Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a39633a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a39633a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          vev0/fvxtxXSKUmUhW6P1BYKuOSG3nZQVJOxd90AEUs=
Subject key identifier:   31:DB:81:AD:DE:BE:57:2E:0D:77:D5:94:5B:1E:37:92:DD:BE:BE:CC
Certificate issuer:       /CN=0AAD221E4070989D4939FACA0F0981AB26E93895
Certificate serial:       6B10BF8079C54D8C00A8F18C52AE526AAA0EDC7D
Authority key identifier: 0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a39633a3a2f34382d313238203d3e203532303235.roa
Signing time:             Thu 24 Apr 2025 13:19:36 +0000
ROA not before:           Thu 24 Apr 2025 13:14:36 +0000
ROA not after:            Thu 23 Apr 2026 13:19:36 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:9c::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Apr 2025 03:34:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:10:bf:80:79:c5:4d:8c:00:a8:f1:8c:52:ae:52:6a:aa:0e:dc:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AAD221E4070989D4939FACA0F0981AB26E93895
        Validity
            Not Before: Apr 24 13:14:36 2025 GMT
            Not After : Apr 23 13:19:36 2026 GMT
        Subject: CN=31DB81ADDEBE572E0D77D5945B1E3792DDBEBECC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:aa:76:93:b4:46:da:5e:4d:eb:b2:bd:3a:88:
                    25:35:b3:f6:e1:3c:be:06:a0:e8:48:7c:5a:39:b6:
                    02:db:e5:e6:86:db:6b:13:10:e7:6b:4f:39:83:21:
                    6c:d0:e6:d6:e4:69:4a:23:6f:a2:a9:35:28:a2:30:
                    e1:6d:e0:e0:65:b2:d4:eb:52:6a:36:5a:d4:b6:a4:
                    55:fd:e9:5c:6e:6d:ab:87:9a:12:66:d7:fd:ce:25:
                    cf:e9:16:3e:3e:ab:00:5e:30:4e:7d:a1:1b:79:76:
                    ad:2f:c9:9f:9a:82:34:7f:52:1f:5e:ae:04:9f:17:
                    e6:fe:12:e2:21:2b:3a:f5:6d:f7:27:b1:24:ab:bd:
                    f0:28:22:21:7c:81:71:65:0b:ba:7d:fb:38:b7:b7:
                    a7:d2:26:37:51:2d:ad:05:4a:3e:36:3c:c2:a5:1a:
                    95:b3:39:be:10:9a:ec:f7:d5:08:4b:26:21:4e:1c:
                    30:9b:15:34:e1:ee:a5:e2:d2:c4:72:9a:7a:a0:9f:
                    fb:4b:8a:82:ee:17:db:3e:e2:69:94:98:ff:de:c5:
                    15:1b:8d:9c:6c:68:7a:aa:ea:60:6a:b2:9e:71:c1:
                    e3:ca:cb:78:06:59:5d:14:32:41:67:da:52:26:15:
                    c0:43:b5:22:e2:75:02:f6:8a:69:38:dd:02:6d:5f:
                    c7:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:DB:81:AD:DE:BE:57:2E:0D:77:D5:94:5B:1E:37:92:DD:BE:BE:CC
            X509v3 Authority Key Identifier:
                keyid:0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a39633a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:9c::/48

    Signature Algorithm: sha256WithRSAEncryption
         60:0d:22:e3:af:69:67:53:25:b5:ba:de:5a:d5:f5:1a:aa:95:
