Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a6631303a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a6631303a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          VJtPiAxBLpUxEfTM4danC7pLKbvRIv4WIlhSA1b0nKw=
Subject key identifier:   21:BA:B3:09:BD:66:4E:7C:6E:B6:BD:3D:55:03:B4:12:69:78:5B:9E
Certificate issuer:       /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial:       1152820C1A0A48DD27FA55D5D34BB1E6A5B9EE4E
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a6631303a3a2f34382d313238203d3e203532303235.roa
Signing time:             Thu 03 Jul 2025 15:54:01 +0000
ROA not before:           Thu 03 Jul 2025 15:49:01 +0000
ROA not after:            Thu 02 Jul 2026 15:54:01 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:f10::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 03:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:52:82:0c:1a:0a:48:dd:27:fa:55:d5:d3:4b:b1:e6:a5:b9:ee:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
        Validity
            Not Before: Jul  3 15:49:01 2025 GMT
            Not After : Jul  2 15:54:01 2026 GMT
        Subject: CN=21BAB309BD664E7C6EB6BD3D5503B41269785B9E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:56:b2:3f:15:0f:6b:4a:8f:a8:77:94:89:7e:
                    88:35:dd:de:14:91:39:bf:0e:3d:5e:cd:72:db:b8:
                    4b:ad:6e:ba:fd:6d:61:e5:00:e8:27:50:fd:c9:d3:
                    36:2b:d6:18:3b:6a:0b:18:71:d0:d6:19:a9:32:94:
                    3b:a0:30:4c:bc:1a:24:f1:d2:eb:dc:30:7c:32:41:
                    8e:dd:4b:0f:b1:b1:6d:2b:1c:fd:86:20:37:8c:ed:
                    4c:05:d0:35:01:aa:8e:d6:c9:db:59:e0:ee:e5:a7:
                    3e:d0:0a:37:7e:c8:f6:6a:4c:cb:f4:85:54:3f:ef:
                    3a:5f:d1:4a:50:cc:3f:1c:b7:59:a1:db:43:7b:21:
                    e9:c4:b2:06:4a:40:74:29:fe:e1:14:01:c2:23:81:
                    d3:48:de:be:ab:30:68:bd:5d:d0:1e:9e:f7:a6:7b:
                    22:24:81:f3:0d:08:c1:4e:b1:46:4f:78:1c:2a:98:
                    f2:69:cb:01:68:21:73:cf:13:75:a2:35:2f:1d:0e:
                    71:0b:59:79:a1:4b:4b:f7:6d:47:46:d2:69:52:38:
                    c5:66:bb:a3:7f:c4:3a:5a:16:e6:7c:e5:47:94:d4:
                    d1:25:34:3a:9f:90:7d:c5:3d:3b:28:76:70:81:7b:
                    4a:9b:c3:e1:3e:1e:9b:4d:32:90:79:79:8b:85:d8:
                    85:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:BA:B3:09:BD:66:4E:7C:6E:B6:BD:3D:55:03:B4:12:69:78:5B:9E
            X509v3 Authority Key Identifier:
                keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a6631303a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:f10::/48

    Signature Algorithm: sha256WithRSAEncryption
         1b:b5:f7:12:71:24:71:4e:5d:bf:47:fa:40:17:ad:34:e0:08:
         c4:e2:f1:32:de:84:57:4c:3b:05:0e:8c:97:6c:d1:55:96:2c:
         05:74:48:32:b3:06:b6:8f:9a:39:9d:02:9c:ff:37:4c:f0:64:
         20:84:57:8f:a9:88:ac:ad:2a:03:f4:87:36:d9:d2:d9:db:a1:
         5c:f5:85:21:d2:22:7f:58:d3:ec:f5:70:4f:06:bf:af:78:9b:
         de:b6:50:59:04:3d:1a:b1:9d:b6:12:38:4a:20:eb:a0:0a:d1:
         31:9d:f2:2f:3a:d7:4d:d6:20:4a:74:1d:c6:10:4f:b1:4f:42:
         1a:34:c0:a1:34:bd:d4:56:36:23:76:5a:6a:35:d7:15:3e:7a:
         b4:75:ea:41:f7:a4:91:78:0a:75:a3:99:79:c6:e4:04:e4:a9:
         84:30:4f:c8:e3:c4:ef:0c:c0:a4:9d:42:09:df:4a:24:2f:c3:
         48:dc:38:1d:f8:14:9d:7c:b5:58:2f:12:98:d9:87:38:cb:90:
         8a:d3:7e:d8:ab:f6:0d:58:36:3f:f6:79:18:4f:c4:51:73:e7:
         41:df:93:5e:e3:a2:0f:5b:eb:81:78:1a:e2:b6:03:9b:2b:5c:
         5d:a1:d0:00:b0:37:22:aa:5b:fd:8f:a4:f1:bf:01:04:d7:04:
         35:d3:6f:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 12:00:52 2025 by rpki-client