Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a313131333a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a313131333a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          QfxqtVALYnGD9iZWxaKmB39qh0xKvZ12Fl2papCf6cI=
Subject key identifier:   B5:5F:6D:0B:50:A4:86:18:28:16:6F:DA:DA:F1:9A:35:B2:61:CE:12
Certificate issuer:       /CN=0AAD221E4070989D4939FACA0F0981AB26E93895
Certificate serial:       6124623665EDAA058EC4E5F4F0C546297925CCD6
Authority key identifier: 0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a313131333a3a2f34382d313238203d3e203532303235.roa
Signing time:             Thu 24 Apr 2025 13:19:29 +0000
ROA not before:           Thu 24 Apr 2025 13:14:29 +0000
ROA not after:            Thu 23 Apr 2026 13:19:29 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:1113::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Apr 2025 12:28:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:24:62:36:65:ed:aa:05:8e:c4:e5:f4:f0:c5:46:29:79:25:cc:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AAD221E4070989D4939FACA0F0981AB26E93895
        Validity
            Not Before: Apr 24 13:14:29 2025 GMT
            Not After : Apr 23 13:19:29 2026 GMT
        Subject: CN=B55F6D0B50A4861828166FDADAF19A35B261CE12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:02:93:b4:5d:08:9a:be:bd:e1:1a:0a:24:7c:
                    2c:04:fe:07:74:96:2b:47:68:ed:89:68:4c:c1:46:
                    9b:3c:fb:c6:d4:aa:3f:b7:d3:32:87:87:47:e2:d6:
                    7a:04:65:4a:ad:b9:74:9e:ce:a3:fc:2c:97:33:46:
                    f7:38:28:6c:53:32:5b:aa:2d:8e:da:e6:d0:b8:44:
                    b4:74:b9:bb:29:f2:42:f5:8a:6c:30:12:c6:bc:58:
                    b9:89:6d:2e:d5:5b:2b:18:92:3e:3c:54:12:14:f3:
                    76:de:cd:70:90:c1:53:85:0f:a4:04:31:2a:fc:46:
                    08:d2:31:4a:2a:2b:a3:27:b4:2e:48:14:d5:38:89:
                    0a:7b:0f:45:ca:99:94:6b:83:8c:a6:1d:99:5b:25:
                    eb:32:bf:d0:c6:71:63:57:53:f7:3d:f3:c4:47:62:
                    e3:0c:81:05:90:01:84:08:1e:87:16:94:4e:a1:ff:
                    69:2f:f3:f3:8e:80:cc:20:bf:db:ba:a3:2c:80:14:
                    7b:be:47:2d:e5:19:71:7c:3a:4f:cf:f4:93:8b:dc:
                    86:06:40:01:4f:86:fd:bb:8e:98:85:8e:36:c8:cc:
                    ce:39:49:28:a5:a6:3d:70:aa:d0:6b:2f:d0:b6:d6:
                    67:8c:de:a9:91:70:67:4b:bf:67:1a:e6:37:2e:68:
                    4a:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:5F:6D:0B:50:A4:86:18:28:16:6F:DA:DA:F1:9A:35:B2:61:CE:12
            X509v3 Authority Key Identifier:
                keyid:0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a313131333a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:1113::/48

    Signature Algorithm: sha256WithRSAEncryption
         0c:36:8f:8a:43:ab:f6:88:9b:bb:5d:3c:fa:2e:2b:0f:d0:4c:
         52:c9:29:33:4e:96:8f:ad:1f:ca:cd:06:5b:df:52:1f:c2:9a:
         37:ba:d2:a5:de:e2:98:e4:c6:3a:79:18:74:1b:45:74:7d:95:
         1d:a5:42:12:1b:20:ec:ef:5c:36:ee:32:44:22:f1:3f:e0:ed:
         35:5b:23:cc:17:1a:6c:98:47:24:54:db:42:68:96:1c:95:cd:
         b5:2b:42:e3:74:b7:96:35:2d:72:04:d4:2a:36:bd:a2:f3:f7:
         a3:fa:77:37:dd:03:b4:53:85:c1:3f:9a:68:7b:a1:12:3c:32:
         e4:ff:2f:51:dd:ca:9e:e1:af:2c:b5:2c:d7:74:76:c3:8a:be:
         4b:4b:0f:c2:29:fc:7d:4f:a1:23:5d:94:05:8b:5f:21:87:6b:
         26:14:5a:62:47:8f:6d:b5:a6:61:97:26:f9:4a:c2:6f:29:f3:
         21:0e:cc:43:ec:e7:10:cf:d2:68:02:5c:e8:98:f7:04:38:4d:
         5f:ee:62:31:c1:e4:99:3c:1a:2a:34:d6:82:4e:bc:54:be:29:
         8b:6b:c2:ce:4a:1a:3c:42:bf:e3:8a:57:c7:64:d4:dd:cc:8d:
         59:59:ef:00:35:f8:c0:cc:59:da:9b:fc:a0:e9:40:bd:2f:da:
         86:d0:7d:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 00:39:52 2025 by rpki-client