Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a6331623a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a6331623a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          Fo1vXA3lah5PuNPgQtGxum/bMAQpzu1rv7PVQzRFuYk=
Subject key identifier:   5E:50:2C:A2:99:22:B7:36:04:77:F9:19:9E:F9:C9:5A:3E:99:D3:FA
Certificate issuer:       /CN=0AAD221E4070989D4939FACA0F0981AB26E93895
Certificate serial:       6FBA7FDB7E5F37D535FE92EC05E6631186B66B50
Authority key identifier: 0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a6331623a3a2f34382d313238203d3e203532303235.roa
Signing time:             Thu 24 Apr 2025 13:19:28 +0000
ROA not before:           Thu 24 Apr 2025 13:14:28 +0000
ROA not after:            Thu 23 Apr 2026 13:19:28 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:c1b::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 May 2025 23:12:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:ba:7f:db:7e:5f:37:d5:35:fe:92:ec:05:e6:63:11:86:b6:6b:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AAD221E4070989D4939FACA0F0981AB26E93895
        Validity
            Not Before: Apr 24 13:14:28 2025 GMT
            Not After : Apr 23 13:19:28 2026 GMT
        Subject: CN=5E502CA29922B7360477F9199EF9C95A3E99D3FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:5d:86:f1:35:a1:c2:d7:cc:75:91:3f:d9:1c:
                    59:ce:4e:b7:d2:c9:7b:46:ea:00:54:5e:5f:c2:72:
                    41:28:8f:52:15:3a:73:cc:ed:06:41:4d:ac:3c:19:
                    9d:67:03:96:f0:eb:a9:01:d3:20:a6:28:5c:4a:84:
                    04:cf:f0:b4:9b:a9:5f:a0:2d:5f:33:0b:e7:ee:ba:
                    7c:62:c7:5c:b7:46:48:8f:4c:a6:8d:da:22:2a:59:
                    68:10:e1:bb:1a:c9:94:41:7b:e5:a0:c6:fd:5b:7c:
                    17:aa:b6:a1:a5:3f:c6:cb:3c:7e:e8:df:f6:90:97:
                    8c:ac:8e:5e:26:33:6b:ea:a0:b3:67:a2:31:89:6e:
                    38:f9:93:6d:6e:c4:fa:41:17:0e:4a:a1:f1:df:14:
                    9c:4d:5f:86:37:16:39:2e:0d:a6:76:c5:ee:3d:0b:
                    59:25:1d:95:bf:29:f9:69:24:63:f6:16:c6:86:78:
                    4e:76:d9:0e:e2:e9:42:a1:08:70:95:16:47:87:d3:
                    11:dd:3c:b9:cc:f9:d6:30:51:0d:44:14:7a:d8:a0:
                    cd:d4:1f:38:36:da:a6:cf:74:96:88:6a:5b:0c:4a:
                    17:95:52:4b:19:0e:9e:79:03:a6:6c:44:b2:9d:05:
                    c9:19:6b:21:59:d5:59:d8:c0:0c:d9:fc:c6:48:c8:
                    7f:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:50:2C:A2:99:22:B7:36:04:77:F9:19:9E:F9:C9:5A:3E:99:D3:FA
            X509v3 Authority Key Identifier:
                keyid:0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a6331623a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:c1b::/48

    Signature Algorithm: sha256WithRSAEncryption
         94:ec:ca:77:da:9f:4f:68:a5:2c:35:db:5d:37:52:bd:38:53:
         1d:e1:5c:5f:72:73:39:89:0d:cf:85:01:85:07:1a:e3:78:3e:
         87:df:cc:02:57:c7:a2:3d:63:dd:dd:42:39:11:c1:e8:e0:4d:
         58:9a:64:f1:77:2c:2b:9b:42:6c:28:04:77:c1:ee:13:43:ca:
         5d:4b:ab:0c:37:fd:b2:c8:cd:36:17:69:e1:bd:e5:40:f6:27:
         ed:77:40:96:d7:44:40:f0:01:0c:1d:05:3c:67:d2:8d:f3:aa:
         36:cf:fd:e4:89:7f:2c:dd:a6:db:6f:2e:bb:69:a2:55:20:34:
         71:b8:ae:ec:52:26:18:35:10:04:58:58:66:7d:11:51:6d:c9:
         a6:65:50:61:f6:1e:93:d7:49:51:05:e3:8c:20:23:b6:77:0c:
         f2:b0:81:58:85:b1:3a:83:96:1f:bd:62:33:43:50:a2:da:fb:
         8d:d7:6d:ab:87:4a:26:f9:f5:fb:44:60:c2:7d:1a:14:ef:8b:
         2a:fb:74:02:df:26:87:6f:0a:26:2a:e2:a0:67:be:10:5f:b4:
         b9:31:ed:e7:df:30:b7:da:41:60:08:3f:ef:8b:91:a5:ce:9b:
         16:bc:76:4a:ab:2b:fe:13:95:4e:d1:12:76:52:06:ff:80:7f:
         20:c2:51:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 09:56:15 2025 by rpki-client