Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/9/326130353a646663313a3530303a3a2f34302d3430203d3e203532303235.roa
File:                     326130353a646663313a3530303a3a2f34302d3430203d3e203532303235.roa (raw, json)
Hash identifier:          oiy30LDb7vTdVDftfrDltIplyhMOoStMOIgMHNj+sTc=
Subject key identifier:   AA:38:17:06:5F:3D:7C:1D:63:B8:59:D9:F8:13:C7:EE:84:B9:5B:B9
Certificate issuer:       /CN=46EF3896348D5F15EAE53B1980903A18328E4126
Certificate serial:       1D2EA60E2DCA54526DABC6D061FC93AA31BE7861
Authority key identifier: 46:EF:38:96:34:8D:5F:15:EA:E5:3B:19:80:90:3A:18:32:8E:41:26
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/46EF3896348D5F15EAE53B1980903A18328E4126.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/9/326130353a646663313a3530303a3a2f34302d3430203d3e203532303235.roa
Signing time:             Fri 04 Jul 2025 16:55:34 +0000
ROA not before:           Fri 04 Jul 2025 16:50:34 +0000
ROA not after:            Fri 03 Jul 2026 16:55:34 +0000
asID:                     52025
IP address blocks:        2a05:dfc1:500::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/9/46EF3896348D5F15EAE53B1980903A18328E4126.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/9/46EF3896348D5F15EAE53B1980903A18328E4126.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/46EF3896348D5F15EAE53B1980903A18328E4126.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 03:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:2e:a6:0e:2d:ca:54:52:6d:ab:c6:d0:61:fc:93:aa:31:be:78:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46EF3896348D5F15EAE53B1980903A18328E4126
        Validity
            Not Before: Jul  4 16:50:34 2025 GMT
            Not After : Jul  3 16:55:34 2026 GMT
        Subject: CN=AA3817065F3D7C1D63B859D9F813C7EE84B95BB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:08:44:35:52:ff:87:7f:ff:66:ff:bf:da:f9:
                    80:1b:6c:62:9d:aa:fa:dd:37:19:3c:01:82:5d:0f:
                    3d:68:f6:6a:3e:d7:d2:af:ee:45:39:5a:9f:25:86:
                    87:cf:bb:0a:c9:89:f7:80:54:a6:30:df:95:c1:e2:
                    f9:1e:5a:e9:fa:68:60:08:c7:2a:bf:6f:97:7a:99:
                    37:35:8b:5a:ac:47:50:20:e3:29:ca:ce:13:77:2d:
                    81:ed:7b:9b:dc:ec:50:85:1e:b3:0d:54:0e:d0:86:
                    a1:81:b2:5f:85:0a:d1:c5:75:a8:17:fe:c4:7c:15:
                    31:14:18:ff:0a:5c:cf:2e:a5:db:ac:28:58:db:e8:
                    f7:aa:2d:72:13:ff:fb:08:8d:e9:d6:42:35:0d:df:
                    fa:c4:41:31:e3:9f:88:1f:75:88:48:6c:fe:05:46:
                    9d:38:d7:24:21:be:ab:6a:55:96:5d:08:7d:62:8d:
                    e0:75:d8:93:b6:ea:f9:aa:4d:f6:59:f8:6d:38:52:
                    9e:26:b0:7a:87:e9:0a:41:8e:4e:c6:38:c6:54:50:
                    75:ef:4c:c9:7b:8c:d6:64:ef:1b:1e:48:3c:28:64:
                    ad:5f:2b:fb:a2:06:2b:94:e1:90:4b:c1:c4:f8:5f:
                    fb:5c:c7:a7:2d:eb:7f:65:08:5b:8e:32:97:bf:d0:
                    f1:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:38:17:06:5F:3D:7C:1D:63:B8:59:D9:F8:13:C7:EE:84:B9:5B:B9
            X509v3 Authority Key Identifier:
                keyid:46:EF:38:96:34:8D:5F:15:EA:E5:3B:19:80:90:3A:18:32:8E:41:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/9/46EF3896348D5F15EAE53B1980903A18328E4126.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/46EF3896348D5F15EAE53B1980903A18328E4126.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/9/326130353a646663313a3530303a3a2f34302d3430203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:500::/40

    Signature Algorithm: sha256WithRSAEncryption
         a5:e5:98:bb:45:e1:a8:50:bf:de:c4:71:8f:5f:70:29:80:af:
         3f:4a:84:c6:06:96:19:e8:a7:31:3f:e2:4e:48:1f:f3:c7:e2:
         05:93:f1:0e:29:b8:1d:6a:be:22:6b:1f:22:63:74:bb:2d:0c:
         24:6a:c7:5a:2b:4d:0e:28:0b:0a:64:d2:37:68:29:0e:8f:dd:
         15:6d:ec:64:61:d0:fc:6c:0d:db:f7:3d:c9:cc:c5:e1:c5:68:
         d8:9b:7f:12:d4:0a:8f:ff:30:ec:d0:99:de:45:3d:ca:43:76:
         53:a8:a2:4e:7e:27:f0:b2:dd:f9:c4:7a:2d:5a:a8:d4:60:d0:
         5b:fd:a8:d1:50:a7:63:7d:f0:c1:bb:da:29:13:8a:43:db:0c:
         f5:c0:f3:d0:61:1f:88:ec:c8:db:86:45:17:0d:b8:91:a2:47:
         46:1c:7e:f3:e3:f0:0f:28:6a:6f:73:12:4c:da:a0:af:14:54:
         74:e9:a7:ad:39:11:06:23:23:87:07:61:38:7a:4e:4f:f6:48:
         7f:d7:1c:a6:6f:42:bc:1d:73:5a:8c:46:5f:0a:82:8d:48:5e:
         75:ce:7a:45:bd:74:74:28:f2:1a:2e:ac:26:cc:53:8a:01:f3:
         18:01:6c:81:8d:18:5f:17:b3:f6:42:e7:d4:f5:36:76:8e:ff:
         a6:c3:cb:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 13:18:54 2025 by rpki-client