Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a6333323a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a6333323a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          cFfpf2ukIFEkV8KI4kf47qq6PES4IwFpZAC70Zmyepw=
Subject key identifier:   01:C3:57:F6:FF:4A:A2:57:B7:5A:A2:9C:D6:A2:49:6D:95:66:C6:1D
Certificate issuer:       /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial:       30609F92476FA388BBB48EE06458EB1B5D50D5FB
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a6333323a3a2f34382d313238203d3e203532303235.roa
Signing time:             Thu 03 Jul 2025 15:54:09 +0000
ROA not before:           Thu 03 Jul 2025 15:49:09 +0000
ROA not after:            Thu 02 Jul 2026 15:54:09 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:c32::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 02:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:60:9f:92:47:6f:a3:88:bb:b4:8e:e0:64:58:eb:1b:5d:50:d5:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
        Validity
            Not Before: Jul  3 15:49:09 2025 GMT
            Not After : Jul  2 15:54:09 2026 GMT
        Subject: CN=01C357F6FF4AA257B75AA29CD6A2496D9566C61D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ac:a9:44:8c:26:02:99:f3:c3:7c:86:2c:f4:
                    b7:bc:92:90:2f:09:52:77:cd:5b:19:af:5e:c8:fd:
                    ec:8a:5f:e9:ee:48:93:ba:ec:6b:75:11:3d:25:85:
                    c8:3b:cc:cc:5d:19:0a:a8:46:22:6b:12:5e:4a:7a:
                    17:04:35:ae:06:47:f6:8f:52:e1:4d:f0:75:6b:e3:
                    64:3d:c2:46:40:d2:db:1e:1c:60:57:0a:ea:b3:b6:
                    f8:4f:97:f0:56:0e:1f:fe:48:1f:15:be:74:b1:ce:
                    4c:3c:0e:20:83:fe:98:a6:4c:28:37:ed:d7:d6:56:
                    a3:bd:ba:3c:c0:3e:ee:4e:8f:74:82:82:ea:c3:8b:
                    59:50:1b:b9:4d:32:64:2f:5d:64:b9:46:d3:85:6a:
                    c3:ea:ae:ff:ec:ac:8e:30:7e:92:25:d1:1f:ed:77:
                    f0:6c:84:0c:42:f3:a8:55:8c:1f:83:f0:d3:f4:63:
                    85:8e:23:89:78:68:9c:71:71:13:f1:20:e5:35:4d:
                    63:92:05:87:c4:16:c9:ee:eb:a3:a0:ad:28:df:0b:
                    2c:54:cd:8c:fd:cc:26:fe:66:05:ea:af:50:46:a9:
                    87:19:10:a4:d3:78:c6:84:21:17:f1:e0:00:30:ac:
                    fe:65:e0:48:26:99:8c:05:b7:3c:66:35:ad:41:a8:
                    b3:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:C3:57:F6:FF:4A:A2:57:B7:5A:A2:9C:D6:A2:49:6D:95:66:C6:1D
            X509v3 Authority Key Identifier:
                keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a6333323a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:c32::/48

    Signature Algorithm: sha256WithRSAEncryption
         02:5e:64:50:15:8c:11:64:8a:56:a3:a6:93:cb:1f:9b:d1:79:
         04:be:ca:a3:56:c4:ce:7f:fb:e9:ef:32:2e:2b:92:5f:06:32:
         82:df:ee:14:41:57:ed:c5:4a:4a:4b:51:2c:03:8e:4d:c7:f2:
         62:e2:81:18:f3:74:40:d4:69:02:b1:f8:cf:71:9c:81:8d:2f:
         af:f8:c4:78:c3:2f:d9:8d:60:96:9f:95:97:e4:e0:03:d6:9b:
         a9:9f:2a:88:01:23:13:09:3c:c3:95:32:93:ac:b2:2a:b0:d9:
         22:b1:0f:4e:b9:59:34:ed:c8:a4:b2:b5:a4:4f:a8:b2:f1:13:
         7f:3f:26:9d:c3:73:3a:b6:84:5e:37:c8:61:fb:ba:61:2d:13:
         fe:fc:a7:55:2b:d2:ed:eb:80:b8:4f:31:7c:33:c7:d2:15:1a:
         fc:4f:55:0c:e6:82:35:41:36:7e:81:97:f6:20:dd:33:d1:76:
         58:e4:11:41:8a:01:b3:90:20:15:38:80:62:1e:e7:d8:cd:62:
         dc:15:ad:e0:73:b6:40:19:c9:85:82:8b:2b:95:01:77:48:69:
         09:fa:14:72:02:4b:cd:a7:ff:1a:df:d2:c7:40:5c:80:be:cf:
         06:79:67:aa:df:4b:df:45:5a:1e:f0:1b:30:f3:06:49:d5:cc:
         fc:43:81:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 11:50:13 2025 by rpki-client