Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a6532633a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a6532633a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          T0xj+8/ilqyAiWJHqwBgtaiVmvTziuifATNrDBWderA=
Subject key identifier:   07:61:DB:25:5A:09:47:E7:94:B4:FA:66:6B:E2:A6:8D:A0:FD:C1:CE
Certificate issuer:       /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial:       1DC61A7AE5264DD1B8C1EB6E009BA60E8628BB94
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a6532633a3a2f34382d313238203d3e203532303235.roa
Signing time:             Thu 03 Jul 2025 15:54:11 +0000
ROA not before:           Thu 03 Jul 2025 15:49:11 +0000
ROA not after:            Thu 02 Jul 2026 15:54:11 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:e2c::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 02:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:c6:1a:7a:e5:26:4d:d1:b8:c1:eb:6e:00:9b:a6:0e:86:28:bb:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
        Validity
            Not Before: Jul  3 15:49:11 2025 GMT
            Not After : Jul  2 15:54:11 2026 GMT
        Subject: CN=0761DB255A0947E794B4FA666BE2A68DA0FDC1CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:d5:2a:93:a4:c3:43:47:68:de:4b:05:c8:a0:
                    da:76:60:0b:0b:18:e7:06:11:e6:18:b8:89:34:38:
                    d8:92:db:49:d9:f3:2f:42:df:15:db:67:22:1f:ed:
                    84:b0:d1:9a:1b:12:9b:19:85:7a:59:26:71:f2:66:
                    ca:7d:14:ff:84:5a:a1:54:1f:dc:8f:4a:f2:27:7e:
                    a5:d3:b1:82:52:7a:cd:84:97:36:26:71:72:bb:4d:
                    5d:d5:b4:96:d8:b1:19:39:e3:3b:67:22:6d:92:ac:
                    a1:a6:3e:0b:cd:66:26:26:f5:de:37:f5:2e:72:92:
                    42:fc:9a:3d:81:9e:0e:0d:de:2a:1f:27:28:45:8f:
                    35:f1:7b:58:c7:4e:cd:fe:8d:8e:cc:66:04:b6:9d:
                    29:d3:cf:bc:1e:1b:f3:62:2a:de:1e:2f:54:5e:54:
                    24:45:b1:9e:6e:4b:bc:6c:45:c4:96:cc:fd:56:68:
                    31:63:8e:c5:16:7d:fa:8f:10:09:1e:87:f1:06:fe:
                    c6:22:ee:eb:5c:50:52:f1:45:ab:53:6f:99:53:d8:
                    12:00:be:7c:13:56:d7:a0:d7:06:bf:8e:33:dc:85:
                    12:81:04:5c:87:87:c4:9b:8f:f2:53:98:3e:fb:67:
                    25:8a:3e:cc:74:0d:e9:fe:0f:ec:57:30:f7:dd:1c:
                    28:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:61:DB:25:5A:09:47:E7:94:B4:FA:66:6B:E2:A6:8D:A0:FD:C1:CE
            X509v3 Authority Key Identifier:
                keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a6532633a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:e2c::/48

    Signature Algorithm: sha256WithRSAEncryption
         0f:09:03:ce:6b:59:34:c7:8a:6b:02:7a:61:d1:50:98:df:27:
         b1:5b:71:e9:80:dd:44:49:ce:9f:3e:b9:89:8d:51:7c:31:a8:
         fe:22:2e:e2:a9:11:e4:4f:55:bc:9f:ac:cf:9e:1d:55:e3:a1:
         02:d8:19:31:92:03:8a:5b:13:37:70:77:28:d3:50:fd:e6:ca:
         91:84:fc:0b:b5:ba:a3:4b:60:43:3d:49:01:28:a2:65:d3:22:
         de:5c:ce:db:9c:74:34:56:23:db:da:da:26:db:b5:46:5c:76:
         74:57:50:1c:c6:7d:c7:a1:de:00:96:a7:a7:77:95:d7:cf:4c:
         ca:61:bc:44:24:75:e8:9a:f4:0b:04:f1:ad:0f:fa:70:0d:07:
         90:d8:1a:95:08:93:40:f2:d4:97:6e:b2:b7:57:41:da:3f:b4:
         b1:db:18:7c:54:2e:30:55:c0:29:fa:0c:86:e7:1e:63:6f:a6:
         1f:79:41:36:10:60:5e:ec:e3:70:f4:30:3c:f0:ae:84:f9:2b:
         51:47:e2:25:bd:21:f9:7c:08:9b:18:82:74:e8:41:b0:24:b6:
         14:3d:eb:11:8e:7b:35:e3:7e:de:d3:2c:7e:d0:71:38:33:fe:
         22:03:91:c6:28:5c:50:42:30:6e:22:52:3f:ef:76:06:80:07:
         3f:82:0c:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 11:47:11 2025 by rpki-client