Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/4/323630323a666137653a31343a3a2f34382d313238203d3e203532303235.roa
File:                     323630323a666137653a31343a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          2aKDzFTXpMWL4dstiT4zL5ef2Z3z/0n7K+Q9nN9E1XM=
Subject key identifier:   8A:24:E9:BB:E5:8F:6D:C9:A5:0A:B3:D2:AF:51:94:8E:60:27:04:D7
Certificate issuer:       /CN=edff5ee9c6c74e18ab3cd3244d38ecf6acc07c9835684cca08
Certificate serial:       5FA7C29D21C4DCB4B20AAE589CE70299E9DD23E5
Authority key identifier: 26:29:24:3C:9E:8D:A7:B1:4D:0A:BD:25:66:0A:74:AC:40:81:C8:8B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c88f518-5118-4680-a0ba-d2cc67b27b07/edff5ee9c6c74e18ab3cd3244d38ecf6acc07c9835684cca08.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/4/323630323a666137653a31343a3a2f34382d313238203d3e203532303235.roa
Signing time:             Thu 17 Apr 2025 01:19:21 +0000
ROA not before:           Thu 17 Apr 2025 01:14:21 +0000
ROA not after:            Thu 16 Apr 2026 01:19:21 +0000
asID:                     52025
IP address blocks:        2602:fa7e:14::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/4/2629243C9E8DA7B14D0ABD25660A74AC4081C88B.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/4/2629243C9E8DA7B14D0ABD25660A74AC4081C88B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c88f518-5118-4680-a0ba-d2cc67b27b07/edff5ee9c6c74e18ab3cd3244d38ecf6acc07c9835684cca08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c88f518-5118-4680-a0ba-d2cc67b27b07/9c88f518-5118-4680-a0ba-d2cc67b27b07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c88f518-5118-4680-a0ba-d2cc67b27b07/9c88f518-5118-4680-a0ba-d2cc67b27b07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c88f518-5118-4680-a0ba-d2cc67b27b07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 12:51:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:a7:c2:9d:21:c4:dc:b4:b2:0a:ae:58:9c:e7:02:99:e9:dd:23:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edff5ee9c6c74e18ab3cd3244d38ecf6acc07c9835684cca08
        Validity
            Not Before: Apr 17 01:14:21 2025 GMT
            Not After : Apr 16 01:19:21 2026 GMT
        Subject: CN=8A24E9BBE58F6DC9A50AB3D2AF51948E602704D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b3:0a:34:68:45:8f:72:ff:14:d6:4c:7f:3a:
                    f4:10:74:ad:73:93:98:22:e2:3b:c0:7a:b0:44:d5:
                    14:cc:26:af:af:dd:f5:19:8c:c8:4f:7c:c4:ea:f1:
                    9c:5a:3f:6f:02:39:25:7a:ac:8b:72:a5:53:8e:66:
                    1f:72:90:4c:d8:df:fb:89:fd:d0:4a:b6:33:39:b8:
                    b0:ef:4c:af:98:bb:68:fb:7c:fc:a4:79:9a:4e:bc:
                    3b:82:28:8f:48:21:ed:ff:b9:50:c8:e2:55:59:b7:
                    3f:0c:59:8a:ba:0d:7a:74:6b:d6:1c:55:1e:da:1a:
                    f3:1b:24:e0:2e:dd:6e:f9:ed:2b:36:bf:31:b4:fd:
                    9b:57:f2:50:fd:10:4c:e2:a4:f4:4e:52:3b:dd:47:
                    4e:bc:8b:dd:48:13:8d:d3:b9:db:4f:d6:ca:11:44:
                    01:66:7a:a0:0e:e0:0e:b4:00:3f:5d:a7:a4:d3:94:
                    59:e9:9d:bd:18:c1:c2:66:3d:0e:35:fd:b1:54:0b:
                    ab:42:e9:49:44:16:b3:9a:fe:0a:55:f4:1d:f0:fe:
                    80:f1:fd:67:06:90:3e:49:3b:52:44:ab:5f:25:ff:
                    48:98:e6:80:52:ca:b9:6d:cd:82:68:e8:75:e3:43:
                    77:5d:e8:bc:ed:62:14:0e:71:fc:45:02:21:65:67:
                    0c:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:24:E9:BB:E5:8F:6D:C9:A5:0A:B3:D2:AF:51:94:8E:60:27:04:D7
            X509v3 Authority Key Identifier:
                keyid:26:29:24:3C:9E:8D:A7:B1:4D:0A:BD:25:66:0A:74:AC:40:81:C8:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/4/2629243C9E8DA7B14D0ABD25660A74AC4081C88B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c88f518-5118-4680-a0ba-d2cc67b27b07/edff5ee9c6c74e18ab3cd3244d38ecf6acc07c9835684cca08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/4/323630323a666137653a31343a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa7e:14::/48

    Signature Algorithm: sha256WithRSAEncryption
         4e:53:74:c8:d1:dc:24:88:45:11:2d:1e:30:3d:4d:7f:df:ca:
         c3:b0:7f:0f:47:01:41:9c:e0:db:22:33:eb:d3:f8:e3:42:6d:
         d4:35:c6:fd:74:ac:78:64:f2:0d:2e:3e:56:dd:38:e4:2b:67:
         76:49:28:ce:27:6d:10:e0:8f:14:54:66:fc:21:82:3b:f1:07:
         43:c2:9a:16:a6:70:b7:95:46:9a:fd:3f:a0:52:5f:09:79:b8:
         92:89:79:d4:6e:d8:51:a8:89:6a:a4:ee:00:a2:fa:f2:1e:c8:
         ce:bb:ba:05:2b:9d:a3:52:d4:31:96:42:3d:f7:32:5e:b3:db:
         e9:92:bd:f4:66:cd:5d:95:d3:87:21:0e:ab:0b:39:44:6c:79:
         48:e8:6e:a2:82:c5:70:f2:8c:12:7f:9e:ca:bd:cf:c2:70:1b:
         a9:08:e9:de:49:78:35:fa:8c:bf:de:ba:6f:23:01:59:ad:c9:
         b4:77:96:f8:75:f8:6a:ec:27:c6:a9:55:30:7d:f4:ad:15:6e:
         86:16:f3:fd:68:cf:ac:9b:ee:04:8e:9b:ab:90:49:92:a9:fa:
         ba:75:1d:b4:63:37:ee:89:4a:20:3e:20:83:df:34:87:a9:82:
         a0:68:29:43:ba:87:16:dc:36:11:90:02:04:00:45:90:05:f7:
         d7:75:b0:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 15:05:13 2025 by rpki-client