Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a37393a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a37393a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          Lr2IDbvHxMt3xGh0pADd3N1CItqDWwFsyKcNymJBk1s=
Subject key identifier:   E4:18:B5:BE:9A:F0:18:72:BB:9C:26:09:94:F7:50:03:DD:75:78:AD
Certificate issuer:       /CN=0AAD221E4070989D4939FACA0F0981AB26E93895
Certificate serial:       1FEDCCD0DBC87983BE7E702F0ED844C815351862
Authority key identifier: 0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a37393a3a2f34382d313238203d3e203532303235.roa
Signing time:             Thu 24 Apr 2025 13:19:24 +0000
ROA not before:           Thu 24 Apr 2025 13:14:24 +0000
ROA not after:            Thu 23 Apr 2026 13:19:24 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:79::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Apr 2025 23:05:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:ed:cc:d0:db:c8:79:83:be:7e:70:2f:0e:d8:44:c8:15:35:18:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AAD221E4070989D4939FACA0F0981AB26E93895
        Validity
            Not Before: Apr 24 13:14:24 2025 GMT
            Not After : Apr 23 13:19:24 2026 GMT
        Subject: CN=E418B5BE9AF01872BB9C260994F75003DD7578AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:aa:c7:f9:f2:4c:fd:68:46:76:a0:5d:b5:2b:
                    ef:c9:64:41:9a:00:85:d7:8a:92:e6:02:00:45:19:
                    8c:d4:f2:b2:fc:d1:5a:14:64:02:68:54:7d:d5:d5:
                    a1:4c:27:e8:df:ca:f6:86:7b:eb:84:18:5c:24:81:
                    78:8d:61:0a:6a:2a:ad:d9:41:4f:a8:2f:2f:6c:74:
                    0a:7e:04:83:59:0e:fe:c5:17:6e:cc:67:6b:71:c1:
                    92:e1:9d:03:8b:e1:74:e3:92:55:e8:52:17:43:c1:
                    c7:ec:72:b6:01:cb:10:cf:a3:f0:d8:cb:56:eb:cb:
                    31:0d:14:11:d2:e2:f8:7c:06:e2:7b:4c:26:98:fc:
                    71:40:96:aa:73:f6:cf:74:cd:dc:42:bf:f8:52:4b:
                    51:d5:4e:ad:66:ee:07:e0:eb:11:a3:a6:0c:0c:dd:
                    8d:e1:30:75:31:37:76:f9:a2:16:df:2a:87:bc:5f:
                    60:2b:28:5a:66:66:70:95:82:0e:3d:08:70:a2:6f:
                    fa:41:93:13:17:47:d5:44:a7:8a:a0:e8:39:81:77:
                    49:13:1a:24:7b:46:33:c5:14:54:86:e4:4e:74:bc:
                    0f:9b:24:17:53:9a:89:0b:96:e7:4e:e1:80:38:07:
                    6c:40:20:06:24:b2:14:8e:e5:6c:78:4a:7a:59:93:
                    3d:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:18:B5:BE:9A:F0:18:72:BB:9C:26:09:94:F7:50:03:DD:75:78:AD
            X509v3 Authority Key Identifier:
                keyid:0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a37393a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:79::/48

    Signature Algorithm: sha256WithRSAEncryption
         53:4f:32:a9:13:b0:df:c7:e2:77:ce:2b:83:f0:cf:2a:06:68:
         a1:ec:68:63:41:da:5e:db:c1:05:0c:b8:ee:a8:8f:09:e5:6d:
         c1:56:18:14:82:03:30:ea:f5:9d:5c:df:66:c9:a3:63:e9:f1:
         d5:aa:5f:8d:0c:c9:87:2b:08:ea:06:5e:1f:b6:7b:16:df:96:
         b9:9c:d2:26:cc:fb:0e:df:e3:46:30:8f:6e:f0:b0:d9:f9:b0:
         07:d1:c0:b8:f5:31:3c:3d:af:6f:7f:83:af:44:8a:a7:a5:0b:
         1c:06:37:1b:9c:c9:4b:dd:92:f5:40:d6:71:d0:38:97:a3:99:
         14:60:5c:e0:b1:8a:bd:9b:8e:fb:1c:07:03:84:70:1c:9d:89:
         5e:a2:a9:9d:84:a3:01:37:74:75:ef:28:d0:1d:a5:05:d4:73:
         5f:17:ae:d5:23:0f:41:df:54:ef:22:3f:8b:8b:b9:20:c0:b2:
         0f:76:6d:7a:04:6a:90:69:ce:9a:92:4b:a1:88:2d:2c:0a:ea:
         3e:be:9c:cc:77:10:c2:c4:3a:ef:a2:ad:f3:68:09:6a:34:04:
         b3:fa:13:62:98:87:40:5b:7a:c1:46:08:25:eb:c6:4d:32:3d:
         0f:8c:90:ea:7f:17:9c:9c:09:55:6e:af:90:c0:de:8a:0c:2a:
         96:94:d1:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 14:38:27 2025 by rpki-client