Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a316331653a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a316331653a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          jMHzAb+r0R/XHj8T5ho39UdYgeu8Rhy/cCJwPsoxbos=
Subject key identifier:   9F:85:92:4F:25:C7:9B:15:5D:5B:83:E7:34:6D:97:09:CD:9B:AD:86
Certificate issuer:       /CN=0AAD221E4070989D4939FACA0F0981AB26E93895
Certificate serial:       0E8BAF29E63961A0F58BB82E1DBEF0EB220CCFA3
Authority key identifier: 0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a316331653a3a2f34382d313238203d3e203532303235.roa
Signing time:             Thu 24 Apr 2025 13:19:29 +0000
ROA not before:           Thu 24 Apr 2025 13:14:29 +0000
ROA not after:            Thu 23 Apr 2026 13:19:29 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:1c1e::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Apr 2025 09:10:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:8b:af:29:e6:39:61:a0:f5:8b:b8:2e:1d:be:f0:eb:22:0c:cf:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AAD221E4070989D4939FACA0F0981AB26E93895
        Validity
            Not Before: Apr 24 13:14:29 2025 GMT
            Not After : Apr 23 13:19:29 2026 GMT
        Subject: CN=9F85924F25C79B155D5B83E7346D9709CD9BAD86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:3d:00:d9:2d:dc:4b:0a:cf:26:c2:25:aa:96:
                    d1:1f:e2:ff:c1:31:43:34:c7:7d:2c:52:fb:c8:9b:
                    ab:5f:af:13:54:39:d6:94:1f:dc:16:18:f4:0b:e1:
                    48:75:24:a4:74:91:82:28:86:34:97:be:6f:f4:91:
                    2a:0d:b1:76:83:3c:f4:73:86:58:5c:d5:b9:9e:79:
                    4a:7f:55:43:5c:d8:28:93:62:5a:b6:f6:af:d7:e6:
                    c7:09:ef:3a:05:59:a8:f0:62:5c:cb:3b:69:66:52:
                    67:cf:da:46:01:75:ba:cb:4b:31:ac:a5:24:b7:ff:
                    32:40:38:51:aa:2d:6d:68:99:8e:16:1e:2e:83:ce:
                    bf:2b:ab:21:68:92:cd:60:c6:63:06:1e:5b:a0:c3:
                    ae:42:ea:3f:3c:6a:2b:33:2b:83:fc:b4:1c:e2:72:
                    13:3e:2b:db:63:d9:29:a2:fb:2e:85:ac:72:09:a0:
                    39:4f:17:3b:31:cd:90:3c:40:37:7a:88:f8:b0:df:
                    30:7f:bb:4a:c6:a5:7d:d4:5b:b5:52:b0:57:0d:61:
                    6e:17:e0:40:1f:78:2d:64:3b:ed:63:f5:47:f9:56:
                    d9:37:af:e6:7b:6a:7f:b8:09:1b:ae:0e:94:15:f0:
                    a5:dd:11:48:3c:f3:3e:f6:34:cb:11:de:f6:f2:8f:
                    1e:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:85:92:4F:25:C7:9B:15:5D:5B:83:E7:34:6D:97:09:CD:9B:AD:86
            X509v3 Authority Key Identifier:
                keyid:0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a316331653a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:1c1e::/48

    Signature Algorithm: sha256WithRSAEncryption
         7e:58:f4:eb:28:95:df:2c:d0:1c:62:ad:ad:9a:d0:ba:6b:af:
         4a:60:3a:09:5b:8e:6e:a0:9c:c9:ed:b2:61:db:96:d4:18:47:
         80:b1:b0:ac:2c:63:3a:03:f7:de:3c:89:6c:2a:cf:89:2b:e6:
         3e:d5:24:97:5e:ef:15:2b:bd:6c:ca:70:d6:87:b7:a6:e9:37:
         f5:58:94:c9:38:bc:bf:77:08:51:e4:c7:6d:3e:0a:e5:e8:ce:
         ad:00:bf:91:d1:65:fb:43:fc:61:0f:a8:b0:0f:69:99:fb:02:
         e7:63:44:79:ad:36:f9:02:21:23:fc:b1:11:a2:a5:38:e4:5c:
         6a:96:93:dc:53:22:58:a8:26:5c:3d:9a:01:36:13:0e:22:7d:
         f5:67:c6:22:4f:7c:ef:51:b2:63:89:ed:c3:fa:7a:15:7f:76:
         27:b9:5c:65:7b:02:e3:96:52:0f:9d:5f:6e:ad:fa:f3:97:7d:
         0f:ca:c9:c3:4f:04:bc:dc:29:89:fa:f7:03:0f:d0:e2:f0:aa:
         3d:c3:23:47:bf:87:9c:17:3b:fe:bc:1b:f5:87:51:cf:08:09:
         c4:93:27:91:3e:14:3d:4d:81:1b:7d:98:3c:89:9e:af:88:7b:
         ee:ae:a9:54:9f:3f:dc:b5:31:aa:e0:4b:aa:a5:b4:1e:b6:da:
         6e:2e:47:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 20:07:14 2025 by rpki-client