Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a313333663a3a2f34382d3438203d3e203532303235.roa
File:                     326130353a646663343a313333663a3a2f34382d3438203d3e203532303235.roa (raw, json)
Hash identifier:          6aYKIJ4QjwOdI1JtUfZrD1mFNn3RU8zGQ2DADLL23jo=
Subject key identifier:   2D:0D:0A:DF:3F:51:88:6F:B0:04:71:55:F3:47:22:57:15:43:55:EE
Certificate issuer:       /CN=0AAD221E4070989D4939FACA0F0981AB26E93895
Certificate serial:       3E946B020651B5E9880900F81E763EF6D59BA7CF
Authority key identifier: 0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a313333663a3a2f34382d3438203d3e203532303235.roa
Signing time:             Thu 24 Apr 2025 13:19:33 +0000
ROA not before:           Thu 24 Apr 2025 13:14:33 +0000
ROA not after:            Thu 23 Apr 2026 13:19:33 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:133f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Apr 2025 23:05:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:94:6b:02:06:51:b5:e9:88:09:00:f8:1e:76:3e:f6:d5:9b:a7:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AAD221E4070989D4939FACA0F0981AB26E93895
        Validity
            Not Before: Apr 24 13:14:33 2025 GMT
            Not After : Apr 23 13:19:33 2026 GMT
        Subject: CN=2D0D0ADF3F51886FB0047155F3472257154355EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:98:00:37:47:49:e8:10:f7:7e:b3:3e:eb:e0:
                    9e:6f:7b:dc:bf:08:b7:a4:c5:3f:34:8a:f9:d8:6d:
                    b5:c7:02:fb:ee:d0:dc:93:97:e1:23:7c:ba:6e:76:
                    4f:e2:4f:31:e6:d0:b0:46:4c:fe:35:09:64:38:ec:
                    38:02:f4:c1:2c:a2:2a:1d:20:a0:db:33:67:3a:d3:
                    45:bf:aa:84:ba:d4:a4:c4:2a:f5:f6:dc:d5:f2:6b:
                    6e:a0:d8:98:ef:ec:7a:6f:02:89:09:3e:3d:04:5a:
                    61:61:a9:75:5f:33:9d:75:f2:eb:a5:eb:4b:8c:f7:
                    2a:07:7b:86:e4:15:81:1b:a9:38:37:0c:b4:b7:87:
                    72:76:80:8c:e6:00:25:56:e4:93:4c:02:3f:f2:d9:
                    02:f8:dc:b4:b7:f5:ca:8a:71:3b:d6:ec:f1:40:14:
                    cb:f0:f2:80:42:73:c3:34:0a:61:04:88:65:5f:89:
                    fe:4a:34:3d:b1:3e:a5:60:af:8a:d2:42:5c:9e:4a:
                    59:2e:8a:6c:03:c7:b1:9c:3b:34:3a:39:9d:08:d4:
                    09:29:17:bc:51:c1:78:06:87:c8:f3:c0:32:12:e0:
                    da:be:6c:a9:8d:d9:70:61:a3:da:4e:d8:3c:e5:12:
                    82:50:f0:74:2f:4f:35:8e:54:95:79:b3:2f:e7:3a:
                    b5:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:0D:0A:DF:3F:51:88:6F:B0:04:71:55:F3:47:22:57:15:43:55:EE
            X509v3 Authority Key Identifier:
                keyid:0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a313333663a3a2f34382d3438203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:133f::/48

    Signature Algorithm: sha256WithRSAEncryption
