Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a3a2f34382d3438203d3e203532303235.roa
File:                     326130353a646663343a3a2f34382d3438203d3e203532303235.roa (raw, json)
Hash identifier:          B5Fu3YT1avz71BLzS7NXsbgFJ10SAzydv52n5bNYM4o=
Subject key identifier:   FD:91:16:DE:08:84:EF:DB:D2:29:D7:38:B5:42:E3:2C:E2:5C:54:52
Certificate issuer:       /CN=0AAD221E4070989D4939FACA0F0981AB26E93895
Certificate serial:       4040A379BE52061FD33B2A886F0C3BF57A20EE5B
Authority key identifier: 0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a3a2f34382d3438203d3e203532303235.roa
Signing time:             Thu 12 Jun 2025 23:21:32 +0000
ROA not before:           Thu 12 Jun 2025 23:16:32 +0000
ROA not after:            Thu 11 Jun 2026 23:21:32 +0000
asID:                     52025
IP address blocks:        2a05:dfc4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Jun 2025 20:59:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:40:a3:79:be:52:06:1f:d3:3b:2a:88:6f:0c:3b:f5:7a:20:ee:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AAD221E4070989D4939FACA0F0981AB26E93895
        Validity
            Not Before: Jun 12 23:16:32 2025 GMT
            Not After : Jun 11 23:21:32 2026 GMT
        Subject: CN=FD9116DE0884EFDBD229D738B542E32CE25C5452
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:5c:dc:28:44:ae:b6:fc:29:93:9a:a1:a0:7f:
                    77:89:11:f7:ac:09:b9:37:d6:d9:0b:5f:a5:e6:4f:
                    f8:1b:12:ba:fb:e4:e7:6b:cf:75:fd:53:5a:7e:27:
                    83:97:d3:5c:e4:72:58:89:cb:05:22:6c:49:40:5f:
                    0e:64:dc:57:78:ac:76:e3:9e:6b:65:b1:e7:18:b4:
                    87:8e:ea:35:68:f1:27:cd:bb:13:b2:95:8c:a0:eb:
                    ea:34:72:b0:1c:e3:ee:2e:4f:82:4d:67:26:6e:1b:
                    ee:45:07:72:3f:14:98:18:da:90:6c:6b:18:2d:6e:
                    87:1f:7b:1a:e2:9e:80:0b:f3:9a:ff:53:6e:bf:20:
                    76:51:7f:b7:de:a1:24:4a:db:cb:57:7f:cb:fc:24:
                    f8:f7:96:b1:ad:a8:83:af:3c:c5:e0:41:81:81:e9:
                    c8:b5:82:79:f9:0f:c0:0e:28:86:7d:49:e8:6a:cb:
                    1c:0b:4e:8b:b8:7b:a8:c3:a2:b9:1c:dd:ed:9b:e9:
                    2b:5b:90:d8:69:5a:81:75:aa:78:48:1d:7e:d2:96:
                    eb:29:be:75:8d:90:49:a5:78:8f:6f:98:40:42:de:
                    16:1f:79:14:99:21:b9:03:db:f8:81:5a:ff:1d:4a:
                    6e:ac:05:ae:c1:f9:1f:df:9e:ab:54:91:6e:c6:23:
                    a6:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:91:16:DE:08:84:EF:DB:D2:29:D7:38:B5:42:E3:2C:E2:5C:54:52
            X509v3 Authority Key Identifier:
                keyid:0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a3a2f34382d3438203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4::/48

    Signature Algorithm: sha256WithRSAEncryption
