Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a326133353a3a2f34382d3438203d3e203532303235.roa
File:                     326130353a646663343a326133353a3a2f34382d3438203d3e203532303235.roa (raw, json)
Hash identifier:          eYs8EkB1rW3VHeKmEdSHKdAM/4zhK1cg1DyF+MCjKLM=
Subject key identifier:   06:24:3C:6C:A5:F2:98:6B:D3:59:DF:78:26:53:AC:A2:1A:0C:EE:A3
Certificate issuer:       /CN=0AAD221E4070989D4939FACA0F0981AB26E93895
Certificate serial:       3ACFB64D2A8EF36FBC026E9936DD299BE16BEC7C
Authority key identifier: 0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a326133353a3a2f34382d3438203d3e203532303235.roa
Signing time:             Thu 10 Apr 2025 11:14:25 +0000
ROA not before:           Thu 10 Apr 2025 11:09:25 +0000
ROA not after:            Thu 09 Apr 2026 11:14:25 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:2a35::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Apr 2025 12:28:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:cf:b6:4d:2a:8e:f3:6f:bc:02:6e:99:36:dd:29:9b:e1:6b:ec:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AAD221E4070989D4939FACA0F0981AB26E93895
        Validity
            Not Before: Apr 10 11:09:25 2025 GMT
            Not After : Apr  9 11:14:25 2026 GMT
        Subject: CN=06243C6CA5F2986BD359DF782653ACA21A0CEEA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:9f:99:49:c4:6f:fd:f4:aa:5f:5f:44:17:6f:
                    3e:3a:a2:3a:a9:0f:a4:b4:cf:36:fe:7f:35:f0:0b:
                    b0:e8:dd:cf:0d:40:6f:92:99:e2:f2:e0:47:2c:72:
                    9a:08:36:5a:ca:52:39:c7:84:76:18:03:3e:c7:de:
                    8d:05:95:a5:ea:ed:f0:2e:09:02:0a:92:aa:82:c3:
                    dc:fe:ea:ae:ec:e9:8f:55:63:82:29:0a:df:3e:e5:
                    40:17:7f:30:fa:da:94:f9:d5:b5:4f:05:11:2b:d3:
                    99:8f:3f:2e:88:d0:c0:83:cd:13:36:59:ef:9c:d2:
                    b8:6e:cb:f6:11:f2:21:03:dc:86:08:e4:e3:14:6c:
                    8f:12:3b:0e:31:a2:37:a7:a1:95:52:a4:e9:20:f4:
                    78:17:b9:87:7a:7d:d6:a8:9c:3d:7f:3b:dd:d1:36:
                    07:ca:06:ed:57:04:58:23:6a:35:f5:ab:b8:68:8c:
                    48:35:0e:3e:ec:44:3b:5f:03:ec:c1:52:2e:a4:fe:
                    06:18:5f:35:c8:b6:1c:9c:db:a9:0a:58:19:bc:27:
                    5d:76:f4:4e:92:66:04:f5:77:06:02:55:4a:80:ed:
                    bb:45:28:b1:f8:a6:7b:05:59:97:7d:84:2d:45:01:
                    c9:11:9c:25:b4:a7:c2:95:00:3d:d6:21:2c:e0:21:
                    81:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:24:3C:6C:A5:F2:98:6B:D3:59:DF:78:26:53:AC:A2:1A:0C:EE:A3
            X509v3 Authority Key Identifier:
                keyid:0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a326133353a3a2f34382d3438203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:2a35::/48

    Signature Algorithm: sha256WithRSAEncryption
         80:16:b3:a6:68:d0:cd:6e:58:dc:f3:06:4a:e6:58:42:be:fc:
         10:f1:94:82:3e:c1:67:5f:a3:ed:d1:d8:17:30:7e:28:cf:0b:
         10:36:a7:e2:74:6f:9b:1a:8b:30:e8:ff:b9:2a:4b:1f:b3:b2:
         dc:d8:a3:48:cb:1a:05:16:e6:dd:2c:a2:15:26:10:b2:23:90:
         03:10:99:8b:90:b7:bb:e4:21:05:45:e8:74:08:b3:4b:70:40:
         f3:00:65:90:49:36:b6:41:fc:d1:34:8d:52:c7:59:0b:04:ab:
         c2:a3:11:56:4e:52:06:8b:e0:47:70:ae:65:08:10:3d:2f:77:
         9c:50:ef:d5:43:68:2f:02:31:94:01:d1:a7:1e:92:1d:72:e9:
         17:58:fb:d2:c2:79:f8:15:06:46:29:da:0b:20:7e:26:94:ef:
         f0:e6:19:be:9b:0c:89:e6:c7:0f:83:71:86:70:f7:8e:73:b2:
         2d:49:13:77:4b:fe:ee:27:1f:55:45:13:03:ce:5e:fb:c1:3d:
         ad:50:b5:7a:27:ec:6c:da:3d:7f:9d:06:04:24:0a:3c:ac:1f:
         de:2c:ed:4f:ab:22:3c:49:0a:26:a0:4c:04:99:1b:69:47:dc:
         72:61:bb:81:ad:84:93:35:be:57:fe:46:18:fd:fd:48:c0:84:
         61:70:7b:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 00:01:27 2025 by rpki-client