Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a313931633a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a313931633a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          uT+63HTspEp8bIVvD1axwJeKjOaBSbGL17SocTpxXFg=
Subject key identifier:   69:02:23:C1:C4:5A:D2:A7:9D:D0:6E:08:08:03:94:55:C8:E2:BC:65
Certificate issuer:       /CN=0AAD221E4070989D4939FACA0F0981AB26E93895
Certificate serial:       661369774AD754B5D4397ACF95378ABA0D37A98F
Authority key identifier: 0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a313931633a3a2f34382d313238203d3e203532303235.roa
Signing time:             Thu 24 Apr 2025 13:19:32 +0000
ROA not before:           Thu 24 Apr 2025 13:14:32 +0000
ROA not after:            Thu 23 Apr 2026 13:19:32 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:191c::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Apr 2025 23:05:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:13:69:77:4a:d7:54:b5:d4:39:7a:cf:95:37:8a:ba:0d:37:a9:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AAD221E4070989D4939FACA0F0981AB26E93895
        Validity
            Not Before: Apr 24 13:14:32 2025 GMT
            Not After : Apr 23 13:19:32 2026 GMT
        Subject: CN=690223C1C45AD2A79DD06E0808039455C8E2BC65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:1c:45:a5:cd:04:3d:19:d6:a4:42:fb:d0:a6:
                    42:7e:dd:2a:b5:9b:f6:d3:67:02:aa:c4:82:21:cc:
                    cf:02:a4:ea:15:3f:87:8f:cc:22:8a:4e:84:2c:c5:
                    5a:2d:c9:6c:40:ba:a4:23:00:f5:9d:c1:71:56:57:
                    be:aa:00:31:22:49:e6:91:6c:ba:c9:10:1f:4a:3a:
                    05:86:05:a4:44:85:32:49:5f:3a:6c:f6:d0:c8:f6:
                    e9:6d:4b:ed:9d:f1:86:aa:d2:9b:b0:8f:3d:37:5f:
                    91:70:6b:c5:fe:0f:d2:7f:ef:56:ef:0f:6e:eb:4a:
                    34:3d:cb:76:b9:f6:d4:12:eb:c8:ea:0e:d1:43:56:
                    6b:2c:8d:c7:e8:85:1a:aa:92:b7:af:83:fc:59:85:
                    2e:c0:72:a7:d5:5d:47:81:33:9f:61:51:0e:f8:01:
                    e9:55:a1:d4:c4:c9:af:e9:d1:1d:50:43:aa:b6:bd:
                    6d:9c:21:d0:80:09:16:d3:71:74:41:f8:6a:5d:61:
                    22:01:e6:04:6e:d8:78:73:0e:a8:29:43:fd:76:bc:
                    c2:a5:7a:22:d6:3a:a7:29:f1:5a:ca:31:d5:d2:bd:
                    b6:f5:1f:08:71:83:aa:b5:b0:ee:d0:f6:43:03:c1:
                    3d:53:6c:5f:f2:a9:6e:b9:2f:88:50:83:f0:f6:28:
                    d7:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:02:23:C1:C4:5A:D2:A7:9D:D0:6E:08:08:03:94:55:C8:E2:BC:65
            X509v3 Authority Key Identifier:
                keyid:0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a313931633a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:191c::/48

    Signature Algorithm: sha256WithRSAEncryption
         05:b7:ad:ca:c0:16:68:44:ed:e8:10:41:8d:7b:34:0b:ba:e5:
         e8:d6:dd:3f:fe:cf:49:24:c5:cb:30:10:ea:e8:73:b9:6c:00:
         77:17:6e:aa:ee:57:08:2b:33:af:3a:15:94:e6:d2:8a:57:6e:
         1a:da:20:42:c3:e7:be:85:dd:e3:08:b1:50:75:a7:b8:2c:95:
         d8:d7:32:31:60:e7:1b:0c:99:1d:8c:b2:6c:cf:14:9a:45:43:
         3e:6a:92:cc:29:b6:87:4c:b6:e4:cb:60:76:59:1c:bc:b4:66:
         27:f7:15:a0:db:99:4a:65:ea:83:13:6b:64:21:5d:10:85:6e:
         91:5b:74:fe:14:a2:97:b1:82:b0:b1:62:c6:f0:c3:80:f4:5c:
         28:2d:b3:d3:d7:02:76:0d:ba:82:3d:32:80:2d:10:01:85:71:
         c6:da:1c:32:62:7e:63:87:60:0a:bf:ba:a4:b6:b5:ae:0d:10:
         f6:12:25:66:44:3f:d7:4f:21:1f:3a:1a:b3:cd:a1:4b:5d:b1:
         ea:cc:73:7e:44:99:1a:cd:14:1a:0c:70:a0:9b:d7:cc:06:1e:
         1e:f5:70:11:09:c0:41:99:b5:72:b3:59:21:8a:85:41:24:b4:
         81:61:d9:07:6a:a9:60:40:e1:66:12:4e:d7:7e:f3:5d:1b:09:
         47:60:72:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:18:54 2025 by rpki-client