Route Origin Authorization

$ rpki-client -vvvf rpki-01.pdxnet.uk/repo/paradoxnetworks/4/32332e3135342e382e302f32342d3332203d3e203532303235.roa
File:                     32332e3135342e382e302f32342d3332203d3e203532303235.roa (raw, json)
Hash identifier:          Zh+xdXiMWczpfO5yQRGWU9dNvimamsWgB6qxa3zWMG8=
Subject key identifier:   FC:8F:99:FE:74:41:65:27:09:B8:7A:C9:6A:15:E6:8A:6C:36:BD:61
Certificate issuer:       /CN=edff5ee9c6c74e18ab3cd3244d38ecf6acc07c9835684cca08
Certificate serial:       41F7AB5E2FEBBB3DAAE51D60A776E40A2A422E46
Authority key identifier: 26:29:24:3C:9E:8D:A7:B1:4D:0A:BD:25:66:0A:74:AC:40:81:C8:8B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c88f518-5118-4680-a0ba-d2cc67b27b07/edff5ee9c6c74e18ab3cd3244d38ecf6acc07c9835684cca08.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/4/32332e3135342e382e302f32342d3332203d3e203532303235.roa
Signing time:             Tue 29 Sep 2026 05:37:57 +0000
ROA not before:           Tue 29 Sep 2026 05:32:57 +0000
ROA not after:            Tue 28 Sep 2027 05:37:57 +0000
asID:                     52025
IP address blocks:        23.154.8.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/4/2629243C9E8DA7B14D0ABD25660A74AC4081C88B.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/4/2629243C9E8DA7B14D0ABD25660A74AC4081C88B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c88f518-5118-4680-a0ba-d2cc67b27b07/edff5ee9c6c74e18ab3cd3244d38ecf6acc07c9835684cca08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c88f518-5118-4680-a0ba-d2cc67b27b07/9c88f518-5118-4680-a0ba-d2cc67b27b07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c88f518-5118-4680-a0ba-d2cc67b27b07/9c88f518-5118-4680-a0ba-d2cc67b27b07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c88f518-5118-4680-a0ba-d2cc67b27b07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 23 Oct 2026 08:58:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:f7:ab:5e:2f:eb:bb:3d:aa:e5:1d:60:a7:76:e4:0a:2a:42:2e:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edff5ee9c6c74e18ab3cd3244d38ecf6acc07c9835684cca08
        Validity
            Not Before: Sep 29 05:32:57 2026 GMT
            Not After : Sep 28 05:37:57 2027 GMT
        Subject: CN=FC8F99FE7441652709B87AC96A15E68A6C36BD61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:fb:54:c5:0f:8a:5b:de:96:49:47:95:ac:4c:
                    74:b1:83:3d:49:3f:c5:22:51:b7:94:b3:ac:c3:18:
                    7f:6b:89:f3:eb:92:44:b0:1d:45:40:94:e8:e5:9d:
                    96:38:65:a9:2b:61:39:d7:9c:5e:92:71:23:6e:64:
                    ca:8b:f4:40:49:af:62:1e:6d:1f:c2:99:07:c9:59:
                    8c:9d:e9:6b:e6:16:00:22:5d:a5:93:88:6a:a4:a0:
                    18:6f:bd:cf:e9:4c:a1:b0:72:15:b8:2f:9d:cc:32:
                    b3:94:f4:49:16:bb:c3:72:ca:34:41:43:36:47:8c:
                    63:b1:79:37:94:ee:fe:e6:06:6e:df:86:da:f1:97:
                    0b:57:be:18:b0:d0:65:d0:e8:58:87:62:98:2a:f1:
                    30:41:46:1d:29:a8:d0:b2:f3:8e:8f:92:b3:ba:ce:
                    f9:f6:3b:16:e9:b2:97:ab:fe:37:94:87:01:02:e7:
                    23:fe:d7:2f:93:e7:bb:90:72:cb:b6:95:0b:82:d5:
                    aa:e1:36:49:a2:3a:d1:98:d7:61:31:87:03:8f:9f:
                    9d:69:36:12:74:a1:36:c2:5a:b9:a7:36:26:71:1f:
                    cb:0b:ec:a2:bd:52:17:39:cd:69:a9:0d:15:63:87:
                    89:b9:ec:3c:b7:56:0e:b2:53:4a:1f:c6:81:56:59:
                    b6:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:8F:99:FE:74:41:65:27:09:B8:7A:C9:6A:15:E6:8A:6C:36:BD:61
            X509v3 Authority Key Identifier:
                keyid:26:29:24:3C:9E:8D:A7:B1:4D:0A:BD:25:66:0A:74:AC:40:81:C8:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/4/2629243C9E8DA7B14D0ABD25660A74AC4081C88B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c88f518-5118-4680-a0ba-d2cc67b27b07/edff5ee9c6c74e18ab3cd3244d38ecf6acc07c9835684cca08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/4/32332e3135342e382e302f32342d3332203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.154.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:bb:7d:27:95:1c:23:8e:13:8f:28:84:6c:25:b9:e0:dd:59:
         46:38:99:17:51:33:3a:94:81:ca:b2:80:c0:28:7d:b6:0a:0f:
         9e:be:83:18:5f:b9:a2:b1:c5:d8:e9:d6:89:0a:49:e9:32:69:
         05:4f:db:4a:ac:6a:c6:28:9c:40:7b:1c:54:90:99:08:67:f3:
         8d:36:93:3f:37:f5:d2:b4:c7:27:7f:16:11:24:fc:ed:89:8e:
         2f:4b:57:93:73:cb:e1:b8:04:87:c7:0d:02:05:23:04:b3:84:
         9c:bd:70:a9:ad:a2:8b:d1:93:f1:81:e5:77:dd:42:90:ba:fd:
         71:3e:f9:3c:0f:eb:4d:af:8c:6c:4e:88:bb:5f:8d:53:d0:41:
         f3:38:d0:dd:0c:ce:3f:c2:0e:af:4d:de:32:62:67:32:31:6b:
         c8:41:17:5f:6e:dd:6b:09:ff:8e:26:ce:f9:83:df:6f:eb:40:
         fb:ca:7b:ad:fe:de:cf:39:a8:d3:0b:35:a3:93:38:4f:d9:a6:
         fb:ed:9b:08:54:c1:43:ec:9e:94:b3:92:ec:6b:03:00:1a:3a:
         44:6f:9f:31:c4:be:24:8c:a4:9a:70:49:51:09:6f:0d:49:f2:
         31:d8:7a:ed:09:85:dd:8d:33:ff:e3:09:c9:b8:ec:37:bc:bd:
         71:c7:6f:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 00:28:16 2026 by rpki-client