Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a313231343a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a313231343a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          uUD+jZ6347BbQTaLrWrp2aTNzJVOKDNxy//qBTQiefo=
Subject key identifier:   9C:BA:7F:9E:54:24:D3:7A:32:06:3F:71:8C:A8:E3:E4:25:0B:BE:28
Certificate issuer:       /CN=0AAD221E4070989D4939FACA0F0981AB26E93895
Certificate serial:       0BF40D7B0D310BC8F5BC984654B01F2F6096A499
Authority key identifier: 0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a313231343a3a2f34382d313238203d3e203532303235.roa
Signing time:             Thu 24 Apr 2025 13:19:36 +0000
ROA not before:           Thu 24 Apr 2025 13:14:36 +0000
ROA not after:            Thu 23 Apr 2026 13:19:36 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:1214::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Apr 2025 03:34:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:f4:0d:7b:0d:31:0b:c8:f5:bc:98:46:54:b0:1f:2f:60:96:a4:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AAD221E4070989D4939FACA0F0981AB26E93895
        Validity
            Not Before: Apr 24 13:14:36 2025 GMT
            Not After : Apr 23 13:19:36 2026 GMT
        Subject: CN=9CBA7F9E5424D37A32063F718CA8E3E4250BBE28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:b7:1c:d8:d1:7c:0c:bc:8a:21:bc:86:46:1b:
                    03:1c:df:63:4a:0c:cd:cc:28:20:66:41:fb:3f:5a:
                    22:ac:a3:a7:4a:2b:ac:13:1b:3e:9e:62:1a:10:71:
                    6f:ad:89:b5:61:66:56:4b:e0:6a:03:59:b5:61:c8:
                    1d:2b:d0:ec:4f:46:a6:34:03:f5:13:18:e8:85:06:
                    e6:0f:07:bb:26:88:b6:c0:43:78:59:d8:d6:38:f2:
                    56:35:50:77:a8:25:c8:60:5e:4f:a0:c6:e3:39:2e:
                    af:f6:3f:38:cb:d1:8d:56:b8:a8:77:43:d4:b8:b2:
                    59:1d:c8:0a:48:73:f9:22:a6:30:ab:b2:89:df:7e:
                    bb:20:22:40:cc:f2:2b:1a:81:27:a1:c5:5a:a5:3d:
                    e4:1a:d0:e8:3a:46:29:a2:ed:a3:e0:10:ea:07:e0:
                    26:f4:7e:90:e8:86:ac:a2:28:fa:7b:41:20:ff:74:
                    2a:3e:34:aa:ef:29:ee:ec:15:8e:b3:88:0f:90:40:
                    56:54:48:7a:9f:81:25:58:89:b3:98:0f:74:5f:61:
                    ad:e5:97:b0:d0:04:aa:c4:7c:07:bf:bb:86:ee:2d:
                    78:57:cb:69:f2:7b:90:63:ba:0f:ed:77:13:c7:8d:
                    61:77:fc:b3:ac:83:aa:41:c3:20:9f:e3:11:fd:af:
                    3b:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:BA:7F:9E:54:24:D3:7A:32:06:3F:71:8C:A8:E3:E4:25:0B:BE:28
            X509v3 Authority Key Identifier:
                keyid:0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a313231343a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:1214::/48

    Signature Algorithm: sha256WithRSAEncryption
         bb:35:51:a6:e8:9e:92:fb:72:7b:67:4a:d3:cd:94:22:bf:a6:
         be:90:09:59:05:f9:3d:41:ba:67:66:b2:c6:bc:7e:84:92:c1:
         af:90:e6:d0:8b:fd:14:17:b9:e6:e5:e8:62:6e:20:d9:4a:46:
         23:92:13:da:3d:4f:d5:60:7b:cb:86:c3:e2:dc:98:50:8c:67:
         eb:17:4c:87:ac:a1:27:59:83:0d:e2:cc:dc:fb:8c:c4:15:30:
         b6:d0:f3:29:c5:75:86:19:fe:a7:13:e2:23:43:22:73:cb:d2:
         2c:d9:b3:a3:06:c3:d0:01:64:d8:ec:b3:20:5f:f1:3a:07:56:
         26:69:b0:e7:ac:27:18:e6:9e:04:a3:63:6e:35:51:4a:ee:bd:
         b9:f7:d8:38:56:b1:c3:7e:59:6f:42:b5:52:6e:fa:c9:f2:a2:
         8b:3a:8a:13:79:a7:a7:41:66:69:03:d8:5e:10:72:c1:94:05:
         bb:b2:c4:da:21:f5:e7:89:39:84:34:32:2d:57:d0:ac:4a:bf:
         f8:c0:8f:b1:31:70:b7:0c:8d:cd:67:bc:19:d1:0c:80:ac:f1:
         84:8c:82:17:0f:35:20:31:2a:b4:5e:2d:17:8d:04:88:63:9d:
         45:aa:d0:9f:50:2f:bf:74:27:13:0b:16:13:b8:1f:d1:83:8f:
         04:b1:f1:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 15:15:58 2025 by rpki-client