Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/7/3137322e39392e3233332e302f32342d3332203d3e203532303235.roa
File:                     3137322e39392e3233332e302f32342d3332203d3e203532303235.roa (raw, json)
Hash identifier:          JvXtifldslhqvdYMHBvEeKW8NvWejJ8jMhrsifSSmeA=
Subject key identifier:   1A:6E:E7:77:22:9E:83:7F:F4:59:BD:DD:56:D7:81:E4:D9:0C:67:AE
Certificate issuer:       /CN=716ED138312A679CA1B1F88B3EF7301163F16356
Certificate serial:       657F570A3F8AB714088A9B0C718D4B0113E06C9B
Authority key identifier: 71:6E:D1:38:31:2A:67:9C:A1:B1:F8:8B:3E:F7:30:11:63:F1:63:56
Authority info access:    rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/716ED138312A679CA1B1F88B3EF7301163F16356.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/7/3137322e39392e3233332e302f32342d3332203d3e203532303235.roa
Signing time:             Sun 22 Mar 2026 00:32:30 +0000
ROA not before:           Sun 22 Mar 2026 00:27:30 +0000
ROA not after:            Sun 21 Mar 2027 00:32:30 +0000
asID:                     52025
IP address blocks:        172.99.233.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/7/716ED138312A679CA1B1F88B3EF7301163F16356.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/7/716ED138312A679CA1B1F88B3EF7301163F16356.mft
                          rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/716ED138312A679CA1B1F88B3EF7301163F16356.cer
                          rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.crl
                          rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 26 Mar 2026 12:46:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:7f:57:0a:3f:8a:b7:14:08:8a:9b:0c:71:8d:4b:01:13:e0:6c:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=716ED138312A679CA1B1F88B3EF7301163F16356
        Validity
            Not Before: Mar 22 00:27:30 2026 GMT
            Not After : Mar 21 00:32:30 2027 GMT
        Subject: CN=1A6EE777229E837FF459BDDD56D781E4D90C67AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:96:1d:41:94:c2:58:ab:5f:83:cb:fd:bb:2b:
                    b0:e0:e0:e2:d6:77:6e:e2:13:c1:10:c3:3f:f5:5f:
                    68:5e:f4:f0:ee:dc:be:f3:1f:f3:54:64:74:ef:e1:
                    6d:3d:b8:31:14:89:c5:68:c8:33:66:e1:e9:04:bd:
                    bb:96:36:c9:f0:6f:88:dc:39:79:f8:c0:3a:b8:f1:
                    05:27:9b:6d:ce:10:c0:d4:47:05:fb:54:a7:d0:c7:
                    7a:59:fd:9e:69:8b:8f:fe:5e:e1:08:4b:46:5f:f2:
                    06:cc:08:58:62:2d:77:0c:5c:40:f4:25:d3:9c:51:
                    4c:a2:d8:ab:b6:e3:f7:e3:fa:21:29:10:96:97:89:
                    5d:ac:40:19:1a:75:79:da:a9:39:02:5c:62:14:21:
                    ea:64:37:0c:a7:78:81:af:01:57:f0:27:ee:92:a0:
                    47:2a:48:e4:87:fa:3b:e5:c7:6a:80:df:33:c5:43:
                    5e:61:44:33:33:b2:46:74:9e:ce:a7:d5:5c:60:f0:
                    c0:06:72:7e:37:62:96:03:98:cc:8e:3e:9e:52:63:
                    a1:c6:37:2b:ff:5c:f2:73:c7:f0:3c:3d:c0:d0:19:
                    d5:2b:c1:2a:2a:94:df:94:2c:b3:28:91:64:9f:f4:
                    58:1c:a0:9c:3e:58:4a:37:bd:b7:46:21:c8:1c:8e:
                    31:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:6E:E7:77:22:9E:83:7F:F4:59:BD:DD:56:D7:81:E4:D9:0C:67:AE
            X509v3 Authority Key Identifier:
