Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a323933343a3a2f34382d3438203d3e203532303235.roa
File:                     326130353a646663343a323933343a3a2f34382d3438203d3e203532303235.roa (raw, json)
Hash identifier:          cDN2At/LQRXEhN9umWQ+ozJjcDzmbsArhB6mnJjfaUM=
Subject key identifier:   75:AE:15:1D:2E:8F:5D:72:6B:AE:46:70:33:9A:F1:51:6B:DE:42:E6
Certificate issuer:       /CN=0AAD221E4070989D4939FACA0F0981AB26E93895
Certificate serial:       6CB6C073F822351D0D3DD14375DF4A0DC653B143
Authority key identifier: 0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a323933343a3a2f34382d3438203d3e203532303235.roa
Signing time:             Thu 10 Apr 2025 11:14:21 +0000
ROA not before:           Thu 10 Apr 2025 11:09:21 +0000
ROA not after:            Thu 09 Apr 2026 11:14:21 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:2934::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Apr 2025 03:34:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:b6:c0:73:f8:22:35:1d:0d:3d:d1:43:75:df:4a:0d:c6:53:b1:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AAD221E4070989D4939FACA0F0981AB26E93895
        Validity
            Not Before: Apr 10 11:09:21 2025 GMT
            Not After : Apr  9 11:14:21 2026 GMT
        Subject: CN=75AE151D2E8F5D726BAE4670339AF1516BDE42E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:bf:fd:09:13:98:00:22:c8:1e:20:b6:d6:f1:
                    42:f1:77:9e:80:02:0c:b0:d7:2f:d0:56:a4:21:6e:
                    6a:b1:a0:75:eb:fa:eb:30:08:99:3b:13:65:40:fc:
                    24:b8:83:11:da:95:fa:b9:ca:15:76:53:01:8f:32:
                    aa:ad:0d:40:94:58:cd:a1:0f:43:f0:1c:82:60:56:
                    11:e0:aa:ae:3f:dd:a5:34:e7:73:d2:82:fa:a4:bf:
                    57:51:94:66:ae:0c:9d:93:ed:02:ab:ea:c8:9e:38:
                    b0:8d:32:cf:36:79:f1:ae:56:6a:30:03:8c:67:55:
                    96:cf:42:f8:e6:07:c7:b4:5d:86:af:04:d0:50:b0:
                    0b:38:7f:06:c8:5d:b9:ed:7b:fb:de:e9:6c:e3:6e:
                    52:08:15:ea:4e:f9:54:1b:ac:0b:88:2a:93:28:c5:
                    c0:fa:2d:5f:ec:97:f4:76:f4:76:9a:76:6d:c5:37:
                    f2:62:f5:4e:f5:62:f4:c6:ca:89:8c:7b:80:1e:6b:
                    08:c4:39:76:59:8b:69:ff:5a:bf:45:5c:b4:86:6f:
                    7c:cd:ee:d6:3d:60:2d:12:e4:f6:34:02:8f:42:51:
                    d1:5f:c9:74:c3:f9:95:23:3c:0d:2a:2b:9e:ca:55:
                    ff:b8:c9:c4:c9:73:c9:cc:ec:c0:43:89:4e:1c:a1:
                    03:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:AE:15:1D:2E:8F:5D:72:6B:AE:46:70:33:9A:F1:51:6B:DE:42:E6
            X509v3 Authority Key Identifier:
                keyid:0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a323933343a3a2f34382d3438203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:2934::/48

    Signature Algorithm: sha256WithRSAEncryption
         a4:0d:e3:10:6a:7e:11:7b:28:26:86:0c:a3:30:ee:7f:c3:a8:
         87:d0:87:ac:2c:95:62:81:0b:1f:cd:0a:96:5a:93:73:08:a4:
         f4:f3:f1:f8:ff:06:0f:62:5e:b2:20:a5:2f:5d:21:66:ea:b9:
         0d:7c:89:f0:ba:7d:50:a7:56:f9:1e:1d:b5:c4:77:4c:45:20:
         a4:ce:b6:b1:48:26:98:58:dd:2d:fc:04:ba:7b:ca:c4:7f:86:
         c4:ab:0e:b3:f3:ab:8f:da:eb:c1:fd:0e:e6:9a:94:1b:2e:b0:
         27:f2:7b:c9:28:f2:e4:85:09:43:69:bc:25:58:fc:48:5a:6d:
         b3:f3:73:77:bb:14:76:2d:a6:d1:e4:80:73:da:c4:d8:4b:35:
         23:24:8e:4f:f6:c6:be:0d:7a:29:fc:97:97:8d:28:9a:dd:e2:
         1a:d5:e6:7d:63:08:b4:8a:4a:32:74:63:d5:71:21:49:88:a6:
         9b:32:7b:17:9e:a9:0c:9f:34:19:08:15:af:c3:77:de:85:4c:
         d8:76:bf:ca:7a:6f:b7:98:43:28:f2:f6:aa:34:c2:41:de:2e:
         3b:a0:8e:33:7e:11:de:e8:b9:88:50:45:bd:bf:32:27:5c:35:
         a2:04:19:01:93:88:ab:8a:6f:d2:a9:51:72:73:b2:0a:72:1d:
         69:78:7f:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 16:00:23 2025 by rpki-client