Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a63343a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a63343a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          Fa5YVVW4Sd2F/LhwD7j+yxE29Xh6A2Wl0sEDFl/lpIk=
Subject key identifier:   E7:70:E5:B7:D1:4F:F0:78:0B:BE:9A:8F:79:05:16:B7:6C:ED:D2:85
Certificate issuer:       /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial:       137115717C4AF4E4801021BE4C0E8BB3A8D33690
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a63343a3a2f34382d313238203d3e203532303235.roa
Signing time:             Thu 03 Jul 2025 15:53:53 +0000
ROA not before:           Thu 03 Jul 2025 15:48:53 +0000
ROA not after:            Thu 02 Jul 2026 15:53:53 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:c4::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 02:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:71:15:71:7c:4a:f4:e4:80:10:21:be:4c:0e:8b:b3:a8:d3:36:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
        Validity
            Not Before: Jul  3 15:48:53 2025 GMT
            Not After : Jul  2 15:53:53 2026 GMT
        Subject: CN=E770E5B7D14FF0780BBE9A8F790516B76CEDD285
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:70:9b:38:2f:8c:49:4c:af:92:dd:20:ea:e1:
                    c7:a3:2e:fe:a2:7f:7c:67:a0:7e:97:75:86:d8:ed:
                    89:c2:3c:14:65:79:54:09:f3:7d:f2:34:e4:77:cf:
                    84:e0:28:ec:d2:72:17:d7:93:85:3c:8c:16:44:91:
                    59:dd:80:b9:a1:83:5f:e9:bf:cf:d5:34:a7:cd:a9:
                    34:08:13:ba:24:1a:a5:74:57:9e:c5:c4:f0:eb:1f:
                    18:a9:1e:5f:41:95:67:a7:a6:a7:6b:90:87:78:8a:
                    72:e9:bb:02:79:c2:1a:93:1f:9e:7f:f3:cf:b2:6e:
                    79:11:cc:12:0c:b8:b2:bb:29:39:d8:d8:d4:7c:14:
                    73:af:21:12:a0:5a:e1:5c:11:49:53:aa:2e:17:6b:
                    7d:a7:e4:ab:ca:81:e2:5c:de:55:57:c1:c4:12:8b:
                    97:1b:de:2c:0f:ee:49:a0:7a:01:a6:db:78:02:1c:
                    cb:6f:f7:90:a2:1c:8f:72:8a:3e:f7:f0:c0:01:31:
                    c7:67:02:e3:f0:eb:d3:f1:58:e0:c3:3b:1a:28:c7:
                    4a:da:63:c1:7e:ce:8e:62:cc:f4:d4:5e:2f:0d:3f:
                    1f:a9:50:db:a6:9e:3d:26:4f:bb:ad:8f:e5:2b:e1:
                    79:9d:7e:33:f2:80:ba:9d:e9:9d:6e:b7:ba:79:13:
                    03:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:70:E5:B7:D1:4F:F0:78:0B:BE:9A:8F:79:05:16:B7:6C:ED:D2:85
            X509v3 Authority Key Identifier:
                keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a63343a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:c4::/48

    Signature Algorithm: sha256WithRSAEncryption
         2c:2f:a9:cb:83:4a:20:18:25:6a:04:d7:50:f3:fc:51:bd:8f:
         2c:df:b1:1f:db:50:cb:5e:44:35:f9:18:64:4c:fa:6d:9f:c8:
         ab:77:12:82:f5:16:ce:60:dc:05:ab:07:c0:77:7d:3f:34:91:
         42:3a:db:fe:9f:d3:b0:99:15:9c:a6:cb:47:6f:1d:4d:63:c6:
         32:ae:45:6e:14:95:38:70:d6:a2:ba:c0:8c:23:3a:b9:8b:49:
         d4:04:50:81:f8:59:a7:8b:93:8c:1a:90:aa:8f:37:ae:64:e6:
         66:bf:5d:a0:37:fb:35:ee:ae:c5:e1:70:24:92:f7:58:5f:1a:
         38:58:ff:79:02:ce:a9:bd:95:26:fb:01:34:99:d4:48:a8:98:
         e9:02:00:c7:b7:ca:4e:e6:32:ae:05:48:7c:42:7f:9b:5a:67:
         0c:bf:c6:33:44:7e:a1:66:3b:04:5d:b6:29:2d:cf:e6:53:6c:
         9c:92:88:1e:b2:03:1b:b6:e0:53:94:7a:59:ce:6e:b8:1d:81:
         45:8b:f2:25:f5:d6:18:c5:e4:a8:eb:a4:a6:cc:09:c5:35:6b:
         35:94:41:cc:1c:b5:a4:7b:f6:b7:99:f3:c8:d5:ca:6a:c7:da:
         9d:ff:c3:ec:6b:6e:75:ee:32:51:f7:4f:89:5c:7b:49:13:08:
         4e:40:c5:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 11:47:11 2025 by rpki-client