Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a6631313a3a2f34382d3438203d3e203532303235.roa
File:                     326130353a646663343a6631313a3a2f34382d3438203d3e203532303235.roa (raw, json)
Hash identifier:          BVf/zl0QXSQmycooXdZ2JW1HHuFUPpI1LSvCHlFhWOY=
Subject key identifier:   A2:6D:72:0B:78:C5:9F:67:DC:F9:7F:73:B9:3D:BD:E6:0A:43:E5:C4
Certificate issuer:       /CN=0AAD221E4070989D4939FACA0F0981AB26E93895
Certificate serial:       3422B763028D830AB18E7D04D726A263FEF19A58
Authority key identifier: 0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a6631313a3a2f34382d3438203d3e203532303235.roa
Signing time:             Tue 17 Jun 2025 04:21:37 +0000
ROA not before:           Tue 17 Jun 2025 04:16:37 +0000
ROA not after:            Tue 16 Jun 2026 04:21:37 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:f11::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Jun 2025 01:17:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:22:b7:63:02:8d:83:0a:b1:8e:7d:04:d7:26:a2:63:fe:f1:9a:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AAD221E4070989D4939FACA0F0981AB26E93895
        Validity
            Not Before: Jun 17 04:16:37 2025 GMT
            Not After : Jun 16 04:21:37 2026 GMT
        Subject: CN=A26D720B78C59F67DCF97F73B93DBDE60A43E5C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:87:36:37:d7:a4:20:72:b6:7d:bc:91:fc:5c:
                    f8:83:2b:94:92:ce:66:b7:73:e9:dc:08:ec:47:4c:
                    69:8d:03:4b:5d:98:7e:10:0b:3c:1f:8c:59:b2:4d:
                    ee:ee:2a:39:b2:ae:b2:2d:9f:24:54:bc:cb:aa:f0:
                    9f:72:37:b9:d6:05:64:1d:45:52:98:62:33:07:41:
                    7c:dc:47:a6:6e:1f:ac:f7:2d:66:fe:c8:6c:20:0b:
                    52:66:da:17:f1:0d:94:31:a3:b6:b8:5f:be:dd:38:
                    a5:64:c0:c8:41:7a:78:fe:08:10:6d:8b:6f:dc:88:
                    25:65:5c:f5:18:18:5f:6e:0f:b3:e8:aa:b2:8d:46:
                    e2:c9:7b:ef:31:8b:95:e9:63:6d:27:4c:8c:63:26:
                    e2:ad:e3:31:b5:f4:37:6c:d3:b6:7d:d3:56:81:bb:
                    5a:d1:0f:f0:93:8b:3b:54:c9:da:f5:fb:69:e7:1a:
                    ab:df:cb:b8:75:37:e5:89:16:b4:fc:1a:f3:68:06:
                    3e:ba:91:0a:f1:03:c1:40:2b:cb:38:72:2b:03:0b:
                    e6:f9:73:70:6d:6b:be:14:51:85:01:8b:b8:2c:5e:
                    bd:77:b6:19:50:14:0b:f7:36:9e:41:d5:de:76:20:
                    a3:c7:cb:69:ee:c8:43:b7:51:b6:16:96:c1:ca:c3:
                    f3:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:6D:72:0B:78:C5:9F:67:DC:F9:7F:73:B9:3D:BD:E6:0A:43:E5:C4
            X509v3 Authority Key Identifier:
                keyid:0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a6631313a3a2f34382d3438203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:f11::/48

    Signature Algorithm: sha256WithRSAEncryption
         83:16:13:9f:31:d5:c6:3c:fc:c7:34:69:33:e5:9c:a9:e0:c0:
         db:a4:a4:03:aa:1f:72:f3:86:fa:bf:03:c7:3f:41:b7:ea:2e:
         17:20:e9:fb:9a:7f:26:0b:13:78:fc:83:0b:b1:ea:a0:bf:61:
         aa:1e:33:9c:e9:3e:c3:3c:50:83:e1:16:22:c7:ef:d7:85:1c:
         8e:48:1f:19:27:bd:59:86:db:81:44:4d:68:99:35:92:7c:94:
         e4:d3:e4:c8:18:35:cf:4d:07:12:f5:9d:a4:0a:e8:60:10:47:
         16:36:0f:89:99:f4:66:23:f3:3a:14:35:15:0a:0c:66:13:3d:
         a9:f8:61:b2:6e:ad:dd:f6:e0:21:c0:db:74:05:c7:61:d8:62:
         71:c3:f7:39:98:6b:d9:c1:70:66:82:01:5c:94:14:33:10:84:
         bf:b2:27:cf:9f:98:41:68:a7:e9:62:17:cf:29:4a:19:0b:67:
         e5:95:71:6d:1b:ba:3d:63:10:20:9e:47:a8:4e:74:cc:35:76:
         ef:32:fd:85:f9:5e:02:38:38:96:a1:bf:30:41:4b:36:16:e9:
         8d:9f:fb:09:8d:96:7e:39:63:9e:c0:ae:6f:32:91:60:0a:02:
         17:fe:67:08:2d:c7:40:4f:21:29:40:f6:a3:8e:b7:72:3d:95:
         58:6c:04:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:46:51 2025 by rpki-client