Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/7/3137322e39392e3233332e302f32342d3332203d3e203532303235.roa
File:                     3137322e39392e3233332e302f32342d3332203d3e203532303235.roa (raw, json)
Hash identifier:          KkRFwWoVouYPlN9FZtAB+SIniYegt5ZgOLBqQB0aq0w=
Subject key identifier:   38:6C:6D:BD:3B:DB:71:05:CC:21:6E:5F:4F:82:96:77:B3:45:F1:43
Certificate issuer:       /CN=716ED138312A679CA1B1F88B3EF7301163F16356
Certificate serial:       027BF01DFFE7F7F6A13153C188763ED887181093
Authority key identifier: 71:6E:D1:38:31:2A:67:9C:A1:B1:F8:8B:3E:F7:30:11:63:F1:63:56
Authority info access:    rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/716ED138312A679CA1B1F88B3EF7301163F16356.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/7/3137322e39392e3233332e302f32342d3332203d3e203532303235.roa
Signing time:             Sun 20 Apr 2025 00:09:12 +0000
ROA not before:           Sun 20 Apr 2025 00:04:12 +0000
ROA not after:            Sun 19 Apr 2026 00:09:12 +0000
asID:                     52025
IP address blocks:        172.99.233.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/7/716ED138312A679CA1B1F88B3EF7301163F16356.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/7/716ED138312A679CA1B1F88B3EF7301163F16356.mft
                          rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/716ED138312A679CA1B1F88B3EF7301163F16356.cer
                          rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.crl
                          rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 08:57:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:7b:f0:1d:ff:e7:f7:f6:a1:31:53:c1:88:76:3e:d8:87:18:10:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=716ED138312A679CA1B1F88B3EF7301163F16356
        Validity
            Not Before: Apr 20 00:04:12 2025 GMT
            Not After : Apr 19 00:09:12 2026 GMT
        Subject: CN=386C6DBD3BDB7105CC216E5F4F829677B345F143
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:c5:ff:f5:31:b0:37:0b:1b:18:04:04:fa:07:
                    35:1d:74:fc:e4:7d:9b:6d:95:26:7f:4f:50:40:ab:
                    4f:73:5c:0e:ef:2f:f6:b0:8a:4e:f0:a2:22:d4:74:
                    c1:51:a3:f7:c7:1d:46:3d:25:8d:f1:0d:6d:79:9d:
                    95:ac:de:e0:86:6a:25:14:1c:ed:db:5c:c1:20:49:
                    f6:b7:84:68:ee:fb:d9:8b:ec:a2:80:3e:17:15:6a:
                    6f:a7:55:c1:65:6a:11:1e:e3:f4:02:3a:28:31:67:
                    72:9c:9f:e0:77:6e:e0:ac:c6:a0:a0:dc:2c:e8:54:
                    d5:67:69:f7:b2:e7:39:16:5e:ff:fd:87:a8:99:c4:
                    d0:64:6c:8d:d2:17:02:3b:a6:ba:d0:ec:fe:88:41:
                    33:c5:53:c1:0d:2d:bb:fe:41:35:14:7d:4a:f9:4d:
                    70:0f:8b:70:85:0b:a4:fe:c4:0f:ad:d3:1a:55:4f:
                    dc:f4:cd:17:fb:3c:19:2b:5e:74:ab:6e:c4:e6:b1:
                    e6:8f:a4:03:fa:d2:4a:ac:fa:28:92:67:a0:cf:77:
                    5a:fc:44:17:6f:82:1f:4e:79:d5:b8:8a:f1:84:6e:
                    81:d2:d7:b5:aa:5e:6f:74:6a:9e:07:fd:0f:c6:74:
                    1d:37:ce:63:91:81:6f:b1:3d:86:d9:00:6a:e0:87:
                    a5:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:6C:6D:BD:3B:DB:71:05:CC:21:6E:5F:4F:82:96:77:B3:45:F1:43
            X509v3 Authority Key Identifier:
                keyid:71:6E:D1:38:31:2A:67:9C:A1:B1:F8:8B:3E:F7:30:11:63:F1:63:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/7/716ED138312A679CA1B1F88B3EF7301163F16356.crl

            Authority Information Access:
                CA Issuers - URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/716ED138312A679CA1B1F88B3EF7301163F16356.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/7/3137322e39392e3233332e302f32342d3332203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.99.233.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:b1:45:74:25:cf:32:c2:9c:51:03:b0:4a:55:a2:0c:02:0c:
         b9:e9:96:89:f0:f5:7a:2c:a4:da:71:16:cc:38:8a:bc:da:f2:
         fa:0e:af:e7:6b:4b:fc:22:89:dd:16:bf:08:14:f6:3d:68:7a:
         8b:c9:63:b8:98:b5:9f:e5:43:c8:66:5d:ec:0f:8d:5f:cd:cc:
         51:69:51:67:c9:a4:67:d5:f0:00:1c:a7:f8:84:9c:42:5e:a7:
         5c:02:b7:1d:69:b3:1a:f4:f9:41:95:39:0c:27:17:4d:f4:00:
         82:77:bc:5f:71:9b:fd:74:24:41:ae:81:c1:6d:5d:21:64:2d:
         ef:d8:f5:bf:d2:7f:15:e3:87:2b:22:ed:e8:a0:c1:ba:2f:f5:
         0f:c4:0d:55:12:77:c5:bd:96:58:03:27:01:db:19:59:47:71:
         f2:17:b9:1f:1c:eb:a0:4a:53:af:3d:3d:28:06:a6:0d:b7:1b:
         f7:4a:38:b5:a3:95:15:b6:d6:48:47:35:24:2f:37:d1:7b:c8:
         00:a4:16:5d:44:b8:a4:33:43:24:b1:58:09:56:67:51:b1:aa:
         12:9c:ca:f3:f8:96:2c:20:62:34:ff:ab:9a:ba:2a:aa:59:e9:
         58:a7:19:1f:f2:6a:4a:9d:77:59:a2:97:97:0f:d5:a2:57:3b:
         d3:9e:62:01
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun May 11 02:09:02 2025 by rpki-client