Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a313731613a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a313731613a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          dqXuYbNEjia+jpi9tociHIW/5cuK18yAzTJLAPHAF4I=
Subject key identifier:   CB:65:7C:4C:EA:7B:9D:5C:34:BC:2D:9B:9C:84:36:58:0B:F4:4B:3D
Certificate issuer:       /CN=0AAD221E4070989D4939FACA0F0981AB26E93895
Certificate serial:       33DA034B391ADF41745B0E2E9654E1F2AE78E6D8
Authority key identifier: 0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a313731613a3a2f34382d313238203d3e203532303235.roa
Signing time:             Thu 24 Apr 2025 13:19:33 +0000
ROA not before:           Thu 24 Apr 2025 13:14:33 +0000
ROA not after:            Thu 23 Apr 2026 13:19:33 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:171a::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 19:48:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:da:03:4b:39:1a:df:41:74:5b:0e:2e:96:54:e1:f2:ae:78:e6:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AAD221E4070989D4939FACA0F0981AB26E93895
        Validity
            Not Before: Apr 24 13:14:33 2025 GMT
            Not After : Apr 23 13:19:33 2026 GMT
        Subject: CN=CB657C4CEA7B9D5C34BC2D9B9C8436580BF44B3D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:15:09:59:f5:60:6a:02:fb:79:4e:99:a9:37:
                    dc:0c:99:80:b8:4f:88:e9:56:47:1e:4c:f5:b1:dc:
                    1d:00:f7:de:b2:fe:6a:de:09:57:a1:3f:f8:f7:3f:
                    8b:4d:62:63:ee:4a:25:91:e2:de:ab:d9:32:7f:cb:
                    5f:9e:6a:a0:22:45:fe:55:8f:2d:0d:67:d7:32:73:
                    22:aa:e1:8c:0d:8d:d4:0e:9e:08:42:e1:5f:9b:97:
                    fd:51:8f:f9:5d:16:15:05:b9:c3:06:60:d3:4d:57:
                    6f:ad:09:5e:e7:9b:a1:b7:f8:bc:94:9a:97:25:2a:
                    14:6a:80:6e:03:03:01:6f:e2:99:88:4f:6c:56:39:
                    34:2a:5e:3b:df:9b:df:1e:6e:55:f8:db:25:ca:23:
                    f0:41:2d:ea:35:fe:5c:b3:8a:b6:9a:c5:f9:f3:d5:
                    00:dd:dd:57:a2:ce:7a:b6:01:fe:91:77:0d:5f:53:
                    64:3d:fa:c1:36:0f:e8:91:2c:91:0b:de:b6:95:3d:
                    4e:33:e5:6a:41:f2:47:1c:46:f1:d5:02:a1:ed:e0:
                    4a:f5:46:a3:53:47:db:75:ef:14:d0:88:28:e4:17:
                    ad:1d:2c:37:51:0e:47:fd:49:13:e4:53:8a:59:7a:
                    ff:9c:15:c3:d6:c1:36:40:fd:a1:2e:84:a0:08:2d:
                    ee:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:65:7C:4C:EA:7B:9D:5C:34:BC:2D:9B:9C:84:36:58:0B:F4:4B:3D
            X509v3 Authority Key Identifier:
                keyid:0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a313731613a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:171a::/48

    Signature Algorithm: sha256WithRSAEncryption
         08:18:08:4d:cd:71:d4:d3:ed:95:43:4c:f1:c8:b7:ce:84:57:
         10:7e:1d:cd:42:df:e8:a7:44:a0:2b:b7:1e:d6:b3:72:10:92:
         da:58:2e:88:b0:ff:35:25:f8:04:0e:d5:ed:06:4e:d3:20:32:
         bd:9e:71:15:e8:50:af:ff:1e:51:23:bf:e0:b0:7a:17:b3:aa:
         f3:0a:27:05:eb:02:9c:2e:bb:c8:6f:67:8c:a9:dd:3f:a9:04:
         b6:7b:b5:04:ff:77:0b:5a:e4:52:f4:e6:4f:f8:38:6f:3c:21:
         53:9e:36:d0:41:35:30:3d:a3:12:41:3d:6d:ee:2e:41:09:c4:
         4d:bf:0d:a4:fd:a2:6d:46:32:4e:fa:ef:22:1f:58:29:bb:a2:
         80:aa:48:35:7d:ec:de:a7:ea:17:9a:ab:89:0e:a3:b7:c6:6f:
         33:03:d0:e8:7e:d2:52:18:57:1b:50:d9:e7:cd:12:50:3b:65:
         92:16:65:a6:6d:c6:00:bf:43:8b:59:ef:b3:90:71:0f:f0:53:
         8d:dd:a6:d5:96:de:39:61:ea:82:ae:70:d9:3b:df:d2:f4:6b:
         ff:c3:ff:7e:88:a6:9e:22:4d:e3:0b:42:fe:38:03:6e:68:97:
         41:74:2b:cc:3f:1f:90:08:e0:3a:f9:50:0b:c6:4e:97:37:bc:
         d4:26:dd:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:51:13 2025 by rpki-client