Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/9/326130353a646663313a3430303a3a2f34302d3430203d3e203532303235.roa
File:                     326130353a646663313a3430303a3a2f34302d3430203d3e203532303235.roa (raw, json)
Hash identifier:          6ND8wDi/Ae2QJCAFqNwb9p7utV06LRSlH0HvemX13Fg=
Subject key identifier:   63:1D:88:9E:CC:67:A3:FC:21:47:C2:2C:06:AC:E5:35:ED:79:25:42
Certificate issuer:       /CN=46EF3896348D5F15EAE53B1980903A18328E4126
Certificate serial:       649300906FCA3C4FC0040A8EBCE4192DDC027870
Authority key identifier: 46:EF:38:96:34:8D:5F:15:EA:E5:3B:19:80:90:3A:18:32:8E:41:26
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/46EF3896348D5F15EAE53B1980903A18328E4126.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/9/326130353a646663313a3430303a3a2f34302d3430203d3e203532303235.roa
Signing time:             Fri 04 Jul 2025 16:55:33 +0000
ROA not before:           Fri 04 Jul 2025 16:50:33 +0000
ROA not after:            Fri 03 Jul 2026 16:55:33 +0000
asID:                     52025
IP address blocks:        2a05:dfc1:400::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/9/46EF3896348D5F15EAE53B1980903A18328E4126.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/9/46EF3896348D5F15EAE53B1980903A18328E4126.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/46EF3896348D5F15EAE53B1980903A18328E4126.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 03:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:93:00:90:6f:ca:3c:4f:c0:04:0a:8e:bc:e4:19:2d:dc:02:78:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46EF3896348D5F15EAE53B1980903A18328E4126
        Validity
            Not Before: Jul  4 16:50:33 2025 GMT
            Not After : Jul  3 16:55:33 2026 GMT
        Subject: CN=631D889ECC67A3FC2147C22C06ACE535ED792542
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:03:29:5d:0e:d6:93:34:21:f7:c1:99:4d:c2:
                    38:38:45:db:18:9a:38:96:d8:36:10:1a:1a:20:c3:
                    2e:b7:9e:fd:2c:3f:ec:0d:5c:74:e4:f2:b2:52:42:
                    d8:76:d4:24:70:0f:f7:d0:c2:a2:49:ff:be:71:15:
                    ad:c6:5b:f0:13:29:c0:33:b3:e0:15:9b:d8:61:eb:
                    58:81:ef:29:c1:45:38:db:a5:ed:93:fb:c1:15:b9:
                    a6:83:f9:32:0d:cc:62:b5:2a:35:a4:fe:c0:5b:24:
                    2f:49:74:30:4f:4c:68:c2:de:bf:4b:12:1b:0b:47:
                    75:2a:0d:92:9f:c2:a2:99:19:c5:c7:43:2a:58:45:
                    c2:c4:f7:cc:90:19:44:1e:2f:a7:9b:a7:1c:0e:0d:
                    5d:f1:2c:63:b9:e1:7d:0c:d5:56:35:e4:39:db:b8:
                    f1:08:13:01:5b:e5:9c:57:c1:83:9d:df:3f:ec:99:
                    e6:00:59:07:d0:c5:91:e1:90:be:01:58:be:67:b9:
                    b3:e7:98:d6:cb:b4:de:e6:a1:79:34:06:c4:f5:48:
                    47:15:11:bd:2a:3d:56:93:ca:30:6c:1c:6a:e1:aa:
                    fc:52:88:2d:25:41:71:27:a8:f1:c5:27:95:c5:4d:
                    aa:0c:f6:4f:59:19:0f:5d:82:30:28:dc:b0:a9:e2:
                    bc:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:1D:88:9E:CC:67:A3:FC:21:47:C2:2C:06:AC:E5:35:ED:79:25:42
            X509v3 Authority Key Identifier:
                keyid:46:EF:38:96:34:8D:5F:15:EA:E5:3B:19:80:90:3A:18:32:8E:41:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/9/46EF3896348D5F15EAE53B1980903A18328E4126.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/46EF3896348D5F15EAE53B1980903A18328E4126.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/9/326130353a646663313a3430303a3a2f34302d3430203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:400::/40

    Signature Algorithm: sha256WithRSAEncryption
         8c:db:04:a7:ec:a8:91:53:b8:63:d1:cd:f3:51:b5:20:65:7b:
         5d:7b:7d:5b:1e:9a:78:ea:80:82:2a:c2:8e:f5:5f:a1:da:d1:
         32:1e:1f:26:37:56:dd:39:d4:23:d5:c1:cd:13:69:7b:68:c4:
         8c:6b:d0:14:5f:0b:6f:ea:c0:d4:5c:3c:b2:df:0f:ef:22:99:
         66:22:48:bf:a1:20:50:96:32:4d:8a:98:13:23:af:5c:fe:f5:
         27:25:5a:c6:1a:55:4e:30:31:98:7b:02:e0:25:35:ec:f7:36:
         45:ee:25:a5:ee:93:b5:bb:3d:dc:7c:8d:15:60:df:09:a3:5f:
         e5:05:3d:9a:61:d7:ab:fc:ba:4b:87:81:ac:7a:3f:70:30:ba:
         cb:75:e0:32:6a:1c:31:83:f4:e2:72:ff:07:5c:2c:09:38:7e:
         fd:14:77:5b:12:02:c7:13:cb:ab:5e:4d:2b:58:a9:cf:e2:a1:
         f5:74:c5:9c:7c:5a:84:5e:aa:17:56:22:ff:23:8c:d0:c1:33:
         7f:a4:51:e1:aa:5f:18:aa:6a:1e:84:b9:12:9e:6f:55:ee:24:
         fd:bd:db:58:61:65:72:09:89:7e:9e:29:1c:95:4a:d9:d8:01:
         0e:13:53:49:be:b3:68:ed:dc:42:83:f0:3b:a3:e5:a7:7b:f7:
         93:20:5b:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 13:13:05 2025 by rpki-client