Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a6561663a3a2f34382d3438203d3e203532303235.roa
File:                     326130353a646663343a6561663a3a2f34382d3438203d3e203532303235.roa (raw, json)
Hash identifier:          G5l7QFJVcFmf4uqnFtfI6XKz6z+r1GBrqqd/Z0Qzep8=
Subject key identifier:   AA:D4:F1:CC:7D:4F:C5:63:30:A0:F3:93:2E:55:EB:23:06:81:0D:68
Certificate issuer:       /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial:       0D1D7397633F6878CFE4FF6FDA4FB5702396B121
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a6561663a3a2f34382d3438203d3e203532303235.roa
Signing time:             Thu 03 Jul 2025 15:53:58 +0000
ROA not before:           Thu 03 Jul 2025 15:48:58 +0000
ROA not after:            Thu 02 Jul 2026 15:53:58 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:eaf::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 02:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:1d:73:97:63:3f:68:78:cf:e4:ff:6f:da:4f:b5:70:23:96:b1:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
        Validity
            Not Before: Jul  3 15:48:58 2025 GMT
            Not After : Jul  2 15:53:58 2026 GMT
        Subject: CN=AAD4F1CC7D4FC56330A0F3932E55EB2306810D68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:05:ab:d3:64:13:99:8d:0c:78:19:9c:3a:82:
                    ce:4e:1e:9b:f4:79:32:b7:d0:27:4b:7a:a4:01:ee:
                    6c:42:27:82:59:ec:a2:d1:2b:77:94:06:6f:23:5f:
                    17:bb:3a:e6:95:8c:2b:42:63:9f:e2:c9:2e:a4:31:
                    73:67:64:57:69:17:94:4a:aa:e6:b3:94:62:d2:0c:
                    75:11:9b:ba:70:50:7c:57:77:52:26:7c:00:40:c0:
                    9e:91:8a:cb:b9:65:92:21:09:4a:c8:73:d7:8e:50:
                    db:a5:23:1a:27:9a:13:86:f8:db:64:8e:bf:26:03:
                    de:e7:08:a4:c3:00:47:de:33:23:04:ba:37:f5:b0:
                    ae:9e:b0:78:06:b5:0e:ad:d8:04:0a:0b:97:2d:b4:
                    31:93:d7:77:b6:5e:f7:fe:9f:94:b9:e2:1c:53:98:
                    2e:87:76:57:8d:5c:58:29:77:f9:df:df:b2:19:b0:
                    b5:40:46:01:10:94:f7:c6:d8:a6:fd:85:64:f9:d0:
                    c1:b0:dc:fc:87:61:36:8a:97:4f:65:0a:f4:0c:58:
                    1c:2d:b1:a5:66:61:99:63:3e:13:e6:0a:fd:ed:ff:
                    56:fa:46:7a:80:68:38:19:7f:35:68:d3:1a:c5:08:
                    8b:c6:19:32:bd:72:86:09:4e:96:0b:89:aa:1d:16:
                    b1:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:D4:F1:CC:7D:4F:C5:63:30:A0:F3:93:2E:55:EB:23:06:81:0D:68
            X509v3 Authority Key Identifier:
                keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a6561663a3a2f34382d3438203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:eaf::/48

    Signature Algorithm: sha256WithRSAEncryption
         59:8e:1e:75:1f:c4:0f:96:32:17:cf:1b:18:f9:56:72:2f:e6:
         e0:59:9a:bb:43:c2:60:88:24:61:f5:e9:39:68:13:76:e1:d2:
         e2:d3:56:33:63:74:3b:ae:2a:d9:f0:59:e6:53:b2:85:d9:75:
         3a:f4:a2:6c:34:5d:32:69:99:11:45:86:29:b9:82:d3:be:cb:
         b0:0d:18:4e:3c:81:ac:d5:01:16:50:04:10:18:bd:84:91:df:
         0a:bc:bb:2a:98:06:fd:f6:37:9f:2e:2e:73:4d:7f:15:fc:9e:
         79:39:27:5c:d7:4f:5c:0c:ff:99:9f:5d:c4:fe:6e:26:fa:a2:
         12:7d:ef:22:4b:e0:84:10:2b:51:55:b1:5e:20:2b:17:24:fb:
         6a:ca:da:85:a8:49:4d:df:65:ef:63:46:0d:61:71:44:4a:01:
         8c:44:da:c8:93:e4:c5:53:df:88:e7:3c:eb:71:c5:50:0b:77:
         da:53:03:c5:3d:d6:18:47:4e:d8:b8:55:4c:e7:94:6e:08:c8:
         dd:65:17:5c:33:fd:2f:21:7b:ec:86:2d:6d:1f:ee:9d:ed:bf:
         85:d2:79:b8:8f:49:74:35:0d:fa:ba:da:d6:ed:58:72:70:46:
         1f:cc:d7:8c:25:47:9c:bf:fa:82:40:d5:51:0c:4b:a8:4d:46:
         43:84:a1:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 11:18:43 2025 by rpki-client