Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a3132663a3a2f34382d3438203d3e203532303235.roa
File:                     326130353a646663343a3132663a3a2f34382d3438203d3e203532303235.roa (raw, json)
Hash identifier:          GZJ/jSIKFv4ZD1QAGFOTKmcmf2t0EuW+juUfByXOxNE=
Subject key identifier:   E2:5E:D8:48:1D:45:37:69:3B:B4:EC:55:E4:3C:49:41:88:6B:39:D8
Certificate issuer:       /CN=0AAD221E4070989D4939FACA0F0981AB26E93895
Certificate serial:       6D94A158666B79C99857494F2549B89046E1905D
Authority key identifier: 0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a3132663a3a2f34382d3438203d3e203532303235.roa
Signing time:             Thu 24 Apr 2025 13:19:33 +0000
ROA not before:           Thu 24 Apr 2025 13:14:33 +0000
ROA not after:            Thu 23 Apr 2026 13:19:33 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:12f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 19:48:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:94:a1:58:66:6b:79:c9:98:57:49:4f:25:49:b8:90:46:e1:90:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AAD221E4070989D4939FACA0F0981AB26E93895
        Validity
            Not Before: Apr 24 13:14:33 2025 GMT
            Not After : Apr 23 13:19:33 2026 GMT
        Subject: CN=E25ED8481D4537693BB4EC55E43C4941886B39D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:3f:ce:37:4c:21:f7:a6:90:bf:43:d9:3e:17:
                    72:3b:dc:32:be:c1:18:15:8a:78:25:eb:92:b6:00:
                    46:bd:21:38:50:d1:15:dc:1d:28:fa:74:da:62:45:
                    07:1a:18:59:3c:8b:90:90:68:13:20:75:aa:74:73:
                    e0:be:82:ab:63:59:53:f2:de:61:60:80:cc:73:1b:
                    94:e4:50:8a:0d:03:91:8c:66:5d:30:c9:b6:9f:e3:
                    23:b4:81:db:82:d1:2d:86:ac:b3:19:0a:24:a9:1d:
                    5d:3a:32:9c:3e:e1:b7:72:22:0e:e9:d3:01:ab:a4:
                    67:3e:18:44:63:f0:b0:70:c4:d3:56:94:11:1e:c8:
                    06:b5:a5:62:ab:97:8b:9e:0f:d4:d5:96:13:9e:b0:
                    19:86:25:c5:ac:83:55:f2:94:a7:13:2f:ce:83:61:
                    bb:54:1e:77:48:98:72:1a:42:82:49:65:3a:40:23:
                    e4:56:27:f3:d6:2a:d6:01:b0:41:50:67:8c:3d:d9:
                    13:9d:4f:c9:d4:41:c3:ea:1c:06:fd:34:9f:37:7f:
                    3e:40:9b:b0:72:2f:a3:9c:91:d5:f4:5e:c0:2f:30:
                    19:db:fa:f4:9a:84:20:a6:73:fc:eb:dd:9a:31:22:
                    14:19:84:f3:03:c6:ee:e5:9b:f6:ec:51:79:c5:81:
                    35:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:5E:D8:48:1D:45:37:69:3B:B4:EC:55:E4:3C:49:41:88:6B:39:D8
            X509v3 Authority Key Identifier:
                keyid:0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a3132663a3a2f34382d3438203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:12f::/48

    Signature Algorithm: sha256WithRSAEncryption
         12:55:22:c9:87:8c:88:cc:15:4a:db:c6:ee:00:11:87:6f:29:
         04:73:31:af:ec:47:bb:ba:7c:30:41:3d:b7:1d:da:cd:46:a5:
         7a:81:fc:d6:4c:db:14:70:d8:0a:74:09:1f:8c:1d:c9:89:3f:
         9a:fd:76:a4:bb:0f:62:84:62:c0:0c:9b:47:1e:94:a9:e3:1c:
         6c:c5:c4:4d:4d:d1:5b:55:af:d8:69:dc:fe:4c:e7:77:c2:79:
         d7:bd:d9:05:0d:ce:cf:e1:18:b7:9d:7b:b3:b7:18:e8:78:f5:
         bc:29:08:45:3b:0b:ad:48:ea:8e:ce:a7:d7:3b:bb:23:0b:98:
         a9:bf:77:04:3e:6f:93:af:49:1b:3b:bd:86:73:b4:b7:6e:55:
         50:1a:ad:ec:eb:61:c0:ec:02:ba:1f:6f:bc:fe:f0:ac:db:2e:
         b1:c5:59:de:79:16:9a:e6:c3:4f:68:ec:9f:79:47:7e:10:55:
         29:5a:12:ef:b8:46:3d:37:98:86:c9:eb:80:83:69:c6:17:39:
         6e:29:aa:cc:93:0b:25:e6:67:6f:33:46:ab:5b:d0:b4:92:96:
         34:cc:69:b4:cd:23:12:91:3e:fd:be:92:60:6f:18:70:e1:01:
         41:51:95:03:8f:7b:79:f5:77:76:a6:71:ba:91:56:39:3f:f2:
         a2:28:08:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:32:13 2025 by rpki-client