Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a3831363a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a3831363a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          2X7r1tTr1n7kU4c1Eka+VZRBZqQzQ/XmmIQsSTZkbzc=
Subject key identifier:   54:FB:59:B3:6C:7D:2A:59:A0:0B:C2:4E:E5:BB:A7:90:8D:64:83:65
Certificate issuer:       /CN=0AAD221E4070989D4939FACA0F0981AB26E93895
Certificate serial:       6FFC798EE9F9275921C446B1B3E115F1B7C62E87
Authority key identifier: 0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a3831363a3a2f34382d313238203d3e203532303235.roa
Signing time:             Thu 24 Apr 2025 13:19:26 +0000
ROA not before:           Thu 24 Apr 2025 13:14:26 +0000
ROA not after:            Thu 23 Apr 2026 13:19:26 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:816::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 May 2025 23:12:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:fc:79:8e:e9:f9:27:59:21:c4:46:b1:b3:e1:15:f1:b7:c6:2e:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AAD221E4070989D4939FACA0F0981AB26E93895
        Validity
            Not Before: Apr 24 13:14:26 2025 GMT
            Not After : Apr 23 13:19:26 2026 GMT
        Subject: CN=54FB59B36C7D2A59A00BC24EE5BBA7908D648365
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:20:ca:1a:f4:df:24:e3:f2:db:0c:b3:3e:2a:
                    58:66:a8:1a:92:fc:36:de:61:19:7c:52:42:50:41:
                    29:c8:66:e7:f0:47:56:2f:bc:34:56:d9:c4:7e:17:
                    82:0f:70:43:40:23:40:b1:00:4b:17:10:e0:32:53:
                    2f:36:af:02:52:a5:7e:01:37:5f:5e:97:37:5d:4e:
                    6f:b3:6b:ea:4d:8c:bc:03:0b:c8:d0:59:93:dd:bf:
                    77:97:6e:ea:0f:4d:c9:3c:9d:87:53:2f:ae:d4:b8:
                    15:b6:6d:f4:50:e5:14:3f:1c:95:78:b3:ad:64:7d:
                    d4:fb:da:87:64:fd:b1:11:e7:f4:11:8e:12:f9:6a:
                    82:47:a5:1a:a3:ce:60:30:5d:ba:1f:18:21:88:db:
                    0b:88:ee:c1:a1:96:06:aa:02:fc:62:7a:04:31:04:
                    33:b8:b8:72:08:cd:33:ee:c2:ff:d6:40:f9:fb:ac:
                    2b:17:55:20:47:ee:cc:ca:a8:20:c1:74:50:30:ff:
                    47:d6:48:11:e3:6f:8c:13:6f:0a:4f:c2:15:34:6b:
                    25:7f:d5:c2:0c:3f:a5:d8:c3:b4:74:6e:03:d4:f8:
                    f9:7b:c6:40:c4:0c:43:14:4e:02:80:65:ff:29:9d:
                    27:c8:79:21:62:59:1d:4c:52:6c:5b:95:07:0a:72:
                    16:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:FB:59:B3:6C:7D:2A:59:A0:0B:C2:4E:E5:BB:A7:90:8D:64:83:65
            X509v3 Authority Key Identifier:
                keyid:0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a3831363a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:816::/48

    Signature Algorithm: sha256WithRSAEncryption
         02:81:e6:e4:5d:64:3e:16:a4:a4:05:4d:23:7d:41:c7:ab:70:
         49:02:61:43:d7:37:63:ca:c8:85:25:d1:18:2e:22:0b:44:f6:
         fa:a2:10:b0:3d:0d:c0:ec:12:d9:55:77:00:89:e2:f8:ae:8f:
         d6:1f:09:cb:82:df:04:f6:06:c3:2b:34:92:35:fb:9a:46:17:
         c7:6d:9d:82:6b:72:33:a0:e1:f3:d8:cf:06:97:37:8f:d1:10:
         da:dc:69:74:70:c5:52:b5:40:bb:be:0a:bc:f9:60:16:ec:3d:
         e3:a7:f0:3e:f4:0f:70:d9:68:dc:b2:d2:fd:02:d2:fb:bd:f8:
         64:11:a1:71:df:2e:7b:aa:dc:d9:a5:1f:1f:84:e1:f4:0d:6d:
         32:ff:e8:6c:d0:b2:9e:e5:bd:43:e5:f5:16:88:89:1b:86:7b:
         5c:aa:59:1c:18:eb:1f:0b:db:e9:86:39:a0:79:fe:ad:e8:b3:
         4b:6b:24:8d:8b:23:6b:72:c6:d5:5e:74:52:6b:d6:10:ba:f4:
         a7:c0:2c:30:0a:97:b5:5b:93:96:7b:89:c1:20:31:78:51:b7:
         f4:24:92:03:d7:06:8d:b5:24:eb:ab:1f:f9:fd:31:8b:53:46:
         7e:27:c3:2b:a7:6f:ae:81:87:b5:8d:e5:4c:7b:86:45:89:92:
         51:e2:2c:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 12:29:37 2025 by rpki-client