         ad:47:98:78:73:70:f6:ae:18:dd:5a:62:b4:a1:48:42:fa:0c:
         89:42:e7:37:e0:23:2f:70:24:75:d2:13:cc:c8:93:0d:7a:92:
         26:1d:62:78:dd:25:2d:4b:5e:4e:b3:fa:ad:26:8b:88:17:a6:
         8c:6b:76:f0:1b:c8:99:e0:25:a9:e7:05:02:4d:7f:d4:25:50:
         c7:12:f2:20:84:ca:4f:33:bd:19:03:d0:e5:2c:da:ce:c1:6c:
         b2:64:aa:7e:5e:2e:f7:cf:ef:f8:f6:a4:16:72:81:60:b0:48:
         20:05:f6:ad:0f:4d:b6:51:54:61:b2:d7:e2:45:67:4b:46:c5:
         3f:94:53:b4:4b:7e:eb:38:ad:27:f1:a0:97:9e:f1:a2:7d:8c:
         93:00:e4:a4:ff:1d:31:bf:3e:26:b5:ab:b4:05:eb:25:8d:74:
         76:e7:a5:55:da:40:8e:6d:89:1b:ab:37:00:0d:ed:00:c9:75:
         0b:73:1c:cd:46:7f:2c:73:4f:af:83:47:f0:9f:b6:8d:9c:d2:
         59:53:fa:30:eb:40:aa:1b:59:06:14:12:f1:83:73:55:f6:6b:
         42:6e:62:8f:e4:24:04:50:7e:c6:09:39:35:49:9b:38:8a:88:
         a1:98:9a:a8:0e:dc:3e:c1:b8:92:48:93:bc:2c:79:24:8f:25:
         e3:87:0a:1e
-----BEGIN CERTIFICATE-----
MIIFIjCCBAqgAwIBAgIUPpRrAgZRtemICQD4HnY+9tWbp88wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEFBRDIyMUU0MDcwOTg5RDQ5MzlGQUNBMEYwOTgxQUIy
NkU5Mzg5NTAeFw0yNTA0MjQxMzE0MzNaFw0yNjA0MjMxMzE5MzNaMDMxMTAvBgNV
BAMTKDJEMEQwQURGM0Y1MTg4NkZCMDA0NzE1NUYzNDcyMjU3MTU0MzU1RUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVmAA3R0noEPd+sz7r4J5ve9y/
CLekxT80ivnYbbXHAvvu0NyTl+EjfLpudk/iTzHm0LBGTP41CWQ47DgC9MEsoiod
IKDbM2c600W/qoS61KTEKvX23NXya26g2Jjv7HpvAokJPj0EWmFhqXVfM5118uul
60uM9yoHe4bkFYEbqTg3DLS3h3J2gIzmACVW5JNMAj/y2QL43LS39cqKcTvW7PFA
FMvw8oBCc8M0CmEEiGVfif5KND2xPqVgr4rSQlyeSlkuimwDx7GcOzQ6OZ0I1Akp
F7xRwXgGh8jzwDIS4Nq+bKmN2XBho9pO2DzlEoJQ8HQvTzWOVJV5sy/nOrX7AgMB
AAGjggIsMIICKDAdBgNVHQ4EFgQULQ0K3z9RiG+wBHFV80ciVxVDVe4wHwYDVR0j
BBgwFoAUCq0iHkBwmJ1JOfrKDwmBqybpOJUwDgYDVR0PAQH/BAQDAgeAMG4GA1Ud
HwRnMGUwY6BhoF+GXXJzeW5jOi8vcnBraS0wMS5wZHhuZXQudWsvcmVwby9wYXJh
ZG94bmV0d29ya3MvMi8wQUFEMjIxRTQwNzA5ODlENDkzOUZBQ0EwRjA5ODFBQjI2
RTkzODk1LmNybDCBkwYIKwYBBQUHAQEEgYYwgYMwgYAGCCsGAQUFBzAChnRyc3lu
YzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYz
ZTAxODU3NTVjOTFiZTNmOWQvMi8wQUFEMjIxRTQwNzA5ODlENDkzOUZBQ0EwRjA5
ODFBQjI2RTkzODk1LmNlcjCBkQYIKwYBBQUHAQsEgYQwgYEwfwYIKwYBBQUHMAuG
c3JzeW5jOi8vcnBraS0wMS5wZHhuZXQudWsvcmVwby9wYXJhZG94bmV0d29ya3Mv
Mi8zMjYxMzAzNTNhNjQ2NjYzMzQzYTMxMzMzMzY2M2EzYTJmMzQzODJkMzQzODIw
M2QzZTIwMzUzMjMwMzIzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF38QTPzANBgkqhkiG9w0BAQsF
AAOCAQEArUeYeHNw9q4Y3VpitKFIQvoMiULnN+AjL3AkddITzMiTDXqSJh1ieN0l
LUteTrP6rSaLiBemjGt28BvImeAlqecFAk1/1CVQxxLyIITKTzO9GQPQ5SzazsFs
smSqfl4u98/v+PakFnKBYLBIIAX2rQ9NtlFUYbLX4kVnS0bFP5RTtEt+6zitJ/Gg
l57xon2MkwDkpP8dMb8+JrWrtAXrJY10duelVdpAjm2JG6s3AA3tAMl1C3MczUZ/
LHNPr4NH8J+2jZzSWVP6MOtAqhtZBhQS8YNzVfZrQm5ij+QkBFB+xgk5NUmbOIqI
oZiaqA7cPsG4kkiTvCx5JI8l44cKHg==
-----END CERTIFICATE-----
Generated at Tue Apr 29 09:38:33 2025 by rpki-client