Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a3a2f33322d3332203d3e203532303235.roa
File:                     326130353a646663343a3a2f33322d3332203d3e203532303235.roa (raw, json)
Hash identifier:          EukOf9LhxRJB/26T1CDwFt3P30n4BFscVzF1aHX1b4U=
Subject key identifier:   AB:E0:43:D6:DC:6C:72:A0:CC:6A:EB:EE:81:5A:48:BC:56:DE:30:61
Certificate issuer:       /CN=0AAD221E4070989D4939FACA0F0981AB26E93895
Certificate serial:       5AD056EA471DCF0FB46A0A21370096E028BFD7E2
Authority key identifier: 0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a3a2f33322d3332203d3e203532303235.roa
Signing time:             Thu 12 Jun 2025 23:21:32 +0000
ROA not before:           Thu 12 Jun 2025 23:16:32 +0000
ROA not after:            Thu 11 Jun 2026 23:21:32 +0000
asID:                     52025
IP address blocks:        2a05:dfc4::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Jun 2025 01:17:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:d0:56:ea:47:1d:cf:0f:b4:6a:0a:21:37:00:96:e0:28:bf:d7:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AAD221E4070989D4939FACA0F0981AB26E93895
        Validity
            Not Before: Jun 12 23:16:32 2025 GMT
            Not After : Jun 11 23:21:32 2026 GMT
        Subject: CN=ABE043D6DC6C72A0CC6AEBEE815A48BC56DE3061
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:15:8c:37:a0:0b:4f:f3:7f:b1:6a:d8:44:ea:
                    9f:e7:77:7c:c1:d7:e5:25:4f:6a:73:9c:ed:8a:9e:
                    82:d4:d1:ac:77:70:c4:fe:a0:d5:3b:25:c7:52:44:
                    d8:a6:cd:cf:a4:21:17:fe:7f:15:d1:11:67:40:d9:
                    3b:28:40:24:9f:9b:08:3b:a7:a0:73:fc:f3:6c:14:
                    1b:10:8e:04:ce:c4:7b:fe:95:74:0e:00:d0:5f:66:
                    26:7f:06:99:37:f2:1e:76:b7:ea:7e:a7:9b:9a:1a:
                    e0:dd:fd:24:62:e0:f3:14:c0:01:d5:21:0a:c5:b8:
                    f8:05:ee:97:e4:03:56:7f:d7:f6:9c:7c:fc:72:8b:
                    e3:af:bc:be:57:2c:63:6a:db:f8:dd:c2:12:46:c6:
                    f0:48:99:47:36:9a:05:76:b0:14:c9:49:cf:87:a9:
                    4f:37:5e:97:c7:71:8a:ce:fa:7b:db:73:bb:f2:7e:
                    d5:f4:73:ee:b6:56:e6:ba:61:d7:c8:1f:83:9a:c4:
                    9b:ee:ee:eb:fb:81:f5:c4:47:da:55:ab:7a:c7:7e:
                    da:69:b6:cd:75:ef:9b:4e:be:73:65:2d:9f:b3:4e:
                    05:b8:56:c7:8c:12:99:e2:f6:bf:5c:b3:be:1b:29:
                    43:fa:93:3c:0c:22:15:a8:f5:ed:22:02:f6:06:27:
                    d9:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:E0:43:D6:DC:6C:72:A0:CC:6A:EB:EE:81:5A:48:BC:56:DE:30:61
            X509v3 Authority Key Identifier:
                keyid:0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a3a2f33322d3332203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4::/32

    Signature Algorithm: sha256WithRSAEncryption
         1b:3a:39:31:6b:55:d9:c2:b4:5a:e3:1d:a3:3c:70:66:69:5c:
         ab:48:b5:ca:35:9b:ac:cf:6a:31:33:97:ea:bc:9b:27:47:7e:
         ac:91:08:9c:a8:21:d8:f7:53:1f:d1:3b:9c:7a:f0:6b:a8:42:
         9c:c2:62:9b:36:48:2d:ae:77:9f:ed:05:5b:90:cb:c5:fa:36:
         7c:1a:11:07:dd:d8:40:83:c1:ae:ef:86:e4:b4:9c:33:94:10:
         cc:a8:3d:30:36:b0:3e:60:6a:f2:f7:75:78:aa:ef:5f:6f:2f:
         9f:dd:dc:c4:f0:75:79:82:77:a7:0f:09:54:a8:42:54:7a:d5:
         81:88:a7:32:a6:fb:e1:12:76:9f:cf:4f:44:19:86:5b:b9:15:
         01:dd:20:c1:5a:97:84:04:bb:bd:f4:d9:2b:f2:77:a9:71:dc:
         07:5b:b7:b1:35:33:ea:29:28:99:ce:13:3a:63:ff:57:14:3b:
         1d:7c:51:d1:de:09:9f:c4:6f:5c:65:00:16:a3:c0:7a:74:7d:
         01:a3:2e:59:54:dc:41:eb:64:e4:ad:68:12:60:fd:b8:b4:b6:
         74:a1:ac:f1:48:1b:9a:87:2e:62:c8:dc:a4:8b:1c:09:20:3d:
         74:f4:0e:7c:d1:5e:72:4d:83:67:05:fa:34:cc:b5:ec:02:8e:
         50:a6:25:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 09:25:20 2025 by rpki-client