Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a33343a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a33343a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          DRRaH2H6b7eUKxmrSCrHBAHuwEN34rzgJha2MoCAEPQ=
Subject key identifier:   0A:1B:40:9C:E6:04:FB:28:95:AB:05:32:3C:76:0F:79:1C:DD:DE:8E
Certificate issuer:       /CN=0AAD221E4070989D4939FACA0F0981AB26E93895
Certificate serial:       43DF1BCDBC256DBC4B0B3704440C081ACB53D36B
Authority key identifier: 0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a33343a3a2f34382d313238203d3e203532303235.roa
Signing time:             Sat 19 Apr 2025 06:01:06 +0000
ROA not before:           Sat 19 Apr 2025 05:56:06 +0000
ROA not after:            Sat 18 Apr 2026 06:01:06 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:34::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Apr 2025 09:10:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:df:1b:cd:bc:25:6d:bc:4b:0b:37:04:44:0c:08:1a:cb:53:d3:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AAD221E4070989D4939FACA0F0981AB26E93895
        Validity
            Not Before: Apr 19 05:56:06 2025 GMT
            Not After : Apr 18 06:01:06 2026 GMT
        Subject: CN=0A1B409CE604FB2895AB05323C760F791CDDDE8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:b5:0b:94:0b:eb:50:02:ce:63:24:db:b4:98:
                    97:5e:c6:96:c5:a4:9d:ef:9c:9e:a4:00:dd:ca:1e:
                    8e:c2:87:0a:97:8e:0a:2e:f9:f9:6d:ec:b9:8d:98:
                    a6:f2:42:88:b8:96:e8:a3:db:bb:94:36:6b:d4:cc:
                    58:fe:ac:06:66:81:7f:b3:8b:b6:cf:bf:fe:73:ea:
                    fc:c0:65:14:f5:6d:da:cb:da:4b:e0:81:a7:bf:25:
                    de:d8:17:78:ae:51:6b:b3:2c:20:ed:ed:29:73:5e:
                    08:f7:11:f3:93:e1:63:b0:48:7b:e4:c6:e3:29:de:
                    c0:9b:b9:0e:64:16:8d:6b:d5:a1:58:33:15:90:5e:
                    13:3b:21:c4:97:8b:fc:b3:80:bd:20:6f:43:97:ad:
                    74:f4:87:26:3e:32:ed:e4:9a:fa:a7:00:6a:2f:08:
                    95:85:af:b2:2f:66:14:99:cf:48:03:0c:43:7b:87:
                    29:86:10:1f:36:74:f2:98:a6:24:61:a2:b5:60:80:
                    54:d2:70:8e:8e:b2:82:43:11:02:8b:48:94:93:2c:
                    a5:32:a4:4e:5b:ae:7f:f9:5f:25:3c:61:15:25:c4:
                    33:26:ec:ba:9b:b2:f6:31:12:c4:25:98:ba:2c:52:
                    8c:41:c9:31:08:69:32:c0:37:dd:4c:e0:bb:67:1c:
                    da:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:1B:40:9C:E6:04:FB:28:95:AB:05:32:3C:76:0F:79:1C:DD:DE:8E
            X509v3 Authority Key Identifier:
                keyid:0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a33343a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:34::/48

    Signature Algorithm: sha256WithRSAEncryption
         8c:ef:c5:80:a6:02:32:19:86:c9:6b:59:65:d3:83:fc:cc:b5:
         1f:10:92:19:4e:20:2a:fb:3e:6c:2f:5c:14:56:a7:1e:55:e7:
         90:a2:8f:83:fe:8c:2e:af:1b:3d:6d:7e:67:dc:50:27:5b:cc:
         bc:19:85:5c:6b:0a:22:d0:6b:d0:f2:cd:4b:61:33:2c:22:a3:
         87:06:6b:ce:89:3c:96:0f:4b:9a:66:dc:c2:ea:99:07:c1:f2:
         5d:5f:76:b6:47:64:10:94:eb:a1:d0:9a:37:e2:cc:a1:3a:20:
         d4:9f:3e:ea:8b:c5:97:4a:69:87:83:1e:63:be:c7:85:66:ca:
         87:9a:be:2c:6d:09:dd:7b:70:1f:60:13:b5:8d:d1:32:ad:96:
         41:7e:2f:60:5c:0a:da:58:ae:78:af:7c:04:ec:92:82:12:ca:
         83:1e:9c:ff:f2:b8:6e:27:c3:8b:08:5b:3c:8c:df:a8:73:40:
         1f:76:f8:fb:da:1c:be:cc:55:bd:be:43:7c:d1:e9:a2:58:43:
         38:d3:57:d7:4d:21:72:29:2e:30:3a:d5:93:69:3e:92:29:a6:
         29:c8:a5:b3:36:f9:21:38:9e:69:5f:91:0d:25:71:29:bb:3e:
         0a:18:81:e9:45:9c:a9:e2:67:e7:05:dc:be:f2:a2:56:19:45:
         5d:66:8d:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 19:56:18 2025 by rpki-client