Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/4/32332e3135362e3230302e302f32342d3332203d3e203532303235.roa
File:                     32332e3135362e3230302e302f32342d3332203d3e203532303235.roa (raw, json)
Hash identifier:          fMZ5om7J+oW8hKwgRMGKptUgkL5HX9ZWsvmtu1xtM4Q=
Subject key identifier:   83:47:59:B4:43:6F:D3:14:D5:35:B4:BB:D8:6A:D8:22:BA:F7:72:33
Certificate issuer:       /CN=edff5ee9c6c74e18ab3cd3244d38ecf6acc07c9835684cca08
Certificate serial:       3519A65A18EAAF40CB5271E4BF07B4B1EF7E94F3
Authority key identifier: 26:29:24:3C:9E:8D:A7:B1:4D:0A:BD:25:66:0A:74:AC:40:81:C8:8B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c88f518-5118-4680-a0ba-d2cc67b27b07/edff5ee9c6c74e18ab3cd3244d38ecf6acc07c9835684cca08.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/4/32332e3135362e3230302e302f32342d3332203d3e203532303235.roa
Signing time:             Tue 28 Oct 2025 05:26:50 +0000
ROA not before:           Tue 28 Oct 2025 05:21:50 +0000
ROA not after:            Tue 27 Oct 2026 05:26:50 +0000
asID:                     52025
IP address blocks:        23.156.200.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/4/2629243C9E8DA7B14D0ABD25660A74AC4081C88B.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/4/2629243C9E8DA7B14D0ABD25660A74AC4081C88B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c88f518-5118-4680-a0ba-d2cc67b27b07/edff5ee9c6c74e18ab3cd3244d38ecf6acc07c9835684cca08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c88f518-5118-4680-a0ba-d2cc67b27b07/9c88f518-5118-4680-a0ba-d2cc67b27b07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c88f518-5118-4680-a0ba-d2cc67b27b07/9c88f518-5118-4680-a0ba-d2cc67b27b07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c88f518-5118-4680-a0ba-d2cc67b27b07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 04:39:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:19:a6:5a:18:ea:af:40:cb:52:71:e4:bf:07:b4:b1:ef:7e:94:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edff5ee9c6c74e18ab3cd3244d38ecf6acc07c9835684cca08
        Validity
            Not Before: Oct 28 05:21:50 2025 GMT
            Not After : Oct 27 05:26:50 2026 GMT
        Subject: CN=834759B4436FD314D535B4BBD86AD822BAF77233
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:66:6e:ac:cf:90:9c:33:c5:e9:03:4b:0a:7f:
                    e6:51:dd:db:41:6a:68:6c:2c:b7:eb:c1:0c:13:45:
                    f7:52:30:6b:c1:4d:fd:ff:3c:73:ae:74:19:2b:b7:
                    35:df:ca:2f:d8:8f:18:11:d6:b1:e4:df:71:e8:90:
                    75:7d:55:a8:3b:6b:78:4b:d7:b5:e1:8d:d9:fa:7c:
                    ca:d7:b4:fd:45:de:5a:b2:30:59:11:35:fb:c2:44:
                    76:57:82:ab:83:30:54:15:05:d7:e6:b6:d2:db:36:
                    9a:ee:c7:ec:a6:63:13:88:20:6a:17:d9:34:7d:a6:
                    16:5e:17:c4:f7:7b:87:60:60:eb:3a:3c:49:f5:f0:
                    fd:c5:c3:05:1a:72:2d:eb:9b:8a:31:6d:e8:a7:a0:
                    7c:24:8b:27:3a:8e:6e:3f:a1:8f:6c:51:be:1a:40:
                    2a:de:1c:81:7a:0b:a8:a4:48:7e:b0:0b:e2:c7:e8:
                    27:a4:32:7a:7d:92:28:89:14:6f:cf:a5:46:ff:29:
                    68:59:09:b1:0f:ae:25:e0:4c:cd:7f:77:82:48:a1:
                    3d:f2:8b:32:f9:54:2b:2b:58:0c:88:5b:76:bd:39:
                    8c:a6:86:0c:71:6d:43:c9:7a:97:17:ed:30:f0:39:
                    10:74:c8:aa:9e:fe:38:ee:3f:ef:ba:b8:9a:fb:ce:
                    ae:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:47:59:B4:43:6F:D3:14:D5:35:B4:BB:D8:6A:D8:22:BA:F7:72:33
            X509v3 Authority Key Identifier:
                keyid:26:29:24:3C:9E:8D:A7:B1:4D:0A:BD:25:66:0A:74:AC:40:81:C8:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/4/2629243C9E8DA7B14D0ABD25660A74AC4081C88B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c88f518-5118-4680-a0ba-d2cc67b27b07/edff5ee9c6c74e18ab3cd3244d38ecf6acc07c9835684cca08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/4/32332e3135362e3230302e302f32342d3332203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.156.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d0:dc:c1:2d:b8:a8:4e:e6:54:ff:56:e3:ab:7e:e2:3f:3a:f2:
         20:37:1a:28:e8:45:ef:32:75:4c:8b:85:4c:47:55:9d:f5:30:
         68:9f:06:0e:08:2b:a7:4e:e7:2b:34:58:97:30:65:07:ae:46:
         14:cd:5f:e2:a6:ba:3f:65:47:7c:93:74:62:f2:39:b6:71:f6:
         2c:cf:bd:aa:b3:de:8c:df:f0:1d:37:b8:b9:76:2c:0d:82:ce:
         44:c6:c1:93:f9:3b:f8:17:07:12:d9:78:bf:ab:0a:2f:ce:72:
         af:06:e9:d2:ba:0c:6a:60:2e:40:ac:05:58:b2:cb:44:8c:62:
         e0:1a:12:89:51:3a:56:85:2e:3d:1a:0a:5f:83:e0:cd:73:57:
         0b:99:db:3e:bc:11:c6:0f:b0:b9:ef:2b:5f:4a:d1:c4:14:8b:
         b5:b8:74:9c:ee:1d:22:55:ea:61:8d:45:17:6b:34:47:13:f3:
         b9:c8:23:b4:7d:26:a9:f0:92:f0:8c:35:0c:6a:53:11:19:1a:
         9a:e3:c1:06:25:d9:91:17:fb:b4:f8:78:27:b7:14:db:ed:7c:
         d0:86:96:2b:b1:07:2d:0a:cb:0c:7f:20:08:4d:f2:87:1f:34:
         f8:ad:75:25:7a:ab:b7:98:23:fd:a9:2c:82:b9:d7:b7:22:cc:
         77:2e:72:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:04:50 2025 by rpki-client