d:5a:69:63:eb:6d:70:2c:
         de:1b:86:73:13:46:bd:e5:91:29:a6:ce:4d:e8:d6:73:60:5f:
         a0:d1:dd:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 11:39:39 2025 by rpki-client