Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a383136663a3a2f34382d3438203d3e203532303235.roa
File:                     326130353a646663343a383136663a3a2f34382d3438203d3e203532303235.roa (raw, json)
Hash identifier:          q0XluveKWaStmvngaxmcHjw7O2foTuidJrwcQxKpQpg=
Subject key identifier:   AC:C4:CC:AB:26:F7:9E:56:29:F0:DD:3B:19:CF:2F:D5:FC:04:2C:AB
Certificate issuer:       /CN=0AAD221E4070989D4939FACA0F0981AB26E93895
Certificate serial:       56003033DC14CB9D02639C4358506C9EEF1CF551
Authority key identifier: 0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a383136663a3a2f34382d3438203d3e203532303235.roa
Signing time:             Thu 24 Apr 2025 13:19:37 +0000
ROA not before:           Thu 24 Apr 2025 13:14:37 +0000
ROA not after:            Thu 23 Apr 2026 13:19:37 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:816f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 May 2025 23:12:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:00:30:33:dc:14:cb:9d:02:63:9c:43:58:50:6c:9e:ef:1c:f5:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AAD221E4070989D4939FACA0F0981AB26E93895
        Validity
            Not Before: Apr 24 13:14:37 2025 GMT
            Not After : Apr 23 13:19:37 2026 GMT
        Subject: CN=ACC4CCAB26F79E5629F0DD3B19CF2FD5FC042CAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:54:0f:ad:4f:8e:7f:a3:60:cb:d7:95:55:28:
                    cc:61:c6:87:29:70:fa:f6:e2:86:88:3b:67:cc:7b:
                    7d:43:34:a1:a2:10:e6:59:32:b4:fa:2b:1b:5b:9e:
                    96:73:63:41:a8:fc:65:a3:9b:df:d0:84:13:fb:35:
                    b1:ba:1d:9a:aa:cf:d8:f5:93:c1:87:c3:80:7a:60:
                    86:03:37:6d:69:f1:9a:31:32:b9:88:fa:5b:ac:26:
                    6e:dd:c9:e7:06:eb:18:e5:8d:16:fc:11:a4:63:15:
                    21:ac:4a:c5:4c:e3:e5:ff:66:4e:0b:73:8e:fa:8a:
                    c2:40:7c:58:b4:36:3d:ed:d0:dc:06:bf:79:8e:1a:
                    40:2c:a7:83:d7:23:3d:40:0f:4c:96:83:1e:a6:b5:
                    85:43:e4:f2:cc:9e:09:81:12:68:ba:cc:e8:d8:8b:
                    81:cf:ec:ce:bc:aa:95:7a:07:53:1b:38:9d:0e:27:
                    5f:3f:49:f1:21:95:53:60:ce:fc:2c:79:8e:ca:cd:
                    60:9c:1b:ab:23:96:8a:e2:db:5c:e9:e4:60:0e:d0:
                    b7:d3:38:40:df:c5:35:bd:99:95:d5:4e:8a:b3:ad:
                    18:51:05:7d:40:16:5a:ed:49:4d:58:3c:91:ed:14:
                    f0:0d:9f:6d:1d:ed:18:4d:0e:42:9b:06:ac:90:09:
                    f0:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:C4:CC:AB:26:F7:9E:56:29:F0:DD:3B:19:CF:2F:D5:FC:04:2C:AB
            X509v3 Authority Key Identifier:
                keyid:0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a383136663a3a2f34382d3438203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:816f::/48

