Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a316532303a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a316532303a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          hpsJCTmwXz2jp3l9wJeadU245AI4/IzH5tF+U9Ux6E8=
Subject key identifier:   20:16:DA:4D:4D:07:71:B2:57:6F:88:AD:36:CF:00:A3:8A:75:C2:FD
Certificate issuer:       /CN=0AAD221E4070989D4939FACA0F0981AB26E93895
Certificate serial:       5E10FD6D907DE2F7E58F2AA9FADAF0508B74D013
Authority key identifier: 0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a316532303a3a2f34382d313238203d3e203532303235.roa
Signing time:             Thu 24 Apr 2025 13:19:34 +0000
ROA not before:           Thu 24 Apr 2025 13:14:34 +0000
ROA not after:            Thu 23 Apr 2026 13:19:34 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:1e20::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 May 2025 09:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:10:fd:6d:90:7d:e2:f7:e5:8f:2a:a9:fa:da:f0:50:8b:74:d0:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AAD221E4070989D4939FACA0F0981AB26E93895
        Validity
            Not Before: Apr 24 13:14:34 2025 GMT
            Not After : Apr 23 13:19:34 2026 GMT
        Subject: CN=2016DA4D4D0771B2576F88AD36CF00A38A75C2FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:e6:91:8e:95:ea:b5:25:cc:65:d4:8d:57:d7:
                    20:6d:6b:75:b1:bf:98:9a:b0:b5:57:ce:4a:f9:c3:
                    91:51:2d:40:ce:2e:8a:1d:d9:93:c9:92:9e:d9:9a:
                    9f:a6:97:79:25:e4:34:7a:1b:ba:06:84:ed:0e:d5:
                    d3:c4:18:e5:6b:4d:b9:c2:df:55:59:8d:52:bd:c7:
                    33:24:9e:24:f8:80:56:e2:89:79:88:ec:9f:55:19:
                    cc:9c:f0:27:77:2e:ae:86:aa:cb:25:e6:dc:10:01:
                    7b:d1:67:1c:de:95:b5:8a:22:d9:7b:1a:a4:8e:71:
                    3e:03:93:b6:a7:f5:84:df:a3:53:6c:2c:b9:f8:64:
                    b7:6c:2c:33:48:1b:74:1e:8a:97:ba:a1:34:4d:05:
                    a2:4c:f0:e9:22:98:81:65:92:68:b9:00:82:49:3e:
                    ed:70:cc:94:c2:d5:96:b0:22:18:cd:6f:d3:79:12:
                    bc:81:21:17:39:cf:2c:be:4f:02:fc:a1:81:55:66:
                    91:6d:5b:34:f1:be:5f:5b:d2:aa:f3:c7:f1:e3:02:
                    b9:7e:05:c9:c3:c8:ce:98:37:df:53:44:3e:0e:81:
                    1c:3b:31:a7:a6:ac:20:2d:d8:a9:e1:ec:eb:db:91:
                    f6:39:d6:fd:17:fe:53:90:39:dd:04:74:fd:4a:da:
                    92:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:16:DA:4D:4D:07:71:B2:57:6F:88:AD:36:CF:00:A3:8A:75:C2:FD
            X509v3 Authority Key Identifier:
                keyid:0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a316532303a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:1e20::/48

    Signature Algorithm: sha256WithRSAEncryption
         93:ac:ca:f8:82:df:59:bc:3f:9b:d5:4c:dd:e5:fd:c1:25:75:
         83:07:2b:95:ff:fe:6b:a4:26:1c:d8:22:14:c4:d1:2c:22:b1:
         7f:c1:91:2e:65:12:d0:54:b0:7c:b8:cf:c8:27:e3:49:6a:b2:
         93:31:80:91:af:ef:ae:b0:13:e8:3d:50:9d:76:41:79:00:09:
         1d:2f:00:d7:0e:2f:cc:16:cd:22:ac:db:c2:af:1c:ca:66:39:
         fc:06:2f:c8:7c:00:8a:2d:17:00:40:34:6a:ac:6b:54:bb:2f:
         20:32:a4:e0:24:f8:3a:66:e9:de:ac:2b:70:61:29:62:f2:76:
         4b:a9:5d:f1:e2:14:12:fe:e0:5f:e3:11:96:70:53:3e:a1:f8:
         64:f8:d9:e4:86:e7:3a:55:49:d3:4a:5a:77:b3:1e:6c:27:47:
         2b:89:ab:09:39:a6:7c:5b:94:f9:92:aa:63:01:53:f6:c1:f6:
         22:6f:f1:37:a7:5c:3a:12:a3:c8:42:d9:c8:1d:55:90:95:96:
         b5:d5:e4:a4:59:3c:68:66:a1:d5:7d:97:05:8d:a6:12:75:e5:
         28:fb:d1:20:1e:79:a2:ea:23:18:c3:fd:40:f3:5b:c0:62:60:
         6a:a0:79:a8:19:89:25:23:17:42:ef:e5:f6:27:fc:25:21:bc:
         0f:53:f1:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 14:25:00 2025 by rpki-client