Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/4/32332e3135342e392e302f32342d3332203d3e203532303235.roa
File:                     32332e3135342e392e302f32342d3332203d3e203532303235.roa (raw, json)
Hash identifier:          YcZ+W+bfMIpWSetbJuBSNNmZtKce8V3cvgRTV0QVje8=
Subject key identifier:   49:B9:6F:74:98:60:CC:60:18:48:F5:F4:9F:6A:B7:88:2F:C0:B3:44
Certificate issuer:       /CN=edff5ee9c6c74e18ab3cd3244d38ecf6acc07c9835684cca08
Certificate serial:       01161C5B36749238CEB5341A5ED696D2945DE23A
Authority key identifier: 26:29:24:3C:9E:8D:A7:B1:4D:0A:BD:25:66:0A:74:AC:40:81:C8:8B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c88f518-5118-4680-a0ba-d2cc67b27b07/edff5ee9c6c74e18ab3cd3244d38ecf6acc07c9835684cca08.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/4/32332e3135342e392e302f32342d3332203d3e203532303235.roa
Signing time:             Thu 19 Feb 2026 21:32:13 +0000
ROA not before:           Thu 19 Feb 2026 21:27:13 +0000
ROA not after:            Thu 18 Feb 2027 21:32:13 +0000
asID:                     52025
IP address blocks:        23.154.9.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/4/2629243C9E8DA7B14D0ABD25660A74AC4081C88B.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/4/2629243C9E8DA7B14D0ABD25660A74AC4081C88B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c88f518-5118-4680-a0ba-d2cc67b27b07/edff5ee9c6c74e18ab3cd3244d38ecf6acc07c9835684cca08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c88f518-5118-4680-a0ba-d2cc67b27b07/9c88f518-5118-4680-a0ba-d2cc67b27b07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c88f518-5118-4680-a0ba-d2cc67b27b07/9c88f518-5118-4680-a0ba-d2cc67b27b07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c88f518-5118-4680-a0ba-d2cc67b27b07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 21 Feb 2026 01:20:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:16:1c:5b:36:74:92:38:ce:b5:34:1a:5e:d6:96:d2:94:5d:e2:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edff5ee9c6c74e18ab3cd3244d38ecf6acc07c9835684cca08
        Validity
            Not Before: Feb 19 21:27:13 2026 GMT
            Not After : Feb 18 21:32:13 2027 GMT
        Subject: CN=49B96F749860CC601848F5F49F6AB7882FC0B344
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:7f:c4:3d:e8:e6:16:2c:f7:f6:11:40:68:6e:
                    40:87:00:e9:38:8a:ab:61:05:80:82:9b:ba:a6:3c:
                    a6:63:a6:14:d7:6e:08:22:1a:0e:43:04:94:71:f2:
                    f0:51:61:1f:62:41:9e:c6:d6:ac:8a:ca:a2:82:b2:
                    f3:2a:0b:54:98:50:f4:1e:57:35:b8:8f:55:ad:17:
                    a5:bf:fd:3d:bb:ad:1a:7b:9d:e2:1e:bf:87:a5:7d:
                    5e:82:47:9f:d0:58:9e:2f:d2:8a:9c:4f:0a:ec:00:
                    77:41:53:b9:f9:50:55:96:a9:38:e7:f6:1d:ba:cf:
                    01:fd:d0:ec:2f:64:41:a3:ef:62:3a:dc:6e:95:31:
                    e3:bc:1f:9e:41:ce:f5:90:f0:db:9b:c4:ec:7d:6f:
                    67:e3:0a:d2:b0:c9:95:0c:e2:2d:08:63:0a:6b:f0:
                    7a:41:11:42:2b:cb:b4:02:0f:aa:93:f0:88:10:91:
                    c5:64:a2:a4:62:0a:ca:f3:40:05:04:df:9a:d4:26:
                    29:38:97:57:fc:d5:c9:89:86:5f:cb:5c:1c:59:f7:
                    e4:57:74:5c:9a:d2:50:c3:8b:ab:8f:39:57:27:a2:
                    50:d3:0e:99:2e:05:5e:ed:0b:f6:58:76:de:c0:a1:
                    f7:4e:81:7d:bf:f3:eb:f7:0b:93:0d:ba:22:27:f9:
                    27:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:B9:6F:74:98:60:CC:60:18:48:F5:F4:9F:6A:B7:88:2F:C0:B3:44
            X509v3 Authority Key Identifier:
                keyid:26:29:24:3C:9E:8D:A7:B1:4D:0A:BD:25:66:0A:74:AC:40:81:C8:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/4/2629243C9E8DA7B14D0ABD25660A74AC4081C88B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c88f518-5118-4680-a0ba-d2cc67b27b07/edff5ee9c6c74e18ab3cd3244d38ecf6acc07c9835684cca08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/4/32332e3135342e392e302f32342d3332203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.154.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:91:66:05:fa:76:70:0b:94:75:86:70:78:20:ad:8c:ad:3e:
         c8:b6:63:fb:3a:a8:ef:d4:f9:79:fd:40:aa:58:1b:1d:ab:ad:
         24:7f:29:06:08:3b:12:bf:2e:f3:23:a3:8b:34:a7:54:c6:b5:
         74:79:89:37:c4:3c:a6:4a:f6:9e:b3:6f:39:07:0e:d4:96:e7:
         b0:8b:1b:e9:14:1e:6d:4d:02:1e:af:8b:4d:89:fa:1a:e2:65:
         47:b5:8d:40:c0:3b:fe:df:81:6e:86:ce:ba:63:81:9b:b5:a3:
         18:ec:90:e4:1c:8c:57:cc:f4:af:ed:2e:62:4a:df:ff:30:f9:
         46:09:90:a0:ff:ae:3d:80:35:a7:68:05:6c:4b:52:63:d9:8f:
         47:98:96:cd:77:fa:dc:9a:b6:82:25:9f:b3:9d:72:f3:cd:54:
         06:36:cc:f4:eb:9e:8f:d2:80:d5:09:c0:18:54:d4:da:02:2e:
         be:85:0e:ea:15:bf:38:0d:be:e3:00:c6:16:72:bb:a4:eb:f7:
         eb:9b:76:0e:36:dd:36:d3:c4:27:55:7d:41:dc:d0:7d:52:10:
         b6:bf:ce:02:a4:21:00:a8:d6:39:48:62:84:3c:e7:fa:24:c8:
         f2:45:42:31:d2:2a:6f:72:b4:ff:9c:a0:5d:4e:4f:4e:fb:a7:
         3a:56:d3:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 16:20:12 2026 by rpki-client