Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a316131643a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a316131643a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          z88rWfFZDGCQoogEX4vhRgh6xqtpazxzgK5oe06I2jc=
Subject key identifier:   AC:1E:0F:D2:9A:DC:27:E5:DB:7F:21:4F:B3:73:1E:3B:86:96:12:4E
Certificate issuer:       /CN=0AAD221E4070989D4939FACA0F0981AB26E93895
Certificate serial:       230D422115816285325B6238D10D64F6D937E9B7
Authority key identifier: 0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a316131643a3a2f34382d313238203d3e203532303235.roa
Signing time:             Thu 24 Apr 2025 13:19:31 +0000
ROA not before:           Thu 24 Apr 2025 13:14:31 +0000
ROA not after:            Thu 23 Apr 2026 13:19:31 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:1a1d::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Apr 2025 12:28:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:0d:42:21:15:81:62:85:32:5b:62:38:d1:0d:64:f6:d9:37:e9:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AAD221E4070989D4939FACA0F0981AB26E93895
        Validity
            Not Before: Apr 24 13:14:31 2025 GMT
            Not After : Apr 23 13:19:31 2026 GMT
        Subject: CN=AC1E0FD29ADC27E5DB7F214FB3731E3B8696124E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:cf:31:21:28:bd:21:ab:a9:f3:7f:05:f5:bd:
                    4f:a2:f4:c8:d5:4e:65:68:90:e8:58:04:6f:f8:3f:
                    3e:55:30:29:b3:5e:d5:b3:f3:10:82:45:ce:35:53:
                    7e:0f:e8:10:fb:1b:b2:d2:a8:55:d9:04:92:eb:7e:
                    ae:ed:a3:e2:ee:f3:db:03:22:ed:bc:45:41:d1:14:
                    e6:1f:8d:9d:55:17:a4:43:77:c0:f4:3e:f7:57:92:
                    ac:69:95:7b:c0:77:bf:98:54:02:e3:e3:53:d2:b5:
                    26:2e:be:a7:dd:10:25:2c:8c:75:b0:42:4f:4e:d3:
                    60:08:1a:c1:dd:1c:c5:07:2a:ae:1c:bf:4c:70:28:
                    96:e7:0e:00:54:0b:fe:fe:e5:ee:3a:e7:be:3e:02:
                    ad:e9:05:5b:0e:74:4a:e8:ff:39:27:cd:f4:4b:e6:
                    be:54:51:32:35:66:0e:40:63:e6:cb:e2:8e:b6:06:
                    ba:b9:bb:2d:5a:d0:90:9a:68:c1:57:45:21:81:ed:
                    34:23:f4:65:e3:47:22:37:98:b3:a5:33:76:b9:b5:
                    83:d1:1b:10:fc:66:ef:9e:f2:bb:f0:21:44:99:e9:
                    7c:27:b9:35:70:8a:32:9b:c6:cd:61:2e:91:be:8f:
                    3c:84:a3:34:3e:7d:08:b5:7d:50:9b:e5:43:d1:fa:
                    c0:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:1E:0F:D2:9A:DC:27:E5:DB:7F:21:4F:B3:73:1E:3B:86:96:12:4E
            X509v3 Authority Key Identifier:
                keyid:0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a316131643a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:1a1d::/48

    Signature Algorithm: sha256WithRSAEncryption
         af:09:af:a9:c3:6f:17:67:64:71:d0:a4:cd:bc:a2:78:ca:cb:
         b6:1c:4a:7f:11:27:4d:ee:0e:9c:8b:c0:18:4f:1d:0a:de:2e:
         89:90:4a:58:6a:d2:e9:f7:6e:79:95:59:01:b3:90:2d:77:b2:
         06:ea:26:60:ef:98:97:ee:83:ee:f1:4f:e9:a5:c1:2e:04:85:
         9d:ba:5a:17:04:83:76:79:9c:0f:a6:e9:21:d9:08:7f:47:a7:
         4f:53:d9:d3:b4:34:e6:af:72:c2:f5:d9:c3:8c:37:be:6e:26:
         a0:80:9d:14:f7:04:8f:7e:3c:a1:d4:1b:2c:36:71:11:6c:f1:
         f8:4b:79:5b:90:21:43:56:94:7f:04:04:e3:dd:f1:d5:59:aa:
         65:71:c3:59:8d:05:e5:77:5e:df:52:4e:f4:dd:51:8f:60:c7:
         8c:0b:01:73:c3:02:68:74:5d:fe:b4:85:61:7d:cf:27:a6:5a:
         3e:4d:96:4f:7a:a0:15:ea:45:52:ca:b0:67:bb:1f:7b:88:7a:
         c5:0b:5b:2c:ce:2a:a4:1c:6d:6d:70:9f:b4:e3:d0:28:1e:8b:
         a6:fc:3d:eb:5d:66:05:e2:b1:42:71:f3:3a:e3:aa:08:c2:85:
         9c:28:37:a2:33:2d:33:2d:ca:ed:47:d4:6c:f7:d4:58:eb:07:
         45:70:80:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 04:09:53 2025 by rpki-client