         6a:d8:12:56:3e:4c:5f:78:12:ab:95:c7:a2:1f:02:43:5c:44:
         02:d5:5e:c5:25:9c:b8:bd:31:70:fc:59:33:2a:36:ae:0e:81:
         68:b6:3b:e1:a0:71:56:6f:3a:5f:c1:ad:83:3b:af:55:28:fa:
         d4:91:b8:c4:2b:6d:4f:ad:6a:80:2f:9a:ea:74:62:a3:4f:cc:
         63:cd:6f:19:80:e7:0c:11:6c:c4:a8:07:0d:db:e9:00:2d:5b:
         59:6e:ca:e4:b1:78:20:dc:79:b3:0c:81:22:c5:3f:eb:40:f0:
         a0:3a:8d:c9:74:d3:e7:21:c1:82:8b:0c:16:78:70:2b:05:ab:
         6b:0d:03:96:ed:1e:5f:cf:a6:63:2f:c8:72:b1:93:27:f0:92:
         94:c4:d6:5f:dd:23:54:93:19:c8:42:69:78:35:29:55:38:a2:
         f1:06:a9:09:f5:39:53:c4:7b:ea:f8:15:2c:c2:42:8d:9e:1c:
         02:cb:3b:36:b2:f2:58:30:8a:f4:b3:d2:86:8f:d2:e6:c7:25:
         c5:d6:7c:91:3c:b4:b6:64:83:19:2e:06:62:b9:54:02:e4:e7:
         fc:c9:ad:9f:bb:a0:98:15:04:44:c6:54:9d:ae:a1:e5:a5:ee:
         0b:e8:b3:b3:4c:c2:c4:c4:21:42:f3:a0:ac:30:83:bf:73:1a:
         c5:5d:6a:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgIUQECjeb5SBh/TOyqIbww79Xog7lswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEFBRDIyMUU0MDcwOTg5RDQ5MzlGQUNBMEYwOTgxQUIy
NkU5Mzg5NTAeFw0yNTA2MTIyMzE2MzJaFw0yNjA2MTEyMzIxMzJaMDMxMTAvBgNV
BAMTKEZEOTExNkRFMDg4NEVGREJEMjI5RDczOEI1NDJFMzJDRTI1QzU0NTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXXNwoRK62/CmTmqGgf3eJEfes
Cbk31tkLX6XmT/gbErr75Odrz3X9U1p+J4OX01zkcliJywUibElAXw5k3Fd4rHbj
nmtlsecYtIeO6jVo8SfNuxOylYyg6+o0crAc4+4uT4JNZyZuG+5FB3I/FJgY2pBs
axgtbocfexrinoAL85r/U26/IHZRf7feoSRK28tXf8v8JPj3lrGtqIOvPMXgQYGB
6ci1gnn5D8AOKIZ9SehqyxwLTou4e6jDorkc3e2b6StbkNhpWoF1qnhIHX7Slusp
vnWNkEmleI9vmEBC3hYfeRSZIbkD2/iBWv8dSm6sBa7B+R/fnqtUkW7GI6ZnAgMB
AAGjggIgMIICHDAdBgNVHQ4EFgQU/ZEW3giE79vSKdc4tULjLOJcVFIwHwYDVR0j
BBgwFoAUCq0iHkBwmJ1JOfrKDwmBqybpOJUwDgYDVR0PAQH/BAQDAgeAMG4GA1Ud
HwRnMGUwY6BhoF+GXXJzeW5jOi8vcnBraS0wMS5wZHhuZXQudWsvcmVwby9wYXJh
ZG94bmV0d29ya3MvMi8wQUFEMjIxRTQwNzA5ODlENDkzOUZBQ0EwRjA5ODFBQjI2
RTkzODk1LmNybDCBkwYIKwYBBQUHAQEEgYYwgYMwgYAGCCsGAQUFBzAChnRyc3lu
YzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYz
ZTAxODU3NTVjOTFiZTNmOWQvMi8wQUFEMjIxRTQwNzA5ODlENDkzOUZBQ0EwRjA5
ODFBQjI2RTkzODk1LmNlcjCBhQYIKwYBBQUHAQsEeTB3MHUGCCsGAQUFBzALhmly
c3luYzovL3Jwa2ktMDEucGR4bmV0LnVrL3JlcG8vcGFyYWRveG5ldHdvcmtzLzIv
MzI2MTMwMzUzYTY0NjY2MzM0M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzUzMjMw
MzIzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB
/wQTMBEwDwQCAAIwCQMHACoF38QAADANBgkqhkiG9w0BAQsFAAOCAQEAatgSVj5M
X3gSq5XHoh8CQ1xEAtVexSWcuL0xcPxZMyo2rg6BaLY74aBxVm86X8GtgzuvVSj6
1JG4xCttT61qgC+a6nRio0/MY81vGYDnDBFsxKgHDdvpAC1bWW7K5LF4INx5swyB
IsU/60DwoDqNyXTT5yHBgosMFnhwKwWraw0Dlu0eX8+mYy/IcrGTJ/CSlMTWX90j
VJMZyEJpeDUpVTii8QapCfU5U8R76vgVLMJCjZ4cAss7NrLyWDCK9LPSho/S5scl
xdZ8kTy0tmSDGS4GYrlUAuTn/Mmtn7ugmBUERMZUna6h5aXuC+izs0zCxMQhQvOg
rDCDv3MaxV1qyw==
-----END CERTIFICATE-----
Generated at Mon Jun 16 05:36:36 2025 by rpki-client