Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a3133333a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a3133333a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          UkMCZie5Z0ECxVwKzrkZ4zbw+eZQjTIinolW5kgN1eU=
Subject key identifier:   9B:34:26:68:AA:74:F4:07:1A:C8:85:C8:84:8C:01:AD:D6:51:C8:3E
Certificate issuer:       /CN=0AAD221E4070989D4939FACA0F0981AB26E93895
Certificate serial:       02B157F2BD3E990F557035E138E329E9BEC50550
Authority key identifier: 0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a3133333a3a2f34382d313238203d3e203532303235.roa
Signing time:             Thu 24 Apr 2025 13:19:38 +0000
ROA not before:           Thu 24 Apr 2025 13:14:38 +0000
ROA not after:            Thu 23 Apr 2026 13:19:38 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:133::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Apr 2025 23:05:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:b1:57:f2:bd:3e:99:0f:55:70:35:e1:38:e3:29:e9:be:c5:05:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AAD221E4070989D4939FACA0F0981AB26E93895
        Validity
            Not Before: Apr 24 13:14:38 2025 GMT
            Not After : Apr 23 13:19:38 2026 GMT
        Subject: CN=9B342668AA74F4071AC885C8848C01ADD651C83E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:d0:12:e2:2a:67:7f:9c:f7:38:9b:fa:9d:bd:
                    c6:15:ec:63:6c:01:c1:62:de:27:e9:87:31:6d:70:
                    62:36:5f:18:ac:4f:b2:89:6a:2f:85:19:b3:0e:d9:
                    c1:a7:2a:48:ee:af:98:5c:76:31:6a:ca:93:b1:d2:
                    39:e2:53:e9:87:62:32:e4:0e:5a:46:39:9f:02:6c:
                    9f:7f:eb:a9:1d:c9:1e:6d:40:24:fe:41:82:bb:cd:
                    b1:4a:d3:57:74:eb:4e:57:e8:ac:18:61:24:3c:76:
                    47:7f:98:1d:37:1e:2b:85:9b:ce:80:13:1a:79:d6:
                    4b:ba:01:c6:1c:ad:16:d2:ce:09:22:a6:37:fd:ca:
                    0a:bc:bd:9e:62:be:e5:28:90:aa:c7:ea:e6:cd:14:
                    1f:03:ca:4c:73:1c:00:fe:8f:48:d0:5d:88:65:2c:
                    a3:6b:77:c9:32:9a:9d:b5:dc:a0:ea:95:b1:f0:34:
                    19:6e:66:81:8a:43:8a:29:76:d3:28:aa:10:00:d3:
                    fd:61:e6:b4:1b:5a:fc:92:0e:fb:2b:29:17:8d:65:
                    da:15:aa:0b:2c:95:82:bf:32:c7:8a:a1:44:de:7f:
                    4a:8f:0b:c0:6b:36:3c:8f:77:17:16:1b:59:5f:2e:
                    79:08:79:90:62:82:ce:45:5f:84:eb:8c:7c:5d:07:
                    92:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:34:26:68:AA:74:F4:07:1A:C8:85:C8:84:8C:01:AD:D6:51:C8:3E
            X509v3 Authority Key Identifier:
                keyid:0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a3133333a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:133::/48

    Signature Algorithm: sha256WithRSAEncryption
         76:27:e1:24:36:c0:42:88:b2:c9:1f:b5:94:1d:03:7c:d2:da:
         1a:61:96:2b:68:df:08:b3:54:08:7c:29:c6:87:ed:89:c2:ae:
         d9:f9:39:2e:62:3b:ab:0d:e7:ef:a7:03:12:7c:28:d9:1c:e6:
         9e:cc:a8:0c:ce:53:a6:80:da:44:6b:1c:8e:73:cb:d9:00:dd:
         10:cc:c9:59:32:b7:2f:24:4c:9e:5e:96:a5:0a:a4:91:57:1e:
         ab:2b:03:1d:56:16:e9:bc:e1:91:6c:76:b2:8e:e4:0c:b7:3f:
         f5:b5:50:ce:0b:5f:68:a9:7b:44:24:a5:74:94:59:89:fe:0e:
         e6:60:dc:9d:9c:58:ae:4d:f4:7a:67:5e:5e:5a:8a:a4:e1:d3:
         2e:2b:5a:15:4a:8a:4e:cf:04:19:59:38:08:cb:9a:21:0f:e7:
         89:2e:1f:f6:a3:15:ff:f1:55:ee:5c:2a:ba:6b:8d:78:96:02:
         d0:a9:52:57:d1:ea:c8:a1:3b:c1:be:75:fc:c4:61:75:24:18:
         64:40:21:1b:6e:76:67:5f:2d:a7:61:a0:70:01:27:12:f6:45:
         78:72:65:8a:68:aa:53:e7:5e:c4:6e:ff:b4:2f:69:32:d2:c0:
         8b:e5:da:34:bf:58:17:ff:a6:40:ca:4e:84:31:61:83:dd:6d:
         83:12:14:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:45:02 2025 by rpki-client