Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a633162663a3a2f34382d3438203d3e203532303235.roa
File:                     326130353a646663343a633162663a3a2f34382d3438203d3e203532303235.roa (raw, json)
Hash identifier:          AJycd4DhXXsjqvex/TReeWq+f1d25X8O1UtUw7z4NtA=
Subject key identifier:   E3:67:6A:4C:43:DD:BC:3F:E7:CE:3C:86:21:CA:B5:3B:6A:3A:87:0D
Certificate issuer:       /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial:       2B2CC9CD558CE3A564F98BFE531A6CE32F62637B
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a633162663a3a2f34382d3438203d3e203532303235.roa
Signing time:             Thu 03 Jul 2025 15:54:00 +0000
ROA not before:           Thu 03 Jul 2025 15:49:00 +0000
ROA not after:            Thu 02 Jul 2026 15:54:00 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:c1bf::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 02:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:2c:c9:cd:55:8c:e3:a5:64:f9:8b:fe:53:1a:6c:e3:2f:62:63:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
        Validity
            Not Before: Jul  3 15:49:00 2025 GMT
            Not After : Jul  2 15:54:00 2026 GMT
        Subject: CN=E3676A4C43DDBC3FE7CE3C8621CAB53B6A3A870D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c3:56:02:44:65:c4:3d:d0:57:79:b8:0a:9d:
                    5a:91:23:0c:e7:06:c4:e3:8b:d0:54:1b:e2:c9:92:
                    4d:41:49:45:87:42:ea:c3:fd:fe:e7:02:f5:22:b8:
                    e6:03:2a:6e:7d:a3:6d:63:1b:b8:9b:fc:a8:b4:77:
                    d3:bc:91:e3:ee:1a:69:04:a1:c1:36:a2:f3:85:62:
                    c8:38:a9:b2:7b:70:74:06:9e:91:e7:84:19:d2:4b:
                    d1:6b:9f:78:bb:e3:cc:3c:51:42:22:d2:60:b5:f8:
                    22:a5:7a:2c:5e:39:20:4d:c7:91:74:a5:70:60:4d:
                    04:84:c1:22:15:54:db:fb:3e:fd:2f:80:74:c4:b0:
                    a8:ed:79:d0:a3:fa:71:c3:f1:41:8c:1c:24:e4:9d:
                    2e:17:d6:3f:1f:d6:cf:e6:0a:c2:2f:7e:24:6f:e5:
                    39:71:f8:c0:0b:c4:67:e4:5c:96:0c:40:96:fe:7c:
                    a9:42:bb:54:80:5c:c9:74:b9:40:de:c5:83:c4:b7:
                    bd:58:2a:73:fd:c6:e4:18:1a:f3:75:d5:37:ed:a0:
                    7d:f0:21:7d:1d:5d:71:5a:59:1e:be:cd:2a:2f:68:
                    0d:8c:6f:b3:3c:3a:81:ff:43:b2:3e:6b:74:11:4f:
                    33:0a:f0:56:fd:8d:a5:ab:cc:3e:85:c5:ba:77:48:
                    69:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:67:6A:4C:43:DD:BC:3F:E7:CE:3C:86:21:CA:B5:3B:6A:3A:87:0D
            X509v3 Authority Key Identifier:
                keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a633162663a3a2f34382d3438203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:c1bf::/48

    Signature Algorithm: sha256WithRSAEncryption
         5f:76:ce:4d:90:5d:3f:68:d9:ad:16:f1:e8:5e:71:02:d0:d4:
         4a:61:d8:63:dc:09:c7:d2:7e:61:d1:a2:32:b7:f4:66:8b:e1:
         1a:9a:93:52:33:d2:34:9c:bd:68:53:11:85:17:d8:94:f1:8f:
         f5:5b:bf:3d:f1:ce:37:3e:b0:b9:be:0d:b3:7c:7d:32:fa:9d:
         e2:a7:ea:c4:e7:39:54:94:08:da:f0:77:04:3c:62:5c:4e:18:
         a7:b8:5d:0c:9f:a7:91:9a:ef:93:d5:6c:30:76:34:5f:a1:68:
         70:12:52:f6:86:e2:19:50:f8:5a:0d:e6:a8:79:76:20:33:37:
         9d:e5:fa:e1:55:87:6b:d2:c7:1d:15:98:7a:40:5c:25:13:71:
         89:2f:79:6f:40:09:c2:7d:b7:1d:71:3b:89:72:72:9e:65:26:
         1d:2c:5e:67:e9:bb:79:51:b8:b5:6c:0a:c7:21:95:5e:11:2a:
         78:51:91:c9:44:0a:34:6a:84:c8:16:f5:18:9a:64:ac:65:18:
         b9:08:4f:13:d7:de:ea:93:b5:71:4b:c6:b3:50:9d:16:a2:1a:
         35:70:41:e7:94:fc:5e:f5:58:17:d5:45:b7:f8:84:87:12:13:
         23:be:ea:11:7f:b8:ab:9e:b3:81:5e:09:c1:9f:b5:0e:80:88:
         1f:2e:4d:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 11:41:37 2025 by rpki-client