    Signature Algorithm: sha256WithRSAEncryption
         b0:ed:d7:3e:dc:11:18:74:b1:66:fe:b4:c2:b3:fe:e5:2c:50:
         36:36:ab:22:f5:fc:4f:18:d4:a1:13:a7:ed:99:61:b3:a9:c1:
         a5:5d:59:85:9e:a0:68:54:fd:76:21:43:61:f0:7b:04:81:72:
         9f:4e:d3:72:1f:45:79:f7:80:6b:94:cc:74:0f:dd:ed:34:d0:
         27:45:fc:63:0b:e1:90:62:38:0f:8b:49:0c:c2:5f:30:df:5a:
         ca:90:ce:39:de:1c:4f:11:cc:48:94:8f:ce:fa:b2:12:c4:23:
         84:f6:ee:4d:13:a8:f7:c5:ce:a8:78:9d:47:e7:9c:ca:d3:1b:
         8f:76:7c:0f:65:35:9d:7a:fe:c9:a0:66:2c:8b:1b:2b:5c:fb:
         76:d9:d1:db:b5:56:cc:04:1e:c3:08:b8:8b:0a:57:b8:42:24:
         44:7a:be:6e:39:56:a2:92:da:4d:88:ba:84:aa:d3:6c:ef:68:
         ff:cf:9d:de:f0:a1:41:0d:ea:8d:32:32:8f:67:6f:2b:63:dc:
         96:b6:87:ef:3d:e0:b4:fd:fc:bb:a0:3d:5e:92:ae:e0:b6:c9:
         f1:90:aa:13:1f:9b:bb:1a:3e:d1:f1:d6:c1:d6:c7:94:ac:a7:
         58:12:d2:49:07:85:4d:6a:8a:79:3b:92:33:fb:ff:17:d2:01:
         10:2f:60:08
-----BEGIN CERTIFICATE-----
MIIFIjCCBAqgAwIBAgIUVgAwM9wUy50CY5xDWFBsnu8c9VEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEFBRDIyMUU0MDcwOTg5RDQ5MzlGQUNBMEYwOTgxQUIy
NkU5Mzg5NTAeFw0yNTA0MjQxMzE0MzdaFw0yNjA0MjMxMzE5MzdaMDMxMTAvBgNV
BAMTKEFDQzRDQ0FCMjZGNzlFNTYyOUYwREQzQjE5Q0YyRkQ1RkMwNDJDQUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZVA+tT45/o2DL15VVKMxhxocp
cPr24oaIO2fMe31DNKGiEOZZMrT6KxtbnpZzY0Go/GWjm9/QhBP7NbG6HZqqz9j1
k8GHw4B6YIYDN21p8ZoxMrmI+lusJm7dyecG6xjljRb8EaRjFSGsSsVM4+X/Zk4L
c476isJAfFi0Nj3t0NwGv3mOGkAsp4PXIz1AD0yWgx6mtYVD5PLMngmBEmi6zOjY
i4HP7M68qpV6B1MbOJ0OJ18/SfEhlVNgzvwseY7KzWCcG6sjlori21zp5GAO0LfT
OEDfxTW9mZXVToqzrRhRBX1AFlrtSU1YPJHtFPANn20d7RhNDkKbBqyQCfA5AgMB
AAGjggIsMIICKDAdBgNVHQ4EFgQUrMTMqyb3nlYp8N07Gc8v1fwELKswHwYDVR0j
BBgwFoAUCq0iHkBwmJ1JOfrKDwmBqybpOJUwDgYDVR0PAQH/BAQDAgeAMG4GA1Ud
HwRnMGUwY6BhoF+GXXJzeW5jOi8vcnBraS0wMS5wZHhuZXQudWsvcmVwby9wYXJh
ZG94bmV0d29ya3MvMi8wQUFEMjIxRTQwNzA5ODlENDkzOUZBQ0EwRjA5ODFBQjI2
RTkzODk1LmNybDCBkwYIKwYBBQUHAQEEgYYwgYMwgYAGCCsGAQUFBzAChnRyc3lu
YzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYz
ZTAxODU3NTVjOTFiZTNmOWQvMi8wQUFEMjIxRTQwNzA5ODlENDkzOUZBQ0EwRjA5
ODFBQjI2RTkzODk1LmNlcjCBkQYIKwYBBQUHAQsEgYQwgYEwfwYIKwYBBQUHMAuG
c3JzeW5jOi8vcnBraS0wMS5wZHhuZXQudWsvcmVwby9wYXJhZG94bmV0d29ya3Mv
Mi8zMjYxMzAzNTNhNjQ2NjYzMzQzYTM4MzEzNjY2M2EzYTJmMzQzODJkMzQzODIw
M2QzZTIwMzUzMjMwMzIzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF38SBbzANBgkqhkiG9w0BAQsF
AAOCAQEAsO3XPtwRGHSxZv60wrP+5SxQNjarIvX8TxjUoROn7Zlhs6nBpV1ZhZ6g
aFT9diFDYfB7BIFyn07Tch9FefeAa5TMdA/d7TTQJ0X8YwvhkGI4D4tJDMJfMN9a
ypDOOd4cTxHMSJSPzvqyEsQjhPbuTROo98XOqHidR+ecytMbj3Z8D2U1nXr+yaBm
LIsbK1z7dtnR27VWzAQewwi4iwpXuEIkRHq+bjlWopLaTYi6hKrTbO9o/8+d3vCh
QQ3qjTIyj2dvK2PclraH7z3gtP38u6A9XpKu4LbJ8ZCqEx+buxo+0fHWwdbHlKyn
WBLSSQeFTWqKeTuSM/v/F9IBEC9gCA==
-----END CERTIFICATE-----
Generated at Sat May 10 12:41:50 2025 by rpki-client