Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a35373a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a35373a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          /XVrRkmjaxGr0sbJo/kDx97QBkkvo5Pm50ZOawvOLdE=
Subject key identifier:   4B:D9:2A:BD:0C:50:27:7E:62:C1:D9:2C:E2:96:3C:27:54:5F:AE:E2
Certificate issuer:       /CN=0AAD221E4070989D4939FACA0F0981AB26E93895
Certificate serial:       4E630653B24532C0DB8B24D53A022D16465A19AC
Authority key identifier: 0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a35373a3a2f34382d313238203d3e203532303235.roa
Signing time:             Thu 24 Apr 2025 13:19:29 +0000
ROA not before:           Thu 24 Apr 2025 13:14:29 +0000
ROA not after:            Thu 23 Apr 2026 13:19:29 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:57::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Apr 2025 09:10:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:63:06:53:b2:45:32:c0:db:8b:24:d5:3a:02:2d:16:46:5a:19:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AAD221E4070989D4939FACA0F0981AB26E93895
        Validity
            Not Before: Apr 24 13:14:29 2025 GMT
            Not After : Apr 23 13:19:29 2026 GMT
        Subject: CN=4BD92ABD0C50277E62C1D92CE2963C27545FAEE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a9:be:9a:b6:e7:76:53:b4:cd:94:3a:7c:2d:
                    80:d0:14:d3:28:c5:db:98:bc:ad:fa:80:66:b7:64:
                    c6:63:2f:8e:53:7d:aa:cc:60:d0:7f:8a:09:36:34:
                    54:ef:55:f5:b3:03:54:29:21:ce:1d:ef:19:ee:09:
                    72:d8:64:d5:54:a1:fe:39:94:2e:7a:a9:2a:3b:d7:
                    d4:91:c2:9f:b8:65:b6:94:7f:2d:7f:4c:94:a8:db:
                    d3:8e:d1:42:94:db:20:eb:60:f4:d0:9e:9c:fb:d9:
                    4b:f2:c1:49:de:16:cf:98:ad:31:d6:b6:68:7e:01:
                    7a:e3:8c:f3:bc:af:29:2d:7b:3f:ea:36:9e:fc:f9:
                    75:b3:83:5b:25:fb:bc:df:a6:7f:e8:f3:3d:a5:88:
                    6a:1e:a3:25:7a:d9:7a:8c:2c:7f:73:04:a7:ff:84:
                    97:9c:6e:94:0e:15:e0:52:73:9d:2b:cb:d0:41:de:
                    0c:10:46:0e:9f:15:66:01:02:c7:07:95:e8:b5:5f:
                    4a:5b:3f:3e:f3:74:c5:50:df:e5:97:e8:96:be:e3:
                    6a:d1:35:02:dc:58:57:fa:56:fc:13:bc:d7:95:53:
                    d2:6b:cf:a6:3a:f9:e6:2d:46:7d:7d:0b:df:9c:8b:
                    6e:8b:54:1c:12:cc:98:ad:97:93:2d:95:60:66:b9:
                    5d:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:D9:2A:BD:0C:50:27:7E:62:C1:D9:2C:E2:96:3C:27:54:5F:AE:E2
            X509v3 Authority Key Identifier:
                keyid:0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a35373a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:57::/48

    Signature Algorithm: sha256WithRSAEncryption
         75:5a:7e:7d:c7:3e:e8:e6:85:df:09:91:c0:65:cc:58:8b:d4:
         78:a4:a3:d0:33:45:d3:fb:d5:74:bd:7a:8b:7f:92:76:37:b3:
         66:90:b7:90:77:dc:99:95:62:57:47:38:32:11:64:d9:71:36:
         c8:5e:2c:1e:3d:bc:ab:42:20:cf:f5:19:0a:2a:18:53:92:53:
         f3:7c:6e:ef:74:f7:dc:7b:66:bb:17:7e:83:b8:bc:c0:65:38:
         03:a9:8d:72:56:31:e5:29:df:06:83:f3:6f:7c:09:c4:ab:07:
         10:e6:5a:5d:46:a0:92:68:44:6b:89:4f:6c:24:dd:9b:5d:43:
         20:b8:b7:6f:ac:0c:6b:71:ff:dc:de:7b:0b:66:36:74:9b:ec:
         ab:5d:e1:b4:1f:9c:e8:9d:01:7c:3e:53:ff:83:aa:0a:29:89:
         09:3f:3d:42:50:6f:ca:f8:d8:81:b2:75:7c:da:58:8b:1c:14:
         7e:59:9f:0a:42:49:f1:ef:46:79:4c:f7:66:e2:15:ab:0c:51:
         bc:42:a5:f9:d9:51:f6:38:a3:c0:0f:f5:ab:53:10:a2:50:ac:
         22:aa:ea:5b:94:7e:30:83:98:cc:d6:64:eb:6f:6c:b3:44:65:
         5a:d9:3a:2e:96:9d:55:32:d4:48:81:45:be:62:63:25:22:fa:
         c7:01:73:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:54:17 2025 by rpki-client