Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a62643a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a62643a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          gzFKAg3nH+dizPqJMEF961AxB/SOsT5ecIHCfOax4fg=
Subject key identifier:   E1:1C:B5:6B:CF:E0:21:B2:B0:C0:EA:D7:E1:F3:E6:D3:F3:04:AD:5D
Certificate issuer:       /CN=0AAD221E4070989D4939FACA0F0981AB26E93895
Certificate serial:       48B373A08657C94866DF3C4AF441EB4EF2490379
Authority key identifier: 0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a62643a3a2f34382d313238203d3e203532303235.roa
Signing time:             Thu 24 Apr 2025 13:19:31 +0000
ROA not before:           Thu 24 Apr 2025 13:14:31 +0000
ROA not after:            Thu 23 Apr 2026 13:19:31 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:bd::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 May 2025 23:12:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:b3:73:a0:86:57:c9:48:66:df:3c:4a:f4:41:eb:4e:f2:49:03:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AAD221E4070989D4939FACA0F0981AB26E93895
        Validity
            Not Before: Apr 24 13:14:31 2025 GMT
            Not After : Apr 23 13:19:31 2026 GMT
        Subject: CN=E11CB56BCFE021B2B0C0EAD7E1F3E6D3F304AD5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:cc:c0:a8:3d:17:d4:f5:6b:d8:12:ee:3c:8d:
                    d2:46:ac:ed:5d:06:ca:8e:6a:6e:54:5e:c9:58:7d:
                    4c:7c:8e:0e:4d:42:9d:89:f0:5f:24:a7:ad:04:86:
                    29:90:27:2b:79:0c:aa:29:17:4c:4b:77:a5:67:d9:
                    e8:1d:a2:23:db:23:a6:2d:b0:a1:0c:91:20:dc:59:
                    42:18:76:e5:e0:ab:88:e3:a2:51:61:85:e4:a2:ba:
                    7d:aa:12:fb:f4:f1:57:ec:d4:e2:8c:6a:91:2f:f1:
                    53:79:94:ca:88:46:2e:75:85:89:d9:96:aa:77:e6:
                    ec:d7:c9:4c:1d:11:86:5c:74:f0:5a:04:71:84:9c:
                    45:f3:33:77:e5:7d:f5:f2:45:d6:d3:aa:af:4e:fc:
                    e8:8f:fe:7e:13:b3:24:33:62:d3:6c:17:9c:c5:88:
                    9c:7c:25:2a:32:c9:a8:40:7c:75:8b:3f:ac:95:b9:
                    25:e8:cd:18:5c:12:f1:29:dd:dc:ed:55:a0:93:87:
                    09:dc:76:57:54:df:64:61:c6:15:6c:74:d7:ec:a9:
                    33:ca:3f:32:7d:aa:ca:ba:b7:41:02:66:97:c8:b7:
                    22:fc:ec:70:ca:3b:d1:f6:61:07:89:b0:93:b0:6c:
                    35:7e:76:4a:06:f6:c5:98:14:b2:d9:e1:fc:03:25:
                    69:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:1C:B5:6B:CF:E0:21:B2:B0:C0:EA:D7:E1:F3:E6:D3:F3:04:AD:5D
            X509v3 Authority Key Identifier:
                keyid:0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a62643a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:bd::/48

    Signature Algorithm: sha256WithRSAEncryption
         a5:19:c5:4d:07:ae:03:7c:47:d2:de:76:3f:3a:06:79:42:ff:
         72:19:03:48:c3:03:8a:15:c5:ef:48:d1:8b:42:03:8a:72:2b:
         0d:74:9b:41:3b:a0:91:18:c5:eb:b6:d5:7c:14:f3:fc:e7:d2:
         8d:8d:50:9c:f5:5c:47:1f:cd:e5:6d:fb:1a:65:30:aa:cd:76:
         22:0d:b7:15:49:db:ab:c8:ea:96:6c:cf:fa:9e:fc:1c:d5:a8:
         9d:f9:8f:af:0f:e2:30:50:5a:95:36:5d:51:ed:d0:16:28:35:
         1a:2e:68:a3:35:36:e1:1a:34:49:6b:8e:a3:8c:37:31:fd:1f:
         7f:59:1a:02:2b:98:48:71:1a:54:fe:ff:a8:7e:87:75:3a:39:
         34:4b:56:95:5f:7b:46:50:53:30:0f:82:71:51:a7:5d:59:ab:
         2c:dc:09:b2:e4:b0:15:17:cb:d7:c8:83:f2:5f:e6:6c:5d:90:
         b4:54:8d:e3:e4:43:70:80:81:42:7c:0c:15:44:36:0e:bb:bd:
         85:c9:0c:b6:a6:c2:a6:b4:14:77:85:5d:14:77:1f:4e:a8:35:
         f4:f7:6f:e3:3b:a0:d0:ed:08:ed:fc:3e:9e:9c:08:62:fa:49:
         9a:51:d8:9d:2c:c0:7a:44:bc:74:c9:f8:85:9a:1c:20:f8:6b:
         1c:8a:9d:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 10:07:27 2025 by rpki-client