Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a373231663a3a2f34382d3438203d3e203532303235.roa
File:                     326130353a646663343a373231663a3a2f34382d3438203d3e203532303235.roa (raw, json)
Hash identifier:          VpgZN2eqaf8+QRc2yRsHenXK+s/jjPVERcJSksys1Zc=
Subject key identifier:   74:2A:D7:D6:D6:64:06:5B:07:C3:65:23:99:B6:E8:23:65:01:F2:B7
Certificate issuer:       /CN=0AAD221E4070989D4939FACA0F0981AB26E93895
Certificate serial:       2E2E3A78DCAF64AFDCD1E16F243DA6098DA91959
Authority key identifier: 0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a373231663a3a2f34382d3438203d3e203532303235.roa
Signing time:             Thu 24 Apr 2025 13:19:29 +0000
ROA not before:           Thu 24 Apr 2025 13:14:29 +0000
ROA not after:            Thu 23 Apr 2026 13:19:29 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:721f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 May 2025 23:12:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:2e:3a:78:dc:af:64:af:dc:d1:e1:6f:24:3d:a6:09:8d:a9:19:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AAD221E4070989D4939FACA0F0981AB26E93895
        Validity
            Not Before: Apr 24 13:14:29 2025 GMT
            Not After : Apr 23 13:19:29 2026 GMT
        Subject: CN=742AD7D6D664065B07C3652399B6E8236501F2B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:7d:83:09:39:77:e8:e1:f7:eb:ef:2a:e7:07:
                    c1:0a:4b:b7:45:fc:63:b0:72:91:39:30:3d:05:9f:
                    8b:06:e6:17:ea:35:1b:34:df:69:3b:eb:04:4b:c3:
                    1e:dd:98:c2:bb:a6:bc:a1:d4:a9:e9:8c:10:6c:6c:
                    d1:1c:e6:5f:cb:e8:68:b7:15:c3:0f:60:fb:dc:ee:
                    6a:d2:cd:ff:f1:6d:fc:9a:dc:58:52:8f:37:ab:33:
                    27:34:a7:e6:de:b4:2c:d2:e9:47:16:1e:45:a0:2e:
                    0b:dd:e7:50:38:9d:00:78:4e:bb:50:94:e2:46:57:
                    59:17:60:8d:71:99:98:93:a9:5f:8b:5f:9a:8a:f9:
                    22:7a:51:28:f5:dc:c2:ad:21:e3:85:ad:96:73:4e:
                    dd:e3:4e:c0:46:53:0d:b9:f5:28:57:e4:25:82:c9:
                    fa:f2:fb:a2:26:ef:c0:11:a4:12:60:e9:43:34:7c:
                    89:1e:fc:18:38:bd:12:d6:94:c2:52:35:94:34:6f:
                    9f:b3:6f:3a:00:80:39:14:b6:fa:75:bc:8c:1e:c1:
                    14:4d:40:94:24:48:94:c7:bc:5d:93:67:8c:3c:ee:
                    52:8b:8a:89:4d:ba:39:04:4f:dd:2b:59:62:48:f9:
                    41:ff:85:17:8f:50:25:6b:cd:db:8a:0d:2f:e8:fc:
                    10:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:2A:D7:D6:D6:64:06:5B:07:C3:65:23:99:B6:E8:23:65:01:F2:B7
            X509v3 Authority Key Identifier:
                keyid:0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a373231663a3a2f34382d3438203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:721f::/48

    Signature Algorithm: sha256WithRSAEncryption
         34:ba:f7:bd:65:42:bc:aa:fc:7b:c0:d2:20:49:42:df:f9:f1:
         31:26:1f:1e:c8:2e:02:45:ba:44:6c:3f:92:fb:d5:46:9f:68:
         3e:64:f5:c8:e9:c8:1a:37:b9:92:e3:49:e2:e5:b1:84:83:40:
         c9:88:95:96:d8:f2:84:19:d4:58:40:80:ac:30:87:c4:50:85:
         d5:33:ba:ea:84:28:98:86:04:15:af:a5:ed:43:db:f7:82:16:
         b8:89:99:8b:b2:03:74:8b:8d:9b:75:a8:4b:85:16:0a:43:73:
         35:45:49:5a:ed:f4:cc:8a:c6:c5:56:05:2d:dd:2d:91:00:18:
         8e:62:4c:2d:7d:10:13:a3:78:53:e3:61:11:bf:62:ab:05:d3:
         da:83:5a:a8:2d:32:10:be:3c:0b:64:27:52:a3:d2:ae:a7:1d:
         bf:cd:0a:80:50:b9:e1:b2:c3:8d:92:81:2e:a0:21:e5:f6:b6:
         57:86:0b:24:6d:72:f8:60:a0:81:ca:d1:b0:1e:dd:a8:40:99:
         54:7e:96:4b:b4:7f:08:62:43:d6:5b:ef:b7:f8:f9:33:94:c4:
         de:32:6f:28:65:15:5a:a0:b4:a9:f2:5e:c2:b1:fa:cc:72:92:
         a0:69:a1:08:f5:88:60:72:e3:ac:32:b0:8a:24:96:dd:7c:51:
         2a:78:b0:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 09:10:15 2025 by rpki-client