Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a64663a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a64663a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          yqDIRxKR98FCExUgraJluWHGteaxEn4i2VDDSxrRuIc=
Subject key identifier:   00:06:FA:2C:04:B5:4D:F1:86:DE:1A:DD:23:E7:32:53:AF:4A:12:29
Certificate issuer:       /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial:       2109B26C76510BAB97F45C010EB8EA5B9E2C9CA1
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a64663a3a2f34382d313238203d3e203532303235.roa
Signing time:             Thu 03 Jul 2025 15:54:06 +0000
ROA not before:           Thu 03 Jul 2025 15:49:06 +0000
ROA not after:            Thu 02 Jul 2026 15:54:06 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:df::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 02:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:09:b2:6c:76:51:0b:ab:97:f4:5c:01:0e:b8:ea:5b:9e:2c:9c:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
        Validity
            Not Before: Jul  3 15:49:06 2025 GMT
            Not After : Jul  2 15:54:06 2026 GMT
        Subject: CN=0006FA2C04B54DF186DE1ADD23E73253AF4A1229
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:83:4f:6b:ad:f4:47:86:4a:9a:b5:6b:4f:60:
                    0d:a8:bb:58:87:9e:68:41:2e:e4:b4:1b:39:07:34:
                    f4:e0:99:b6:22:73:73:ff:9c:22:12:ea:21:3d:ee:
                    47:0b:5b:f7:d4:00:bf:17:53:be:15:36:97:79:d3:
                    96:1a:6d:44:d9:9a:61:b3:87:57:3a:b2:cb:66:45:
                    88:55:67:83:2c:b4:5f:58:88:62:3e:82:f7:d9:c9:
                    ac:1d:0d:0a:77:b2:74:95:d6:01:79:6d:94:0c:14:
                    25:c5:eb:3c:d3:10:d6:92:7e:13:ef:55:35:c7:d2:
                    4a:42:ce:2f:aa:ec:74:e9:40:e8:2f:82:f6:66:c2:
                    20:b8:03:80:ea:ea:6b:0f:ad:1b:9b:46:e6:4f:c1:
                    d8:e0:f3:2c:37:48:32:6c:c1:1c:91:79:c7:88:25:
                    e5:7b:47:f8:f7:72:f1:f2:2f:35:80:fd:82:7a:f9:
                    3e:ba:9f:06:52:17:06:15:06:ad:4c:fb:75:b1:15:
                    42:cf:89:9b:42:99:f8:4e:5c:55:16:6a:46:40:e4:
                    9d:4d:89:0e:fa:26:81:dc:64:44:7d:b6:0d:48:e2:
                    8f:84:fa:00:07:f3:88:c0:9e:c9:c6:35:76:d2:4c:
                    11:ba:ea:44:da:09:0b:02:a5:0f:1b:68:b1:df:2d:
                    e5:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:06:FA:2C:04:B5:4D:F1:86:DE:1A:DD:23:E7:32:53:AF:4A:12:29
            X509v3 Authority Key Identifier:
                keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a64663a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:df::/48

    Signature Algorithm: sha256WithRSAEncryption
         38:13:fb:89:44:b4:02:55:cf:25:54:81:9f:ff:59:b0:37:22:
         2e:70:08:06:42:9e:ea:95:e2:84:d9:66:dd:c4:e3:e2:4f:df:
         2c:73:91:b3:ed:5d:f5:0b:b2:d0:cd:1a:01:39:38:ed:19:65:
         4e:1a:89:97:38:26:2b:19:f2:cb:0e:e6:7d:6e:e0:07:90:4d:
         51:16:c0:10:2a:4b:6e:23:30:47:8d:9f:9a:ce:3e:c9:97:f1:
         ec:63:ea:e6:72:9e:99:a4:4a:21:1a:41:a2:a5:90:15:37:c1:
         a1:67:fd:e2:e1:aa:f9:d5:19:7f:66:f2:63:ce:44:42:bd:2a:
         e5:2a:c8:8b:c0:53:e4:95:56:d4:c5:ba:0f:8d:b7:6f:04:37:
         1c:f1:44:db:88:28:58:5c:e0:7e:8f:27:6a:06:1c:06:d1:d2:
         a6:7a:43:e8:c9:a3:fa:55:5f:f7:8d:8d:14:22:23:1b:e9:c7:
         0a:79:78:2e:2c:39:b2:c2:6c:38:bd:78:94:9b:8d:aa:4a:47:
         e4:dc:cf:83:ac:1c:4f:75:9a:82:1a:76:9c:be:bb:c5:14:3c:
         b6:a1:d7:e0:c5:ae:e4:fe:93:e8:45:59:3f:76:51:8b:99:61:
         4f:8a:39:f6:2e:1c:a0:3b:52:e6:fe:40:2d:5c:32:c0:b8:d3:
         c8:61:97:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 11:45:37 2025 by rpki-client