Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a6631653a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a6631653a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          VKwPqcweHFyT6sD5ov2xNe2bBlRcjs2SWZPuGI+BNW0=
Subject key identifier:   B4:09:D5:85:D5:C1:60:5B:7E:8C:4A:55:6A:6B:A5:41:4C:87:9A:53
Certificate issuer:       /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial:       637D06AA233672E3D1EECD2B51DAAA9D4F6E4BF9
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a6631653a3a2f34382d313238203d3e203532303235.roa
Signing time:             Thu 03 Jul 2025 15:54:05 +0000
ROA not before:           Thu 03 Jul 2025 15:49:05 +0000
ROA not after:            Thu 02 Jul 2026 15:54:05 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:f1e::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 02:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:7d:06:aa:23:36:72:e3:d1:ee:cd:2b:51:da:aa:9d:4f:6e:4b:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
        Validity
            Not Before: Jul  3 15:49:05 2025 GMT
            Not After : Jul  2 15:54:05 2026 GMT
        Subject: CN=B409D585D5C1605B7E8C4A556A6BA5414C879A53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:dc:69:75:aa:f5:60:1d:b3:f5:14:42:4a:43:
                    a9:fc:7d:e0:f3:0b:32:12:92:65:5d:5d:fc:c1:54:
                    20:9c:f6:e9:99:24:9b:da:c0:be:0f:94:bf:b2:39:
                    46:4f:e3:79:4c:16:be:47:57:78:17:71:00:16:75:
                    44:15:0a:71:ea:43:ca:06:2d:c7:4f:85:03:f2:93:
                    fa:59:0d:c3:f1:2f:a4:0d:4e:f6:e8:ca:9c:a9:d4:
                    8d:e0:22:b6:f0:6d:f6:ff:d6:39:1f:27:4e:0d:67:
                    b2:3b:14:7b:f6:ca:30:50:a6:ff:15:88:76:52:65:
                    7a:e8:dd:ef:ec:4d:3e:d4:b4:f9:0e:bd:3a:9b:be:
                    9e:c6:ee:97:12:80:d9:ea:e9:9b:a6:1a:24:0c:e7:
                    c9:98:43:eb:c7:8f:e3:80:ca:ac:a6:12:77:02:39:
                    71:5c:f1:54:d8:74:c3:4e:bf:b6:c7:73:76:b9:db:
                    09:c2:4c:36:bb:97:fa:a7:fa:d1:c5:49:9d:9b:c3:
                    ca:62:2c:16:4e:cd:31:6d:31:a6:af:8d:ee:c8:6c:
                    d7:d5:de:bf:d9:0f:74:a2:a3:d6:67:89:e2:a4:16:
                    c1:8f:e4:1c:e2:0b:17:67:89:9f:53:ce:8b:94:49:
                    4f:a7:58:dd:a0:2a:65:8d:98:3e:b4:5d:a4:5b:0f:
                    2d:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:09:D5:85:D5:C1:60:5B:7E:8C:4A:55:6A:6B:A5:41:4C:87:9A:53
            X509v3 Authority Key Identifier:
                keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a6631653a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:f1e::/48

    Signature Algorithm: sha256WithRSAEncryption
         10:dd:0c:2b:cc:78:df:1b:a6:f4:6b:19:37:b1:ce:83:e9:bd:
         78:59:ab:89:de:cb:ce:1c:03:86:f5:42:29:65:2b:2c:d9:a7:
         e8:e9:6c:12:60:7a:c2:54:69:92:a9:37:cc:5d:af:11:50:e9:
         27:5a:85:f1:64:62:21:95:0b:4b:27:11:6d:e4:57:0c:f9:73:
         92:8b:37:51:89:ea:59:48:03:cb:64:fc:f0:bc:92:56:e6:ca:
         f2:b8:24:4d:1f:52:a1:34:1d:05:2a:45:68:75:68:13:c4:48:
         1e:f6:74:71:76:01:e7:4d:b7:2e:ee:dd:2b:14:bd:55:3b:9f:
         64:c7:9b:41:bc:5c:8a:7a:fc:ff:5b:20:0e:db:3c:72:ef:d0:
         b0:02:31:e3:83:10:0f:fd:68:3c:3c:22:31:17:f0:07:69:90:
         58:3d:64:96:45:03:5a:ae:06:4e:23:4b:17:cc:95:f2:59:c2:
         cb:24:ad:ba:73:a2:63:29:84:b5:4a:14:ef:5b:9c:75:06:28:
         92:8d:6b:d0:d6:c9:2a:53:08:29:ac:7d:75:e8:80:41:c7:d7:
         e3:2f:6c:1d:e0:89:3c:53:c2:bf:1d:65:ab:84:7e:d4:e7:a3:
         97:37:1f:7b:9c:10:8a:1d:4f:1b:59:1d:39:39:98:80:3d:a8:
         34:23:63:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 12:02:55 2025 by rpki-client