         ef:b1:be:e3:fe:25:f7:97:f2:cf:ea:a1:30:d2:dc:28:7c:d9:
         86:56:c0:fe:0c:29:56:45:a2:5a:f2:c9:16:ab:af:e2:e7:2e:
         72:58:97:34:9a:08:ac:ff:7d:cd:3d:54:47:6b:e2:4a:e8:34:
         2f:37:41:b6:9c:98:6c:d3:a1:9f:a3:bd:5e:1a:ae:72:f8:c1:
         44:7d:56:40:da:33:3e:8b:dd:b5:76:6e:b5:bd:ed:cf:d8:78:
         53:f1:bb:95:8e:c9:a4:f5:b3:63:79:1d:79:0a:3a:29:bc:2c:
         35:8c:54:fd:72:ce:99:e8:f3:ba:b3:ab:ae:86:2c:fe:6c:2a:
         f1:d5:83:83:86:d3:68:ee:07:42:5e:31:aa:a3:c5:87:d4:87:
         ca:8e:d4:1c:67:a4:fb:89:06:50:45:86:f4:65:25:46:47:ae:
         a9:30:54:e5:a2:bb:75:26:1a:86:6d:3f:90:51:05:af:8b:7e:
         01:8e:37:b9:03:6c:aa:95:d6:3c:19:72:dd:18:b7:38:fc:c9:
         8a:83:fe:ac:af:2d:24:16:74:29:e7:a1:13:98:12:4d:da:83:
         4c:9c:b9:98:86:21:9e:db:ba:ab:69:e0:42:7f:6b:e6:78:2f:
         f1:1e:55:a9
-----BEGIN CERTIFICATE-----
MIIFHzCCBAegAwIBAgIUaxC/gHnFTYwAqPGMUq5SaqoO3H0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEFBRDIyMUU0MDcwOTg5RDQ5MzlGQUNBMEYwOTgxQUIy
NkU5Mzg5NTAeFw0yNTA0MjQxMzE0MzZaFw0yNjA0MjMxMzE5MzZaMDMxMTAvBgNV
BAMTKDMxREI4MUFEREVCRTU3MkUwRDc3RDU5NDVCMUUzNzkyRERCRUJFQ0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcqnaTtEbaXk3rsr06iCU1s/bh
PL4GoOhIfFo5tgLb5eaG22sTEOdrTzmDIWzQ5tbkaUojb6KpNSiiMOFt4OBlstTr
Umo2WtS2pFX96VxubauHmhJm1/3OJc/pFj4+qwBeME59oRt5dq0vyZ+agjR/Uh9e
rgSfF+b+EuIhKzr1bfcnsSSrvfAoIiF8gXFlC7p9+zi3t6fSJjdRLa0FSj42PMKl
GpWzOb4Qmuz31QhLJiFOHDCbFTTh7qXi0sRymnqgn/tLioLuF9s+4mmUmP/exRUb
jZxsaHqq6mBqsp5xwePKy3gGWV0UMkFn2lImFcBDtSLidQL2imk43QJtX8cHAgMB
AAGjggIpMIICJTAdBgNVHQ4EFgQUMduBrd6+Vy4Nd9WUWx43kt2+vswwHwYDVR0j
BBgwFoAUCq0iHkBwmJ1JOfrKDwmBqybpOJUwDgYDVR0PAQH/BAQDAgeAMG4GA1Ud
HwRnMGUwY6BhoF+GXXJzeW5jOi8vcnBraS0wMS5wZHhuZXQudWsvcmVwby9wYXJh
ZG94bmV0d29ya3MvMi8wQUFEMjIxRTQwNzA5ODlENDkzOUZBQ0EwRjA5ODFBQjI2
RTkzODk1LmNybDCBkwYIKwYBBQUHAQEEgYYwgYMwgYAGCCsGAQUFBzAChnRyc3lu
YzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYz
ZTAxODU3NTVjOTFiZTNmOWQvMi8wQUFEMjIxRTQwNzA5ODlENDkzOUZBQ0EwRjA5
ODFBQjI2RTkzODk1LmNlcjCBjgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4Zx
cnN5bmM6Ly9ycGtpLTAxLnBkeG5ldC51ay9yZXBvL3BhcmFkb3huZXR3b3Jrcy8y
LzMyNjEzMDM1M2E2NDY2NjMzNDNhMzk2MzNhM2EyZjM0MzgyZDMxMzIzODIwM2Qz
ZTIwMzUzMjMwMzIzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggr
BgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF38QAnDANBgkqhkiG9w0BAQsFAAOC
AQEAYA0i469pZ1MltbreWtX1GqqV77G+4/4l95fyz+qhMNLcKHzZhlbA/gwpVkWi
WvLJFquv4ucucliXNJoIrP99zT1UR2viSug0LzdBtpyYbNOhn6O9XhqucvjBRH1W
QNozPovdtXZutb3tz9h4U/G7lY7JpPWzY3kdeQo6KbwsNYxU/XLOmejzurOrroYs
/mwq8dWDg4bTaO4HQl4xqqPFh9SHyo7UHGek+4kGUEWG9GUlRkeuqTBU5aK7dSYa
hm0/kFEFr4t+AY43uQNsqpXWPBly3Ri3OPzJioP+rK8tJBZ0KeehE5gSTdqDTJy5
mIYhntu6q2ngQn9r5ngv8R5VqQ==
-----END CERTIFICATE-----
Generated at Mon Apr 28 19:24:36 2025 by rpki-client