Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a316632333a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a316632333a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          R45xwWnV9DTXjQxLKaD0EVOZazDvcnFWvnq8YxRprIo=
Subject key identifier:   35:1C:00:AD:83:4D:3F:5D:83:77:A5:12:27:B7:86:3F:13:EF:79:D9
Certificate issuer:       /CN=0AAD221E4070989D4939FACA0F0981AB26E93895
Certificate serial:       6D5954F79E9011154FBF246C6D664E6F84E130BB
Authority key identifier: 0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a316632333a3a2f34382d313238203d3e203532303235.roa
Signing time:             Thu 24 Apr 2025 13:19:35 +0000
ROA not before:           Thu 24 Apr 2025 13:14:35 +0000
ROA not after:            Thu 23 Apr 2026 13:19:35 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:1f23::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Apr 2025 12:28:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:59:54:f7:9e:90:11:15:4f:bf:24:6c:6d:66:4e:6f:84:e1:30:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AAD221E4070989D4939FACA0F0981AB26E93895
        Validity
            Not Before: Apr 24 13:14:35 2025 GMT
            Not After : Apr 23 13:19:35 2026 GMT
        Subject: CN=351C00AD834D3F5D8377A51227B7863F13EF79D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:71:ac:2f:24:2b:93:0f:f3:0d:a2:6c:1e:2b:
                    9a:f8:8a:aa:fa:3d:a8:ae:3d:fd:bc:95:cf:75:9d:
                    7f:bf:0e:a7:61:c2:b3:5e:fa:e8:50:df:a0:ed:a9:
                    0d:70:a0:a3:37:91:ca:dc:a6:96:24:e4:4a:80:90:
                    1b:ac:12:bc:b3:71:0e:ff:0f:7f:a1:e2:70:a4:b5:
                    da:23:89:9a:a4:f8:77:a6:bb:a7:3a:a0:a8:98:5c:
                    4b:c4:16:e2:ae:0a:98:27:55:b3:51:df:99:33:85:
                    67:d3:3d:e4:85:8d:58:07:4a:25:96:cb:d7:a9:d3:
                    b5:98:b5:22:5e:e0:30:cc:fe:d5:d9:ce:88:df:d3:
                    e3:98:fe:b6:75:29:c6:f9:97:76:0d:43:77:1e:dd:
                    30:b7:9c:c6:9b:11:d2:58:49:0b:31:94:ac:ee:7c:
                    39:7b:06:ba:17:d3:05:45:d3:44:74:a8:35:1f:a9:
                    47:5b:19:7f:2e:0b:47:ab:a4:5a:5f:6f:7e:9e:c4:
                    ab:68:c1:35:57:82:f5:d1:e0:83:ed:3b:c2:80:94:
                    ad:b0:c8:c0:b2:af:62:1d:2f:ea:7f:66:4b:3a:e8:
                    c5:e2:cf:af:50:89:8f:07:6d:23:fc:7a:02:72:1b:
                    dc:ac:6f:bc:84:60:4c:1a:bc:80:62:9a:48:39:61:
                    1d:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:1C:00:AD:83:4D:3F:5D:83:77:A5:12:27:B7:86:3F:13:EF:79:D9
            X509v3 Authority Key Identifier:
                keyid:0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a316632333a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:1f23::/48

    Signature Algorithm: sha256WithRSAEncryption
         13:a0:24:f5:36:52:ea:ad:92:6a:45:57:82:8c:dd:5a:92:db:
         8f:5d:c5:e9:22:29:ed:2d:15:2e:d9:37:1e:58:e2:b8:9c:86:
         28:39:f6:bb:3a:4c:9e:bc:e0:9e:0f:97:21:38:17:a2:d0:f1:
         b7:db:75:4d:c5:fd:0c:15:77:ed:46:26:44:b1:6c:f8:33:fd:
         62:a9:bd:57:cd:1f:66:e1:51:20:f5:e8:4a:c1:10:01:b2:20:
         66:80:88:ab:6e:73:c3:55:27:01:f7:05:df:a6:80:a9:d1:97:
         ca:cb:e9:97:0c:f3:2d:ee:1f:14:f8:ff:7f:1b:a1:11:63:55:
         73:46:e5:b1:8c:20:42:08:09:9e:7f:4e:aa:f8:30:33:67:a2:
         d4:5e:d9:e8:3b:8c:8d:8c:8f:b9:cd:1e:1d:f0:ea:d7:49:ad:
         f0:0f:4c:fd:af:8f:c5:c5:ec:4d:79:3c:36:12:84:b9:ef:3e:
         2b:13:e1:91:37:4c:8e:33:a5:64:9d:cd:57:81:a4:36:ca:ee:
         5e:85:07:2e:3b:92:6d:82:25:52:dd:12:b9:e0:f4:ff:2a:1e:
         57:04:df:19:11:02:13:0f:65:93:0d:02:85:d1:74:27:23:71:
         75:1f:48:23:ae:47:db:05:2e:5a:36:b2:47:bf:71:c0:f4:18:
         9a:4f:13:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 03:05:20 2025 by rpki-client