Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a65613a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a65613a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          8AzGtd0fevRcyx2Cj3YCPFByGBwFgy0i0TJYF2tn8aQ=
Subject key identifier:   77:E5:15:CA:5D:35:5E:CC:E0:27:B8:4C:05:42:E6:07:31:17:25:57
Certificate issuer:       /CN=0AAD221E4070989D4939FACA0F0981AB26E93895
Certificate serial:       2F90FA7EA09BE21F92968611235C2550D28517C0
Authority key identifier: 0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a65613a3a2f34382d313238203d3e203532303235.roa
Signing time:             Thu 24 Apr 2025 13:19:36 +0000
ROA not before:           Thu 24 Apr 2025 13:14:36 +0000
ROA not after:            Thu 23 Apr 2026 13:19:36 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:ea::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 May 2025 23:12:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:90:fa:7e:a0:9b:e2:1f:92:96:86:11:23:5c:25:50:d2:85:17:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AAD221E4070989D4939FACA0F0981AB26E93895
        Validity
            Not Before: Apr 24 13:14:36 2025 GMT
            Not After : Apr 23 13:19:36 2026 GMT
        Subject: CN=77E515CA5D355ECCE027B84C0542E60731172557
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:4d:a2:89:75:55:7e:00:77:87:12:af:6f:b6:
                    f7:3a:70:28:1f:bb:12:03:dd:a2:74:2f:3a:34:5c:
                    22:59:1e:d3:23:fb:76:c0:f6:4c:35:27:28:e1:69:
                    d8:af:03:18:70:72:5f:17:61:34:75:6c:1f:f4:82:
                    71:5b:07:ae:1b:73:91:33:b9:04:54:09:5f:17:29:
                    35:d0:e8:ea:76:38:3b:85:2d:85:08:44:c3:08:77:
                    ae:79:17:0a:84:72:da:f8:0b:f7:ad:ec:34:aa:42:
                    c9:47:1a:83:e6:68:55:fc:78:ff:2f:f4:bc:40:36:
                    e8:86:bc:17:87:1a:af:13:f9:0a:07:39:1f:ac:b7:
                    e7:76:59:14:73:ee:a8:b1:6b:bc:fb:b3:cd:e6:6b:
                    ca:9c:67:f1:68:6a:d2:97:40:39:1b:ba:6f:04:41:
                    09:81:d7:91:f7:ca:a3:99:5c:f5:e1:09:e5:a9:69:
                    cb:79:dd:39:1e:8d:76:92:38:dd:e5:8c:70:fe:f5:
                    f2:28:83:75:a9:7c:bd:6b:e3:d4:c7:2e:49:37:ff:
                    f6:a7:b2:45:42:97:d9:88:02:ce:ea:81:f7:df:98:
                    eb:68:15:f4:2a:ca:18:ae:81:eb:a7:03:a5:fb:e5:
                    ca:d4:9a:a7:a6:ae:e0:8c:f7:c6:77:0a:8e:94:3f:
                    09:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:E5:15:CA:5D:35:5E:CC:E0:27:B8:4C:05:42:E6:07:31:17:25:57
            X509v3 Authority Key Identifier:
                keyid:0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a65613a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:ea::/48

    Signature Algorithm: sha256WithRSAEncryption
         b4:65:66:f0:4d:01:98:b8:fc:43:77:d8:7a:1d:92:4f:ff:b3:
         97:34:23:3b:39:16:1a:98:09:65:f4:6c:3b:ae:69:8f:25:fa:
         95:a3:90:52:c9:06:6b:9b:40:4f:72:4b:db:0b:28:30:c9:8f:
         a1:68:94:05:b0:41:b7:3c:bf:58:26:b9:26:71:e2:5e:d2:b1:
         5f:a7:7d:50:2c:76:67:fa:df:19:0e:6a:d8:70:0c:61:93:ca:
         0c:e8:0a:4e:95:40:a0:8a:a8:32:b2:73:e7:5b:7c:20:92:4e:
         40:ac:0f:41:fb:7f:f0:0d:ad:94:91:e8:26:0f:2f:43:e9:0b:
         6c:5d:b3:cb:13:e3:03:24:49:f8:ee:3d:10:92:de:b8:05:ab:
         90:1c:92:ff:21:4a:32:7f:52:30:bd:cf:0d:07:b9:c6:cc:62:
         9c:ac:1f:2d:5a:46:d0:08:3e:3f:18:ff:19:40:02:ae:0d:48:
         b7:d5:e4:0d:f9:fb:ab:f3:7a:d4:9f:dd:68:fd:31:36:76:0c:
         ff:8f:d0:3a:1a:d7:1f:ad:1d:f0:ea:93:d0:e0:54:af:fc:9c:
         0c:c8:ee:f6:70:75:e1:90:4a:f1:47:6b:1c:52:5f:c1:31:ad:
         b3:81:1e:04:f5:be:ea:01:ff:bb:2e:e8:19:9d:f6:f6:66:b9:
         90:6f:79:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 09:23:38 2025 by rpki-client