Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a313531373a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a313531373a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          mpYfzJyxpkHZPDi/2LQefLWjVsnGPJKni1Yz9uJB5ws=
Subject key identifier:   08:CF:CC:1B:94:10:51:02:DC:0F:89:98:3F:28:5B:1B:C9:81:0A:40
Certificate issuer:       /CN=0AAD221E4070989D4939FACA0F0981AB26E93895
Certificate serial:       0AEC8D604DA8EA98F53A4293072E4A0FC5FC3011
Authority key identifier: 0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a313531373a3a2f34382d313238203d3e203532303235.roa
Signing time:             Thu 24 Apr 2025 13:19:38 +0000
ROA not before:           Thu 24 Apr 2025 13:14:38 +0000
ROA not after:            Thu 23 Apr 2026 13:19:38 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:1517::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Apr 2025 23:05:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:ec:8d:60:4d:a8:ea:98:f5:3a:42:93:07:2e:4a:0f:c5:fc:30:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AAD221E4070989D4939FACA0F0981AB26E93895
        Validity
            Not Before: Apr 24 13:14:38 2025 GMT
            Not After : Apr 23 13:19:38 2026 GMT
        Subject: CN=08CFCC1B94105102DC0F89983F285B1BC9810A40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:f9:63:c9:b6:7c:d7:34:bb:2a:a7:24:80:76:
                    4b:a9:ea:34:6f:30:1c:be:2f:38:7d:65:40:ac:63:
                    d8:cb:63:2f:2d:d3:eb:53:fb:f6:bb:59:da:01:e1:
                    f5:8e:0b:36:8f:6a:98:4e:f9:42:11:34:ca:a9:2a:
                    c2:00:85:ca:01:94:6b:28:84:a1:6b:dd:cc:2c:57:
                    81:92:a2:81:08:91:5a:f3:08:13:31:49:ea:11:df:
                    6e:f5:8c:09:a7:b0:e1:0e:b0:41:3f:cc:c5:52:ab:
                    25:e3:a6:36:3b:f5:6c:e1:2b:3f:87:81:f9:1a:75:
                    d0:cb:66:99:97:ce:9d:59:fc:65:7e:f0:38:e8:06:
                    d2:b4:ec:df:1a:dd:b5:85:34:dc:66:84:95:de:77:
                    f0:08:db:0c:7c:e3:fc:f9:d5:8e:e0:4a:9b:f4:a6:
                    6d:a8:24:02:d1:bb:41:6d:14:df:5a:2b:41:73:26:
                    ed:56:2f:b6:62:31:87:05:ae:cf:72:87:de:a5:c3:
                    74:c9:19:f7:df:f0:c9:96:c2:3e:16:37:bc:09:df:
                    93:1c:69:f6:27:de:3b:1b:7d:a1:24:2a:56:70:62:
                    9a:90:ae:32:6c:e9:de:91:a9:65:f5:f1:02:64:5b:
                    57:3a:93:eb:8c:97:39:6b:02:c6:91:6e:e0:a6:26:
                    db:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:CF:CC:1B:94:10:51:02:DC:0F:89:98:3F:28:5B:1B:C9:81:0A:40
            X509v3 Authority Key Identifier:
                keyid:0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a313531373a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:1517::/48

    Signature Algorithm: sha256WithRSAEncryption
