Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a6264663a3a2f34382d3438203d3e203532303235.roa
File:                     326130353a646663343a6264663a3a2f34382d3438203d3e203532303235.roa (raw, json)
Hash identifier:          otWBnGTT/+eRQBuF0vdKKOW3NJDblzaOdXItJU+co+s=
Subject key identifier:   93:F0:15:AE:91:9B:7C:8C:31:56:9B:85:E8:D6:0D:28:85:DD:AE:04
Certificate issuer:       /CN=0AAD221E4070989D4939FACA0F0981AB26E93895
Certificate serial:       63EEBBD0F997F8FEB130F48403B22B104A47646B
Authority key identifier: 0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a6264663a3a2f34382d3438203d3e203532303235.roa
Signing time:             Thu 24 Apr 2025 13:19:37 +0000
ROA not before:           Thu 24 Apr 2025 13:14:37 +0000
ROA not after:            Thu 23 Apr 2026 13:19:37 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:bdf::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Apr 2025 23:05:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:ee:bb:d0:f9:97:f8:fe:b1:30:f4:84:03:b2:2b:10:4a:47:64:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AAD221E4070989D4939FACA0F0981AB26E93895
        Validity
            Not Before: Apr 24 13:14:37 2025 GMT
            Not After : Apr 23 13:19:37 2026 GMT
        Subject: CN=93F015AE919B7C8C31569B85E8D60D2885DDAE04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:7c:1f:62:24:aa:a5:df:dc:79:c9:27:d7:36:
                    b3:33:14:f7:4c:7c:89:b8:77:8d:12:03:17:d3:60:
                    3a:16:62:f3:21:9d:ca:70:2d:44:cc:03:61:8e:b8:
                    59:3c:d1:0d:f2:02:31:b7:cb:0e:a9:80:4f:fe:ed:
                    ee:2c:cb:29:dd:a3:5a:e6:a0:96:70:40:3b:e1:01:
                    62:fa:96:31:48:4b:1d:fa:66:b4:5e:d8:e2:4d:b1:
                    1a:bc:c0:71:b5:d0:47:2d:f2:9c:cb:01:5b:27:fc:
                    7c:7e:7a:ea:b6:5d:84:01:e2:52:17:49:68:6c:dd:
                    51:6f:b3:36:0d:a3:ce:36:5e:2f:f4:0d:ee:65:18:
                    f4:1c:98:a4:37:be:13:f8:74:6b:5b:cc:81:eb:e1:
                    0d:60:dc:ad:2a:af:c0:6a:15:2b:51:6e:f0:0a:77:
                    15:c0:1b:3b:04:fc:7c:ec:39:83:5f:0e:3f:f8:ce:
                    ff:43:2d:c3:04:6d:52:36:9b:b2:f5:1f:55:ad:87:
                    e9:82:e4:b6:ac:7e:43:b4:60:c8:cb:80:1f:94:ac:
                    b8:81:74:0a:7d:63:0a:4c:65:f7:7c:e7:4b:2b:be:
                    a5:51:a6:a5:ac:9e:d4:46:d5:f0:9c:8a:e3:dd:09:
                    ab:b6:26:6f:54:93:e4:26:e5:93:27:60:a9:96:c0:
                    13:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:F0:15:AE:91:9B:7C:8C:31:56:9B:85:E8:D6:0D:28:85:DD:AE:04
            X509v3 Authority Key Identifier:
                keyid:0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a6264663a3a2f34382d3438203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:bdf::/48

    Signature Algorithm: sha256WithRSAEncryption
         2c:c4:f8:69:2b:06:ea:76:04:a2:15:16:66:71:41:6d:9c:67:
         bc:b2:3e:21:30:6d:fd:72:e7:74:ab:03:59:7f:3e:2b:b3:b6:
         70:7c:ae:17:21:7d:b7:79:40:13:bb:c6:14:0a:7e:86:cd:84:
         51:a9:01:50:88:30:8a:e1:c9:79:0b:e2:bf:e3:5e:11:54:5b:
         ff:0c:d2:95:25:60:33:fc:a9:50:5c:24:60:13:45:8a:d2:63:
         d5:30:82:df:c6:db:77:03:c9:93:3e:58:fe:86:dc:4b:4e:f4:
         36:61:2c:ba:1e:69:f1:c1:c3:05:3e:a2:7c:41:07:26:b2:5b:
         df:79:4c:44:4a:e9:b8:f5:24:44:b3:13:04:30:c0:61:e0:5b:
         db:77:e0:9a:c0:85:fe:c2:26:87:4e:df:94:b9:df:14:74:4d:
         ab:cf:28:78:69:01:65:38:f7:3b:f7:3a:31:92:25:fa:f2:ae:
         e1:e1:52:ef:3e:84:8f:73:c5:ef:ed:6f:89:42:75:f1:f2:a4:
         92:b2:3b:ef:b6:a4:22:47:c9:58:e7:ee:dd:48:14:9a:c3:d0:
         6b:56:35:65:85:a6:8c:90:99:e2:5d:65:fd:f5:0e:9d:85:f3:
         28:d9:96:e5:44:17:c7:88:34:a4:0d:36:d2:01:52:2a:e6:de:
         1d:1c:78:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 13:25:46 2025 by rpki-client