Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a63343a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a63343a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          22e1smpaohAwzuk6Kt+Vql+78lZwjR96lcJLE41TxIE=
Subject key identifier:   9D:A9:7F:25:7D:1F:5B:92:FD:1A:84:AD:35:80:EB:C8:7F:25:0F:09
Certificate issuer:       /CN=0AAD221E4070989D4939FACA0F0981AB26E93895
Certificate serial:       7DA1237EAFFE8CE8F2791C1A67949B25699A5890
Authority key identifier: 0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a63343a3a2f34382d313238203d3e203532303235.roa
Signing time:             Thu 24 Apr 2025 13:19:35 +0000
ROA not before:           Thu 24 Apr 2025 13:14:35 +0000
ROA not after:            Thu 23 Apr 2026 13:19:35 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:c4::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Apr 2025 12:28:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:a1:23:7e:af:fe:8c:e8:f2:79:1c:1a:67:94:9b:25:69:9a:58:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AAD221E4070989D4939FACA0F0981AB26E93895
        Validity
            Not Before: Apr 24 13:14:35 2025 GMT
            Not After : Apr 23 13:19:35 2026 GMT
        Subject: CN=9DA97F257D1F5B92FD1A84AD3580EBC87F250F09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:96:91:a2:d0:89:08:ee:85:a9:d1:6a:58:01:
                    ea:d6:b4:cb:c2:5d:6a:de:3f:50:c2:9e:85:0d:42:
                    e7:7c:d4:9f:a4:08:5b:20:d7:1e:14:5f:5d:14:68:
                    df:d4:ae:f3:6e:f9:4d:90:6a:d7:6f:54:c7:b5:b9:
                    3b:f0:af:29:1b:72:37:06:a7:46:2a:c9:26:6b:39:
                    0a:73:71:4a:46:4f:87:af:3f:f4:e7:1c:b1:7b:96:
                    0c:a6:15:87:7e:bc:2d:6f:92:38:6a:d7:8a:e0:fd:
                    49:70:6c:e7:56:dc:4b:e7:37:5b:66:85:6c:d4:de:
                    6c:aa:b3:b7:58:a9:c3:92:69:04:03:b1:77:2d:82:
                    ca:40:bc:d7:22:70:a2:62:00:42:a0:7a:ab:cd:86:
                    21:29:78:99:63:1e:93:f7:cc:4f:7a:61:f7:60:a4:
                    e5:46:40:c2:68:72:f4:18:04:fa:1f:96:0e:b4:20:
                    f1:44:41:4c:08:d4:7a:5d:80:14:29:c4:14:cf:14:
                    f4:70:21:d1:ec:25:36:f5:5d:97:e8:cf:27:b4:a4:
                    03:8a:c5:b2:67:30:89:8c:5e:10:4e:03:20:a3:75:
                    49:d8:a6:d4:21:90:f7:91:17:f8:09:7e:87:68:24:
                    6b:6c:95:6a:ac:b4:12:99:9c:05:29:69:80:a4:50:
                    57:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:A9:7F:25:7D:1F:5B:92:FD:1A:84:AD:35:80:EB:C8:7F:25:0F:09
            X509v3 Authority Key Identifier:
                keyid:0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a63343a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:c4::/48

    Signature Algorithm: sha256WithRSAEncryption
         7a:b8:53:d9:9e:12:54:bb:47:40:9e:00:28:51:a5:bb:38:4c:
         ba:58:10:c2:a2:df:aa:87:f2:4a:0e:e0:ce:0b:39:f1:87:95:
         24:9e:be:9f:5f:88:ee:cc:ed:a5:db:cd:7a:69:0f:58:9d:d0:
         af:c6:45:3f:79:98:db:73:ff:86:0b:68:ad:c3:15:c3:fd:cb:
         90:e7:2f:27:64:47:0a:b6:02:e5:6e:78:db:58:3d:af:3c:7a:
         f3:55:1a:1f:78:50:fa:f6:2e:7a:75:82:43:90:f7:93:ce:45:
         a2:9e:d9:5c:b1:a4:60:46:50:d7:59:5d:8d:50:d7:01:3f:2b:
         b2:b3:21:0b:08:00:d8:10:fb:7d:5f:fc:b7:89:3d:7e:b9:6f:
         19:c7:de:e3:f9:d2:aa:a6:f9:8b:90:f2:7e:cb:70:4b:60:ec:
         b3:8a:ec:fe:1e:cd:52:e0:b3:08:f0:2e:f2:d7:d4:dc:71:92:
         62:0f:3f:bd:2c:80:bd:ac:f3:03:e5:03:66:f3:c4:98:49:88:
         44:ed:3c:76:2c:8a:d8:fc:c3:c4:4d:86:53:aa:c4:63:00:54:
         28:dd:8d:26:4f:3a:50:4c:71:6b:9e:94:7b:da:d4:a1:c5:56:
         9d:00:b9:42:d5:1c:e2:0a:69:ea:09:f3:1b:c8:6d:af:0b:e7:
         cf:c9:90:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 00:10:22 2025 by rpki-client