Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/5/323630323a666261313a3961303a3a2f34342d3438203d3e203532303235.roa
File:                     323630323a666261313a3961303a3a2f34342d3438203d3e203532303235.roa (raw, json)
Hash identifier:          ZXZMZ9+Z/7+D+VEV0PLFcNdUm8TVrWvVyVPEX7lC69k=
Subject key identifier:   D5:82:2A:EB:E9:AD:CE:75:07:BE:20:2A:90:E2:24:CD:4C:E7:65:87
Certificate issuer:       /CN=5A96B8985A8E62FB1094248D3B5B4A3BB24369EC
Certificate serial:       012BD07982613CA516937B88261D3D4EC6A6F632
Authority key identifier: 5A:96:B8:98:5A:8E:62:FB:10:94:24:8D:3B:5B:4A:3B:B2:43:69:EC
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/5A96B8985A8E62FB1094248D3B5B4A3BB24369EC.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/5/323630323a666261313a3961303a3a2f34342d3438203d3e203532303235.roa
Signing time:             Sun 27 Jul 2025 00:25:25 +0000
ROA not before:           Sun 27 Jul 2025 00:20:25 +0000
ROA not after:            Sun 26 Jul 2026 00:25:25 +0000
asID:                     52025
IP address blocks:        2602:fba1:9a0::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/5/5A96B8985A8E62FB1094248D3B5B4A3BB24369EC.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/5/5A96B8985A8E62FB1094248D3B5B4A3BB24369EC.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/5A96B8985A8E62FB1094248D3B5B4A3BB24369EC.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/6BEC1AED6508BB07511B01B177551792DAEB2C90.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/6BEC1AED6508BB07511B01B177551792DAEB2C90.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/c13035cd-c46d-421c-b9e0-e6d4dd336d21.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/c13035cd-c46d-421c-b9e0-e6d4dd336d21.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 02:08:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:2b:d0:79:82:61:3c:a5:16:93:7b:88:26:1d:3d:4e:c6:a6:f6:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A96B8985A8E62FB1094248D3B5B4A3BB24369EC
        Validity
            Not Before: Jul 27 00:20:25 2025 GMT
            Not After : Jul 26 00:25:25 2026 GMT
        Subject: CN=D5822AEBE9ADCE7507BE202A90E224CD4CE76587
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:b4:ec:2f:4d:fb:61:61:22:22:da:09:1f:27:
                    d7:e5:75:5b:c2:d5:14:b4:9a:9d:61:e1:26:28:32:
                    9c:10:54:1f:3b:56:2e:60:ab:dd:4d:c9:7e:07:f1:
                    53:5b:8b:3e:4a:90:b1:48:08:8b:f9:ba:de:ee:0a:
                    99:2d:d4:84:6b:70:e4:00:fd:93:85:b9:f2:7f:28:
                    bd:1c:97:81:eb:05:3f:9b:93:ed:7f:b7:f3:2a:e4:
                    70:28:da:4d:31:4b:82:73:90:ba:a0:d9:80:a5:ca:
                    8f:49:35:08:8c:96:f2:ab:42:47:1e:3f:77:86:e3:
                    ee:84:44:52:96:7e:39:4e:dd:c1:11:97:9f:60:88:
                    af:b8:41:64:4b:bf:c5:94:04:97:16:ad:a7:de:4a:
                    4c:02:17:88:01:c5:8f:b6:d5:cb:d9:27:90:13:9e:
                    31:1a:b2:91:79:fc:67:de:f9:17:1d:cf:9f:14:21:
                    0a:c5:1a:d4:ad:05:60:8d:d6:88:41:db:be:91:12:
                    66:a4:b8:b8:29:49:1f:e8:e7:c1:df:9a:81:0d:8c:
                    b9:a0:ad:7e:42:56:d9:aa:ad:c5:b5:04:ca:9a:58:
                    e4:8a:69:88:e2:fb:ad:94:d9:6b:c3:5c:16:53:ae:
                    48:a3:d4:96:d8:c6:10:0c:c1:ce:94:86:b2:3a:8b:
                    30:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:82:2A:EB:E9:AD:CE:75:07:BE:20:2A:90:E2:24:CD:4C:E7:65:87
            X509v3 Authority Key Identifier:
                keyid:5A:96:B8:98:5A:8E:62:FB:10:94:24:8D:3B:5B:4A:3B:B2:43:69:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/5/5A96B8985A8E62FB1094248D3B5B4A3BB24369EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/5A96B8985A8E62FB1094248D3B5B4A3BB24369EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/5/323630323a666261313a3961303a3a2f34342d3438203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fba1:9a0::/44

    Signature Algorithm: sha256WithRSAEncryption
         73:f3:fd:cd:0f:b5:7b:6d:6c:05:b3:55:b1:bf:b8:37:35:c6:
         25:8d:33:eb:2a:61:87:27:2b:d5:28:1b:8e:fe:bd:7b:44:03:
         73:76:fc:35:c7:0f:c7:61:d1:a4:4d:3f:fb:fa:79:6c:21:ed:
         02:5f:84:f7:10:08:86:0d:b7:94:ad:a8:e1:39:b5:a1:42:94:
         cd:cb:e7:22:2c:3d:8c:a2:89:a2:0d:5c:f1:05:00:63:a6:a2:
         48:97:c0:00:46:1c:37:ec:76:8a:d0:19:63:e8:6a:6a:4b:29:
         5d:14:50:fd:c0:84:2f:0e:c8:5f:2d:32:bf:64:14:75:a9:84:
         d6:ec:c1:97:55:c4:82:04:d2:ef:85:19:4f:f8:d0:98:23:35:
         28:1d:d1:b1:87:18:fb:cf:40:75:2c:e1:99:88:ca:b6:ff:a2:
         ba:cb:90:de:2a:bc:91:dc:ff:7f:08:20:f4:91:bb:4f:17:46:
         fb:4f:b1:2b:44:00:f1:25:aa:d1:2f:0a:fe:37:ea:22:11:f9:
         8e:5a:5f:46:11:9a:e5:1c:26:dc:3b:c3:eb:38:8c:0d:31:3b:
         c3:1a:51:64:f8:01:7f:15:a8:05:a7:97:a4:82:da:fe:71:a7:
         88:db:a8:84:66:1d:b0:cf:be:63:7a:b3:cc:aa:b4:d3:b4:be:
         aa:15:c9:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:39:54 2025 by rpki-client