Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/4/3136392e3132382e3232302e302f32322d3332203d3e203532303235.roa
File:                     3136392e3132382e3232302e302f32322d3332203d3e203532303235.roa (raw, json)
Hash identifier:          u68RFHmpogsWV4NAj68ySkOc+Sz96u+UzAYihL1W8PM=
Subject key identifier:   81:CD:E4:9D:48:46:DF:45:C1:B4:D0:9B:32:00:D1:2F:BC:39:66:4A
Certificate issuer:       /CN=edff5ee9c6c74e18ab3cd3244d38ecf6acc07c9835684cca08
Certificate serial:       32951EF8F923826C61068718BA4EBD5C7A18DC8F
Authority key identifier: 26:29:24:3C:9E:8D:A7:B1:4D:0A:BD:25:66:0A:74:AC:40:81:C8:8B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c88f518-5118-4680-a0ba-d2cc67b27b07/edff5ee9c6c74e18ab3cd3244d38ecf6acc07c9835684cca08.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/4/3136392e3132382e3232302e302f32322d3332203d3e203532303235.roa
Signing time:             Wed 01 Jul 2026 19:12:06 +0000
ROA not before:           Wed 01 Jul 2026 19:07:06 +0000
ROA not after:            Wed 30 Jun 2027 19:12:06 +0000
asID:                     52025
IP address blocks:        169.128.220.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/4/2629243C9E8DA7B14D0ABD25660A74AC4081C88B.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/4/2629243C9E8DA7B14D0ABD25660A74AC4081C88B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c88f518-5118-4680-a0ba-d2cc67b27b07/edff5ee9c6c74e18ab3cd3244d38ecf6acc07c9835684cca08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c88f518-5118-4680-a0ba-d2cc67b27b07/9c88f518-5118-4680-a0ba-d2cc67b27b07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c88f518-5118-4680-a0ba-d2cc67b27b07/9c88f518-5118-4680-a0ba-d2cc67b27b07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c88f518-5118-4680-a0ba-d2cc67b27b07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 13:43:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:95:1e:f8:f9:23:82:6c:61:06:87:18:ba:4e:bd:5c:7a:18:dc:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edff5ee9c6c74e18ab3cd3244d38ecf6acc07c9835684cca08
        Validity
            Not Before: Jul  1 19:07:06 2026 GMT
            Not After : Jun 30 19:12:06 2027 GMT
        Subject: CN=81CDE49D4846DF45C1B4D09B3200D12FBC39664A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:89:e1:ae:05:3b:d7:d9:9d:62:c6:95:d0:9a:
                    31:8a:35:16:6a:92:df:02:5f:09:00:e2:bf:e8:a9:
                    78:a3:d9:ac:d5:61:cc:98:db:38:47:91:d1:bd:44:
                    40:cf:32:0b:b6:f6:ba:83:de:12:56:44:cd:e9:24:
                    1d:49:31:d3:a2:33:9f:3c:1f:a9:06:05:2c:59:f6:
                    9e:14:0a:1b:07:a3:0d:49:ce:f7:27:c9:f8:01:89:
                    cb:73:fb:38:a9:a0:d0:90:cb:e6:ac:bf:2f:74:99:
                    82:ca:8a:86:40:ce:ab:ab:bd:8f:71:05:08:1c:a8:
                    e8:3c:98:28:20:00:e2:db:47:ed:4d:f6:c9:09:80:
                    1d:48:ee:16:88:20:08:f1:c0:1f:31:6d:09:2a:5a:
                    77:d3:a1:25:76:6c:07:b0:a7:3b:84:f6:1b:fd:bc:
                    be:74:98:b2:6d:b5:d2:ee:87:82:c0:a0:9d:01:ec:
                    a3:c0:8c:1d:33:54:f3:d3:4a:3f:aa:97:77:f1:45:
                    93:3c:45:bf:1f:93:30:bb:5c:d0:f0:7e:bf:a3:29:
                    86:c6:b9:40:c5:32:06:f5:58:90:47:14:4e:50:a5:
                    60:4e:e7:9e:a2:31:96:69:6a:db:cd:70:c9:ac:a8:
                    eb:05:8c:fe:da:c3:31:9f:1d:6c:2f:d0:75:d4:76:
                    b9:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:CD:E4:9D:48:46:DF:45:C1:B4:D0:9B:32:00:D1:2F:BC:39:66:4A
            X509v3 Authority Key Identifier:
                keyid:26:29:24:3C:9E:8D:A7:B1:4D:0A:BD:25:66:0A:74:AC:40:81:C8:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/4/2629243C9E8DA7B14D0ABD25660A74AC4081C88B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c88f518-5118-4680-a0ba-d2cc67b27b07/edff5ee9c6c74e18ab3cd3244d38ecf6acc07c9835684cca08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/4/3136392e3132382e3232302e302f32322d3332203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.128.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ce:c4:f0:f3:88:eb:38:2e:db:49:83:4d:38:eb:73:01:df:af:
         c6:18:3c:8e:9f:8d:0d:f1:91:96:3b:e8:89:ae:39:94:32:e7:
         97:61:0b:92:dd:3e:6a:f8:e5:f5:73:4b:9d:ad:a8:35:79:61:
         92:88:de:18:4f:51:1f:87:15:4d:8c:0d:d3:89:1e:8e:d9:e7:
         e2:5a:94:cb:4c:ea:36:7e:98:43:21:bd:fa:3c:f8:c3:84:85:
         db:58:a9:92:4b:60:37:46:66:4e:f5:03:c4:a6:c3:75:54:cd:
         8f:2a:a4:e0:a1:27:df:d4:4b:04:43:63:ff:f7:ad:cc:30:c4:
         b1:41:55:68:3e:9f:9f:53:97:f8:8a:8d:10:cb:99:c8:ad:a9:
         ec:46:34:fc:ac:5e:75:9f:09:2b:c0:54:ec:a0:31:9a:71:b3:
         95:5a:7b:89:97:df:1f:0d:34:ec:2b:3b:2c:b3:9c:7c:57:0f:
         75:d7:41:47:ed:c8:c9:a2:f7:eb:6d:7a:47:16:38:46:0b:05:
         86:4a:24:7f:a0:9b:c2:c1:bd:85:dd:3f:81:66:52:82:fb:b1:
         62:76:24:d9:7d:07:0c:58:bc:13:a1:71:b6:57:25:0b:26:e4:
         39:87:0f:22:b8:ba:33:82:d0:11:a2:8e:69:bc:ae:2c:7d:24:
         ae:db:f2:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 21:39:30 2026 by rpki-client