                keyid:71:6E:D1:38:31:2A:67:9C:A1:B1:F8:8B:3E:F7:30:11:63:F1:63:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/7/716ED138312A679CA1B1F88B3EF7301163F16356.crl

            Authority Information Access:
                CA Issuers - URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/716ED138312A679CA1B1F88B3EF7301163F16356.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/7/3137322e39392e3233332e302f32342d3332203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.99.233.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:91:8d:37:0d:85:4b:99:20:ad:14:2a:ed:91:1d:bd:7e:de:
         85:32:b1:54:ee:c9:b7:80:ba:9f:6d:f1:f9:7b:fc:f7:bc:6c:
         4a:b8:4f:ce:c7:e1:f8:fb:af:fe:31:dd:51:4b:a5:0c:8d:28:
         8e:a3:3e:a3:82:92:0e:ed:0f:82:12:cc:14:99:a5:e0:a1:b8:
         30:8e:9d:7e:2c:9c:a6:39:9b:8b:47:f1:82:62:e5:45:7e:64:
         b3:b0:cb:cf:c7:b6:b1:cd:4a:60:f3:df:0c:fd:6b:8e:41:06:
         89:09:b8:d5:d5:c0:93:6d:f0:82:e0:3e:a0:40:4b:07:28:23:
         38:7c:2e:82:e4:54:14:a8:b2:43:45:cf:f2:d4:4b:95:77:48:
         cf:0e:9c:c3:43:24:a6:76:57:7f:79:58:1f:93:da:af:5d:e1:
         22:eb:ad:63:0a:b0:9d:5f:1c:7b:fa:47:01:de:e2:fe:93:4b:
         75:d7:04:84:a3:46:57:7d:49:63:2b:08:f5:4c:b2:fe:e3:e2:
         81:49:5f:30:90:80:a8:24:77:42:81:42:c4:17:82:9c:55:b3:
         a2:fc:8d:0c:c8:d2:6f:9d:03:79:11:31:8e:e8:a0:3f:a0:23:
         b3:d7:1d:4b:9c:89:e9:e3:f7:b9:4b:33:a0:3a:eb:84:61:b3:
         31:cc:3e:be
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIUZX9XCj+KtxQIipsMcY1LARPgbJswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzE2RUQxMzgzMTJBNjc5Q0ExQjFGODhCM0VGNzMwMTE2
M0YxNjM1NjAeFw0yNjAzMjIwMDI3MzBaFw0yNzAzMjEwMDMyMzBaMDMxMTAvBgNV
BAMTKDFBNkVFNzc3MjI5RTgzN0ZGNDU5QkRERDU2RDc4MUU0RDkwQzY3QUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxlh1BlMJYq1+Dy/27K7Dg4OLW
d27iE8EQwz/1X2he9PDu3L7zH/NUZHTv4W09uDEUicVoyDNm4ekEvbuWNsnwb4jc
OXn4wDq48QUnm23OEMDURwX7VKfQx3pZ/Z5pi4/+XuEIS0Zf8gbMCFhiLXcMXED0
JdOcUUyi2Ku24/fj+iEpEJaXiV2sQBkadXnaqTkCXGIUIepkNwyneIGvAVfwJ+6S
oEcqSOSH+jvlx2qA3zPFQ15hRDMzskZ0ns6n1Vxg8MAGcn43YpYDmMyOPp5SY6HG
Nyv/XPJzx/A8PcDQGdUrwSoqlN+ULLMokWSf9FgcoJw+WEo3vbdGIcgcjjEfAgMB
AAGjggIVMIICETAdBgNVHQ4EFgQUGm7ndyKeg3/0Wb3dVteB5NkMZ64wHwYDVR0j
BBgwFoAUcW7RODEqZ5yhsfiLPvcwEWPxY1YwDgYDVR0PAQH/BAQDAgeAMG4GA1Ud
HwRnMGUwY6BhoF+GXXJzeW5jOi8vcnBraS0wMS5wZHhuZXQudWsvcmVwby9wYXJh
ZG94bmV0d29ya3MvNy83MTZFRDEzODMxMkE2NzlDQTFCMUY4OEIzRUY3MzAxMTYz
RjE2MzU2LmNybDCBiQYIKwYBBQUHAQEEfTB7MHkGCCsGAQUFBzAChm1yc3luYzov
L2tyaWxsLmFjY3VyaXN0ZWNobm9sb2dpZXMuY2EvcmVwby9BY2N1cmlzLVRlY2hu
b2xvZ2llcy8wLzcxNkVEMTM4MzEyQTY3OUNBMUIxRjg4QjNFRjczMDExNjNGMTYz
NTYuY2VyMIGHBggrBgEFBQcBCwR7MHkwdwYIKwYBBQUHMAuGa3JzeW5jOi8vcnBr
aS0wMS5wZHhuZXQudWsvcmVwby9wYXJhZG94bmV0d29ya3MvNy8zMTM3MzIyZTM5
MzkyZTMyMzMzMzJlMzAyZjMyMzQyZDMzMzIyMDNkM2UyMDM1MzIzMDMyMzUucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBACsY+kwDQYJKoZIhvcNAQELBQADggEBAIiRjTcNhUuZIK0UKu2RHb1+
3oUysVTuybeAup9t8fl7/Pe8bEq4T87H4fj7r/4x3VFLpQyNKI6jPqOCkg7tD4IS
zBSZpeChuDCOnX4snKY5m4tH8YJi5UV+ZLOwy8/HtrHNSmDz3wz9a45BBokJuNXV
wJNt8ILgPqBASwcoIzh8LoLkVBSoskNFz/LUS5V3SM8OnMNDJKZ2V395WB+T2q9d
4SLrrWMKsJ1fHHv6RwHe4v6TS3XXBISjRld9SWMrCPVMsv7j4oFJXzCQgKgkd0KB
QsQXgpxVs6L8jQzI0m+dA3kRMY7ooD+gI7PXHUucienj97lLM6A664RhszHMPr4=
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:21:04 2026 by rpki-client