Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a6531303a3a2f34382d3438203d3e203532303235.roa
File:                     326130353a646663343a6531303a3a2f34382d3438203d3e203532303235.roa (raw, json)
Hash identifier:          LG6AGTg82xnnps3o4LwAXPfsxfg5ABIsNF51Yph1gBg=
Subject key identifier:   14:D8:F0:EB:9A:13:EB:5E:F5:9B:46:C3:D4:87:FC:05:37:A5:EA:80
Certificate issuer:       /CN=0AAD221E4070989D4939FACA0F0981AB26E93895
Certificate serial:       054F0CD9B65A701FB27AA9E0E8A25186E1E7E461
Authority key identifier: 0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a6531303a3a2f34382d3438203d3e203532303235.roa
Signing time:             Thu 12 Jun 2025 23:21:32 +0000
ROA not before:           Thu 12 Jun 2025 23:16:32 +0000
ROA not after:            Thu 11 Jun 2026 23:21:32 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:e10::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Jun 2025 22:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:4f:0c:d9:b6:5a:70:1f:b2:7a:a9:e0:e8:a2:51:86:e1:e7:e4:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AAD221E4070989D4939FACA0F0981AB26E93895
        Validity
            Not Before: Jun 12 23:16:32 2025 GMT
            Not After : Jun 11 23:21:32 2026 GMT
        Subject: CN=14D8F0EB9A13EB5EF59B46C3D487FC0537A5EA80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:e6:97:06:f3:e1:54:e2:a5:e5:c3:68:55:b1:
                    9b:52:94:58:6d:e6:bf:99:b0:94:f3:3d:9b:2b:4d:
                    2e:44:97:de:01:cb:05:33:b4:55:a5:55:d3:81:56:
                    2b:c2:13:b3:26:5b:10:f7:66:75:10:bb:d3:f3:29:
                    7d:8c:88:6b:b8:e9:29:42:f9:5d:ed:46:0c:53:0b:
                    ef:38:c0:05:ff:8f:b3:4c:aa:71:ad:74:d0:92:25:
                    86:e7:58:44:a6:d3:0e:25:ea:15:e0:41:ca:56:ae:
                    44:76:8e:6d:d4:3f:13:26:c2:37:fd:03:b8:dd:18:
                    e1:10:0f:4f:08:12:3b:f7:24:f7:21:cd:e8:71:0c:
                    eb:3e:12:b5:16:1b:00:b0:e0:a6:ab:af:4f:64:06:
                    a3:e6:15:a7:03:7b:6c:1b:09:5f:f3:72:d1:ec:d4:
                    09:79:65:fc:1a:2f:3a:36:b4:d6:d8:ca:06:bd:a0:
                    20:4c:29:0c:19:42:b1:5a:98:1b:15:bc:27:b6:bb:
                    00:ad:6e:ad:93:7b:2c:b6:68:24:18:76:05:ce:0d:
                    fc:23:da:48:83:24:3a:4d:cd:cb:4d:35:b4:28:12:
                    43:c7:e9:d1:f9:5c:75:ca:6b:94:1a:e2:61:61:fb:
                    b4:16:56:fb:9b:25:3f:53:4c:88:f5:a2:98:ba:5a:
                    c5:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:D8:F0:EB:9A:13:EB:5E:F5:9B:46:C3:D4:87:FC:05:37:A5:EA:80
            X509v3 Authority Key Identifier:
                keyid:0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a6531303a3a2f34382d3438203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:e10::/48

    Signature Algorithm: sha256WithRSAEncryption
