Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a6332393a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a6332393a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          tQKTafv51hRhSCLHTkXXs3Ik1/z343DuRaSd6z0AcBc=
Subject key identifier:   90:40:C6:7C:59:BC:C2:BB:4A:EF:3A:71:C4:3D:61:CF:C6:8C:B6:81
Certificate issuer:       /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial:       4C4F2977C1DE43F1F7ED8B649FCC818C8A41EC15
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a6332393a3a2f34382d313238203d3e203532303235.roa
Signing time:             Thu 03 Jul 2025 15:53:51 +0000
ROA not before:           Thu 03 Jul 2025 15:48:51 +0000
ROA not after:            Thu 02 Jul 2026 15:53:51 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:c29::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 02:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:4f:29:77:c1:de:43:f1:f7:ed:8b:64:9f:cc:81:8c:8a:41:ec:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
        Validity
            Not Before: Jul  3 15:48:51 2025 GMT
            Not After : Jul  2 15:53:51 2026 GMT
        Subject: CN=9040C67C59BCC2BB4AEF3A71C43D61CFC68CB681
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:60:d2:26:4d:6f:bf:57:37:5b:9f:dc:3d:6a:
                    16:a7:7a:d7:70:b5:a7:4d:fd:f7:0e:21:05:f0:07:
                    ab:6c:3d:ea:b5:e3:4c:c1:40:2a:0d:32:d1:3e:27:
                    9a:21:9a:e9:16:fd:a9:42:e2:c9:25:7c:40:a0:d9:
                    1d:31:9e:4f:c4:86:7d:6e:fc:fb:fd:92:52:46:c0:
                    96:9a:90:ed:36:33:9c:74:46:0b:a8:fe:9b:6b:9a:
                    42:63:9a:91:84:c7:e1:37:5c:c4:85:89:27:a2:fc:
                    6e:8d:9c:28:af:8e:b0:6a:a1:38:1d:a6:94:45:53:
                    ce:23:7a:8c:b2:81:80:71:87:67:e4:08:6d:b3:1a:
                    f6:7f:a7:31:14:fd:2f:41:f9:da:2f:56:0e:e5:50:
                    7a:15:a4:50:34:de:e5:c0:6f:e2:d6:b3:d4:ec:14:
                    3e:6d:98:36:cd:e8:89:57:e6:1e:f0:4f:39:c5:b0:
                    f8:7f:b2:86:69:d3:06:48:86:19:ca:79:72:0d:22:
                    91:16:fb:d0:f5:63:fd:3f:81:fe:1a:a5:79:50:f1:
                    e5:bd:75:49:51:9a:b3:40:9e:d1:fd:f2:42:f8:3c:
                    14:17:c5:8b:00:4f:ae:3a:e5:e1:35:18:1b:a3:59:
                    d7:b0:fb:e3:1a:81:66:53:e1:cc:81:a7:1c:ea:3b:
                    6e:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:40:C6:7C:59:BC:C2:BB:4A:EF:3A:71:C4:3D:61:CF:C6:8C:B6:81
            X509v3 Authority Key Identifier:
                keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a6332393a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:c29::/48

    Signature Algorithm: sha256WithRSAEncryption
         8f:ea:cd:44:a7:6a:77:e8:65:20:f7:98:3f:11:47:30:4a:46:
         c2:d4:ce:de:54:fa:23:01:32:38:2b:28:0d:97:a1:c6:f9:91:
         66:5c:19:a7:bc:33:37:8e:f4:79:be:e8:6d:20:a0:56:d4:52:
         97:e4:51:50:11:ce:9a:79:59:71:fa:7b:53:ce:2a:7f:b6:bd:
         32:81:42:17:91:c1:51:e7:20:30:62:dd:c4:3e:7a:db:75:0c:
         65:8f:51:7f:e4:3b:7f:46:7c:78:7a:7d:ac:fc:98:57:24:48:
         6f:c6:95:75:5d:08:d5:11:3d:58:17:0f:a0:8f:b9:3a:8d:41:
         16:a5:d8:bb:48:bc:1e:42:1b:20:b6:92:3d:36:07:15:5c:db:
         9a:c6:88:ae:81:a1:2f:44:0a:62:78:e4:2c:c7:24:b7:80:49:
         1f:52:4e:3b:eb:c6:f1:2b:e2:b6:08:34:47:9d:3f:0a:77:ac:
         46:03:54:16:3f:dc:bd:a4:61:8b:ce:9e:f1:c4:81:9e:13:8a:
         18:92:44:7f:f4:7f:c2:db:4d:1b:bc:15:95:2f:20:c7:b0:c3:
         8f:0d:63:89:33:22:42:d6:59:aa:9e:b1:e6:f3:4f:f0:e9:db:
         5e:95:1d:0b:06:ac:a0:41:ee:71:53:01:c6:4b:c1:63:18:56:
         12:1f:b7:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 11:40:56 2025 by rpki-client