Route Origin Authorization

$ rpki-client -vvvf rpki-01.pdxnet.uk/repo/paradoxnetworks/4/3136392e3132382e3232302e302f32322d3232203d3e2030.roa
File:                     3136392e3132382e3232302e302f32322d3232203d3e2030.roa (raw, json)
Hash identifier:          2q95h5nDr3m8AUd6VMPeEv8sHgkdyhGRxgdfU5L+57E=
Subject key identifier:   F4:38:38:D9:84:B1:8D:A8:1A:F4:39:D6:98:39:4B:A6:F4:E5:E0:9E
Certificate issuer:       /CN=edff5ee9c6c74e18ab3cd3244d38ecf6acc07c9835684cca08
Certificate serial:       77509A47907D188AD45DD78DFC271AC819CE69A8
Authority key identifier: 26:29:24:3C:9E:8D:A7:B1:4D:0A:BD:25:66:0A:74:AC:40:81:C8:8B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c88f518-5118-4680-a0ba-d2cc67b27b07/edff5ee9c6c74e18ab3cd3244d38ecf6acc07c9835684cca08.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/4/3136392e3132382e3232302e302f32322d3232203d3e2030.roa
Signing time:             Sat 15 Aug 2026 22:56:57 +0000
ROA not before:           Sat 15 Aug 2026 22:51:57 +0000
ROA not after:            Sat 14 Aug 2027 22:56:57 +0000
asID:                     0
IP address blocks:        169.128.220.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/4/2629243C9E8DA7B14D0ABD25660A74AC4081C88B.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/4/2629243C9E8DA7B14D0ABD25660A74AC4081C88B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c88f518-5118-4680-a0ba-d2cc67b27b07/edff5ee9c6c74e18ab3cd3244d38ecf6acc07c9835684cca08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c88f518-5118-4680-a0ba-d2cc67b27b07/9c88f518-5118-4680-a0ba-d2cc67b27b07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c88f518-5118-4680-a0ba-d2cc67b27b07/9c88f518-5118-4680-a0ba-d2cc67b27b07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c88f518-5118-4680-a0ba-d2cc67b27b07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 21:32:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:50:9a:47:90:7d:18:8a:d4:5d:d7:8d:fc:27:1a:c8:19:ce:69:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edff5ee9c6c74e18ab3cd3244d38ecf6acc07c9835684cca08
        Validity
            Not Before: Aug 15 22:51:57 2026 GMT
            Not After : Aug 14 22:56:57 2027 GMT
        Subject: CN=F43838D984B18DA81AF439D698394BA6F4E5E09E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:34:3a:e6:12:5b:d0:64:9b:03:39:10:3f:a4:
                    b9:93:51:dd:16:e1:81:b9:4c:ac:38:dd:85:f7:b5:
                    11:29:4f:da:d3:f8:00:fd:fa:e5:07:13:93:29:6b:
                    76:e4:70:61:53:bd:b1:3b:e2:ce:25:8a:31:5a:48:
                    17:f8:63:5b:05:fa:f5:6e:55:ab:eb:fe:9e:ac:08:
                    a5:a0:86:73:24:7e:a0:54:f9:b6:39:e0:e1:cf:51:
                    62:ab:4f:7d:50:72:54:cf:54:21:29:68:4f:1d:fd:
                    fc:4c:7b:16:d9:d0:c1:c1:a5:ea:64:f3:69:62:e4:
                    09:ce:58:56:65:f7:d8:df:cb:86:9a:d4:d2:0c:b4:
                    54:8c:b9:76:44:62:ea:39:70:de:65:0f:80:75:5a:
                    a9:8a:21:a2:0d:c4:b6:e0:2b:80:e4:34:45:f6:e4:
                    8e:a7:c9:af:2e:7c:2b:55:c0:47:b8:cc:73:f0:03:
                    14:70:1a:c1:48:be:0c:7c:f2:c5:a2:8a:ff:de:f2:
                    9b:2b:eb:e7:b7:31:b7:8e:b3:24:44:ce:a4:86:9b:
                    0c:f5:d7:15:6f:45:53:52:86:8c:7b:4e:0e:cc:0a:
                    97:a3:8a:8b:b3:78:9e:98:b0:47:f8:5e:08:76:8a:
                    80:0a:17:4d:ec:77:e9:d4:5b:1b:70:8d:26:97:a1:
                    eb:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:38:38:D9:84:B1:8D:A8:1A:F4:39:D6:98:39:4B:A6:F4:E5:E0:9E
            X509v3 Authority Key Identifier:
                keyid:26:29:24:3C:9E:8D:A7:B1:4D:0A:BD:25:66:0A:74:AC:40:81:C8:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/4/2629243C9E8DA7B14D0ABD25660A74AC4081C88B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c88f518-5118-4680-a0ba-d2cc67b27b07/edff5ee9c6c74e18ab3cd3244d38ecf6acc07c9835684cca08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/4/3136392e3132382e3232302e302f32322d3232203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.128.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7c:c4:0b:d1:be:a9:48:d0:44:ac:e3:c1:ff:da:b0:e6:31:e6:
         87:9b:f6:2a:27:6d:7c:e6:5c:e8:ac:24:45:10:b7:b4:67:76:
         ed:42:97:30:40:09:a5:94:da:45:b8:65:4f:44:17:84:d2:7b:
         72:4e:76:5d:f5:20:0d:98:05:be:47:85:67:1b:44:88:c0:f2:
         49:ac:9a:d8:de:6a:7e:d0:89:0d:68:c7:21:a1:62:f5:2c:0f:
         d2:fc:9d:0a:bd:b7:18:1e:bf:73:b4:85:de:83:cf:9f:6a:94:
         25:7d:f3:4b:42:1e:aa:48:42:79:5b:43:a1:c9:67:ba:e9:ba:
         70:7b:b7:2a:63:f4:e4:37:98:17:63:1c:4d:63:3e:19:45:a3:
         68:e5:57:76:a0:72:d8:12:1c:fa:74:83:e5:8d:ed:cb:50:96:
         33:f3:74:96:89:8f:08:dd:5d:2f:6d:54:a6:5b:f4:7c:48:3f:
         35:f9:71:fe:e0:42:e8:99:2e:7a:2c:57:91:1f:d9:28:36:55:
         57:cd:fa:72:e6:8b:84:d6:b4:66:db:b8:7a:30:4a:d2:e1:60:
         3c:c4:bf:cd:c9:09:08:7f:05:f5:20:4e:e4:a9:20:dd:e3:96:
         84:1d:1f:f9:29:45:20:9e:27:6b:e1:79:7e:16:83:21:69:b7:
         52:5f:38:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 22:24:50 2026 by rpki-client