         cc:b2:76:9d:e9:cb:f6:44:cd:08:6c:e2:1b:6e:e8:b0:e9:f5:
         ac:ed:43:45:c1:41:6b:27:d5:8b:1f:5d:aa:d2:ab:41:a6:72:
         94:d4:7a:94:e1:ea:95:9d:f8:1c:85:ea:bb:69:f1:ca:34:27:
         51:a1:36:d8:bc:29:5b:71:73:27:25:b9:c5:81:2a:89:f5:63:
         e6:ad:2b:74:ec:98:12:e3:4c:ac:19:1c:51:b5:65:a0:13:75:
         2d:5e:bb:6e:14:6b:cf:d1:e6:49:8b:d7:c9:eb:61:d9:39:e0:
         0c:b5:6b:0b:a9:43:3f:4d:ed:cd:cc:9a:fe:e4:c1:0a:d5:5c:
         e9:6e:43:aa:62:bb:84:ee:24:48:d0:ec:3f:27:80:6b:9d:7f:
         2a:a6:bc:dc:12:d9:45:87:8f:e9:e1:0d:7c:29:50:ce:0f:71:
         fd:bc:63:2a:26:bc:f4:23:0e:e5:d2:f0:70:00:a0:34:64:fe:
         75:cf:48:e9:fd:03:39:74:e6:53:7f:a2:a5:08:6b:bc:09:a5:
         f8:7e:7a:a5:b9:64:cc:e1:5a:3f:90:8d:16:20:98:06:ad:a6:
         fd:d7:07:b5:6c:e8:ba:bc:0b:af:fa:fa:d1:1b:f8:f2:a2:46:
         e4:85:94:6c:1a:5e:4e:b6:b6:cd:92:f9:ed:3f:e9:ed:2c:21:
         fa:74:fd:28
-----BEGIN CERTIFICATE-----
MIIFJTCCBA2gAwIBAgIUCuyNYE2o6pj1OkKTBy5KD8X8MBEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEFBRDIyMUU0MDcwOTg5RDQ5MzlGQUNBMEYwOTgxQUIy
NkU5Mzg5NTAeFw0yNTA0MjQxMzE0MzhaFw0yNjA0MjMxMzE5MzhaMDMxMTAvBgNV
BAMTKDA4Q0ZDQzFCOTQxMDUxMDJEQzBGODk5ODNGMjg1QjFCQzk4MTBBNDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDv+WPJtnzXNLsqpySAdkup6jRv
MBy+Lzh9ZUCsY9jLYy8t0+tT+/a7WdoB4fWOCzaPaphO+UIRNMqpKsIAhcoBlGso
hKFr3cwsV4GSooEIkVrzCBMxSeoR3271jAmnsOEOsEE/zMVSqyXjpjY79WzhKz+H
gfkaddDLZpmXzp1Z/GV+8DjoBtK07N8a3bWFNNxmhJXed/AI2wx84/z51Y7gSpv0
pm2oJALRu0FtFN9aK0FzJu1WL7ZiMYcFrs9yh96lw3TJGfff8MmWwj4WN7wJ35Mc
afYn3jsbfaEkKlZwYpqQrjJs6d6RqWX18QJkW1c6k+uMlzlrAsaRbuCmJtsDAgMB
AAGjggIvMIICKzAdBgNVHQ4EFgQUCM/MG5QQUQLcD4mYPyhbG8mBCkAwHwYDVR0j
BBgwFoAUCq0iHkBwmJ1JOfrKDwmBqybpOJUwDgYDVR0PAQH/BAQDAgeAMG4GA1Ud
HwRnMGUwY6BhoF+GXXJzeW5jOi8vcnBraS0wMS5wZHhuZXQudWsvcmVwby9wYXJh
ZG94bmV0d29ya3MvMi8wQUFEMjIxRTQwNzA5ODlENDkzOUZBQ0EwRjA5ODFBQjI2
RTkzODk1LmNybDCBkwYIKwYBBQUHAQEEgYYwgYMwgYAGCCsGAQUFBzAChnRyc3lu
YzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYz
ZTAxODU3NTVjOTFiZTNmOWQvMi8wQUFEMjIxRTQwNzA5ODlENDkzOUZBQ0EwRjA5
ODFBQjI2RTkzODk1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzAL
hnVyc3luYzovL3Jwa2ktMDEucGR4bmV0LnVrL3JlcG8vcGFyYWRveG5ldHdvcmtz
LzIvMzI2MTMwMzUzYTY0NjY2MzM0M2EzMTM1MzEzNzNhM2EyZjM0MzgyZDMxMzIz
ODIwM2QzZTIwMzUzMjMwMzIzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF38QVFzANBgkqhkiG9w0B
AQsFAAOCAQEAzLJ2nenL9kTNCGziG27osOn1rO1DRcFBayfVix9dqtKrQaZylNR6
lOHqlZ34HIXqu2nxyjQnUaE22LwpW3FzJyW5xYEqifVj5q0rdOyYEuNMrBkcUbVl
oBN1LV67bhRrz9HmSYvXyeth2TngDLVrC6lDP03tzcya/uTBCtVc6W5DqmK7hO4k
SNDsPyeAa51/Kqa83BLZRYeP6eENfClQzg9x/bxjKia89CMO5dLwcACgNGT+dc9I
6f0DOXTmU3+ipQhrvAml+H56pblkzOFaP5CNFiCYBq2m/dcHtWzourwLr/r60Rv4
8qJG5IWUbBpeTra2zZL57T/p7Swh+nT9KA==
-----END CERTIFICATE-----
Generated at Tue Apr 29 10:14:55 2025 by rpki-client