         0f:46:74:6c:2c:43:b4:fd:9b:4f:c8:80:4a:31:b6:44:9e:0e:
         ad:08:28:5b:0e:52:d7:e5:0f:b4:3a:6f:7b:9b:97:0b:a8:d9:
         0d:f1:a2:19:9c:c4:b6:40:d7:c9:d6:17:1a:6e:ad:62:89:35:
         d7:9e:b2:87:ff:68:71:d1:a4:73:b7:75:35:80:1d:c3:16:5b:
         9e:e1:89:b1:c5:97:a2:6c:f1:ab:1a:3a:d0:e1:72:46:38:61:
         3e:35:02:f8:d6:d7:fb:89:e9:89:9d:0c:f9:e1:72:de:1d:8d:
         82:51:50:ba:c4:7c:f9:40:4f:f0:1d:bd:20:2f:94:36:d4:7c:
         34:a2:c2:19:66:a1:42:b6:65:81:ca:f3:8d:a5:c0:4f:b7:97:
         47:6d:f5:4e:9b:3d:95:65:65:b9:5d:90:17:0e:88:51:72:e9:
         b6:3a:9b:93:1f:2d:e1:2f:30:87:1a:b5:ac:2d:8b:2a:41:d3:
         ad:81:5f:f3:e7:e5:bd:79:f2:10:7a:f5:4d:57:1f:b6:97:72:
         ff:ab:7f:a0:5d:36:88:17:c2:1a:32:7f:79:74:3b:fa:31:41:
         c8:35:52:cc:3a:23:53:53:7b:c7:e0:4b:97:a4:3b:a2:d6:35:
         79:28:8f:b6:d0:7a:63:58:b4:c8:00:cb:99:d6:d4:c5:ba:84:
         cc:82:20:43
-----BEGIN CERTIFICATE-----
MIIFHzCCBAegAwIBAgIUBU8M2bZacB+yeqng6KJRhuHn5GEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEFBRDIyMUU0MDcwOTg5RDQ5MzlGQUNBMEYwOTgxQUIy
NkU5Mzg5NTAeFw0yNTA2MTIyMzE2MzJaFw0yNjA2MTEyMzIxMzJaMDMxMTAvBgNV
BAMTKDE0RDhGMEVCOUExM0VCNUVGNTlCNDZDM0Q0ODdGQzA1MzdBNUVBODAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL5pcG8+FU4qXlw2hVsZtSlFht
5r+ZsJTzPZsrTS5El94BywUztFWlVdOBVivCE7MmWxD3ZnUQu9PzKX2MiGu46SlC
+V3tRgxTC+84wAX/j7NMqnGtdNCSJYbnWESm0w4l6hXgQcpWrkR2jm3UPxMmwjf9
A7jdGOEQD08IEjv3JPchzehxDOs+ErUWGwCw4Karr09kBqPmFacDe2wbCV/zctHs
1Al5ZfwaLzo2tNbYyga9oCBMKQwZQrFamBsVvCe2uwCtbq2Teyy2aCQYdgXODfwj
2kiDJDpNzctNNbQoEkPH6dH5XHXKa5Qa4mFh+7QWVvubJT9TTIj1opi6WsWvAgMB
AAGjggIpMIICJTAdBgNVHQ4EFgQUFNjw65oT6171m0bD1If8BTel6oAwHwYDVR0j
BBgwFoAUCq0iHkBwmJ1JOfrKDwmBqybpOJUwDgYDVR0PAQH/BAQDAgeAMG4GA1Ud
HwRnMGUwY6BhoF+GXXJzeW5jOi8vcnBraS0wMS5wZHhuZXQudWsvcmVwby9wYXJh
ZG94bmV0d29ya3MvMi8wQUFEMjIxRTQwNzA5ODlENDkzOUZBQ0EwRjA5ODFBQjI2
RTkzODk1LmNybDCBkwYIKwYBBQUHAQEEgYYwgYMwgYAGCCsGAQUFBzAChnRyc3lu
YzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYz
ZTAxODU3NTVjOTFiZTNmOWQvMi8wQUFEMjIxRTQwNzA5ODlENDkzOUZBQ0EwRjA5
ODFBQjI2RTkzODk1LmNlcjCBjgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4Zx
cnN5bmM6Ly9ycGtpLTAxLnBkeG5ldC51ay9yZXBvL3BhcmFkb3huZXR3b3Jrcy8y
LzMyNjEzMDM1M2E2NDY2NjMzNDNhNjUzMTMwM2EzYTJmMzQzODJkMzQzODIwM2Qz
ZTIwMzUzMjMwMzIzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggr
BgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF38QOEDANBgkqhkiG9w0BAQsFAAOC
AQEAD0Z0bCxDtP2bT8iASjG2RJ4OrQgoWw5S1+UPtDpve5uXC6jZDfGiGZzEtkDX
ydYXGm6tYok1156yh/9ocdGkc7d1NYAdwxZbnuGJscWXomzxqxo60OFyRjhhPjUC
+NbX+4npiZ0M+eFy3h2NglFQusR8+UBP8B29IC+UNtR8NKLCGWahQrZlgcrzjaXA
T7eXR231Tps9lWVluV2QFw6IUXLptjqbkx8t4S8whxq1rC2LKkHTrYFf8+flvXny
EHr1TVcftpdy/6t/oF02iBfCGjJ/eXQ7+jFByDVSzDojU1N7x+BLl6Q7otY1eSiP
ttB6Y1i0yADLmdbUxbqEzIIgQw==
-----END CERTIFICATE-----
Generated at Mon Jun 16 08:27:42 2025 by rpki-client