Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a6631303a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a6631303a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          n8bDGDEVJRZk6LhgWQV9/dW7iIZRcRDIa2TACqIsutg=
Subject key identifier:   67:04:1A:A8:D4:C2:DD:BB:74:96:4E:14:EB:A2:4D:B0:7E:CD:4B:3A
Certificate issuer:       /CN=0AAD221E4070989D4939FACA0F0981AB26E93895
Certificate serial:       36FB03509C38759591DA323FB2FDDD8E9A056B9E
Authority key identifier: 0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a6631303a3a2f34382d313238203d3e203532303235.roa
Signing time:             Thu 24 Apr 2025 13:19:26 +0000
ROA not before:           Thu 24 Apr 2025 13:14:26 +0000
ROA not after:            Thu 23 Apr 2026 13:19:26 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:f10::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Apr 2025 09:10:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:fb:03:50:9c:38:75:95:91:da:32:3f:b2:fd:dd:8e:9a:05:6b:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AAD221E4070989D4939FACA0F0981AB26E93895
        Validity
            Not Before: Apr 24 13:14:26 2025 GMT
            Not After : Apr 23 13:19:26 2026 GMT
        Subject: CN=67041AA8D4C2DDBB74964E14EBA24DB07ECD4B3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:be:1a:41:ee:4e:6a:25:dd:94:ef:72:da:53:
                    e9:24:d6:34:be:4e:78:86:5b:c8:0b:37:25:8d:cf:
                    56:d4:4c:c1:71:30:26:f6:5c:19:83:65:5e:3b:75:
                    81:88:78:95:c1:19:66:50:2c:c4:26:1e:4c:a3:72:
                    15:df:52:ae:f9:2f:b5:c8:6f:4b:91:88:cd:0c:10:
                    a1:ee:83:c3:7f:0e:ec:da:a5:c2:2a:51:45:77:dc:
                    8d:11:34:eb:6c:c5:8d:51:0b:d2:19:b4:9d:2b:16:
                    e4:f6:83:49:4d:a6:1b:cb:eb:bf:de:fc:d2:db:94:
                    dc:f7:5a:b3:70:b5:01:03:73:63:ee:e8:8d:9c:e6:
                    b4:92:83:19:b1:e9:cd:e7:8f:67:88:9a:7a:fd:fe:
                    f8:f2:e4:d3:bd:34:ae:a1:67:81:91:21:14:71:7e:
                    9c:36:1c:a2:fc:35:3f:d2:70:74:46:7c:b9:cd:b0:
                    72:c6:a3:9f:2e:91:01:8c:c1:c6:c5:33:bb:72:67:
                    9d:a8:a8:2e:06:11:ac:99:38:af:d4:77:93:bb:9b:
                    97:15:52:91:25:3e:7d:fa:38:76:3a:2e:64:06:37:
                    af:75:fb:84:16:5a:6c:83:5b:32:e2:1c:45:ba:f6:
                    83:63:94:ae:c5:f2:3e:e2:2f:92:68:65:b8:37:16:
                    b5:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:04:1A:A8:D4:C2:DD:BB:74:96:4E:14:EB:A2:4D:B0:7E:CD:4B:3A
            X509v3 Authority Key Identifier:
                keyid:0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a6631303a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:f10::/48

    Signature Algorithm: sha256WithRSAEncryption
         9a:11:4b:eb:fa:a8:f0:ea:0b:cc:85:1f:92:25:72:61:8b:90:
         d2:bc:45:a1:c0:a5:b4:e8:02:e4:d2:3b:b3:f9:61:68:d0:67:
         39:cd:cc:4b:71:9c:36:2c:a6:5a:9f:42:a2:94:38:7e:f7:c0:
         f9:8a:c2:c3:63:e5:93:cc:b0:94:86:f5:3f:49:23:75:20:7b:
         ea:60:e0:52:74:46:34:ac:2b:3e:22:ba:43:75:de:ca:11:56:
         c1:86:92:5f:ee:f0:8d:86:71:05:69:eb:dc:eb:ae:71:00:f5:
         3e:08:35:0d:f2:3b:2b:26:5e:69:f8:94:61:7a:7d:70:a4:5d:
         e6:c2:fd:42:db:3e:30:1c:7b:4d:c5:5d:c2:0f:0d:d8:f0:11:
         ef:41:98:d3:38:4e:69:d0:a9:25:69:cd:0f:10:9f:d9:4f:26:
         04:70:91:f6:6e:ac:4e:81:5d:5d:1a:33:6d:f3:a2:3a:4a:12:
         07:c4:1b:a8:ac:b7:ee:2e:0e:4c:56:9b:65:3f:0a:31:f3:95:
         25:ab:48:a1:00:bb:b8:af:4b:30:45:33:66:a4:7d:29:37:92:
         61:7f:54:d6:d0:0f:88:42:71:b1:70:7f:49:29:d4:06:4e:ad:
         ad:e4:7f:ea:4a:3b:d5:01:af:27:bb:95:e7:f1:39:79:20:7d:
         95:a8:5e:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 19:31:35 2025 by rpki-client