Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/4/323630323a666137653a31333a3a2f34382d313238203d3e203532303235.roa
File:                     323630323a666137653a31333a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          DYAJuTVSfIdShXEkOTinDUH08bhTe3ynJ5rcCI3d9zU=
Subject key identifier:   C8:4D:A6:54:7F:9D:07:D9:B4:21:69:86:55:2D:85:B0:8C:DD:38:0E
Certificate issuer:       /CN=edff5ee9c6c74e18ab3cd3244d38ecf6acc07c9835684cca08
Certificate serial:       55C08AAFCE9E309F708F0E5FD4E01DD6E79A3ED1
Authority key identifier: 26:29:24:3C:9E:8D:A7:B1:4D:0A:BD:25:66:0A:74:AC:40:81:C8:8B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c88f518-5118-4680-a0ba-d2cc67b27b07/edff5ee9c6c74e18ab3cd3244d38ecf6acc07c9835684cca08.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/4/323630323a666137653a31333a3a2f34382d313238203d3e203532303235.roa
Signing time:             Sun 18 Jan 2026 13:27:59 +0000
ROA not before:           Sun 18 Jan 2026 13:22:59 +0000
ROA not after:            Sun 17 Jan 2027 13:27:59 +0000
asID:                     52025
IP address blocks:        2602:fa7e:13::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/4/2629243C9E8DA7B14D0ABD25660A74AC4081C88B.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/4/2629243C9E8DA7B14D0ABD25660A74AC4081C88B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c88f518-5118-4680-a0ba-d2cc67b27b07/edff5ee9c6c74e18ab3cd3244d38ecf6acc07c9835684cca08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c88f518-5118-4680-a0ba-d2cc67b27b07/9c88f518-5118-4680-a0ba-d2cc67b27b07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c88f518-5118-4680-a0ba-d2cc67b27b07/9c88f518-5118-4680-a0ba-d2cc67b27b07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c88f518-5118-4680-a0ba-d2cc67b27b07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 21 Feb 2026 01:20:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:c0:8a:af:ce:9e:30:9f:70:8f:0e:5f:d4:e0:1d:d6:e7:9a:3e:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edff5ee9c6c74e18ab3cd3244d38ecf6acc07c9835684cca08
        Validity
            Not Before: Jan 18 13:22:59 2026 GMT
            Not After : Jan 17 13:27:59 2027 GMT
        Subject: CN=C84DA6547F9D07D9B4216986552D85B08CDD380E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:45:94:08:09:d4:ce:57:c8:7a:02:30:2e:ec:
                    e8:33:7c:9a:f0:34:71:75:9c:98:55:27:9e:cf:e7:
                    78:64:fc:c0:47:62:40:ef:31:e8:2b:cd:96:7f:62:
                    e5:76:08:a8:6b:f6:87:a0:c8:76:a0:3d:ee:0b:1a:
                    ed:47:f0:80:fc:68:0a:06:c9:1a:0f:64:8d:0c:31:
                    2a:67:df:4e:26:2a:b2:7e:9e:cd:29:80:94:b3:8c:
                    70:50:2b:82:0f:59:9c:fa:f8:5a:4c:71:d2:94:c4:
                    dc:bf:0a:7d:55:83:43:6b:01:75:ac:09:b3:e6:7c:
                    3b:fa:bc:80:28:0c:84:a6:83:ce:9d:bd:10:e1:bd:
                    8e:c2:4c:4f:88:70:b6:f8:ab:81:9b:e0:54:d8:d8:
                    32:39:b2:10:17:ab:bd:70:6e:09:af:52:df:90:25:
                    9b:a6:71:a4:91:f0:80:76:a9:52:a5:f3:d4:43:11:
                    dd:86:87:77:88:64:f0:e2:1b:99:3c:98:fa:91:a9:
                    41:05:39:0b:a1:b1:d0:c5:6b:ab:f2:41:bf:09:2d:
                    9f:e5:ab:dc:b2:c8:39:5f:d8:e0:4f:08:65:4f:4f:
                    05:27:1b:ca:0c:53:49:8c:34:ff:7d:d4:18:f9:03:
                    99:ee:f2:b9:79:f1:29:48:a4:15:91:01:01:c6:9f:
                    34:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:4D:A6:54:7F:9D:07:D9:B4:21:69:86:55:2D:85:B0:8C:DD:38:0E
            X509v3 Authority Key Identifier:
                keyid:26:29:24:3C:9E:8D:A7:B1:4D:0A:BD:25:66:0A:74:AC:40:81:C8:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/4/2629243C9E8DA7B14D0ABD25660A74AC4081C88B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c88f518-5118-4680-a0ba-d2cc67b27b07/edff5ee9c6c74e18ab3cd3244d38ecf6acc07c9835684cca08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/4/323630323a666137653a31333a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa7e:13::/48

    Signature Algorithm: sha256WithRSAEncryption
         8e:01:57:26:cf:89:02:53:2d:e3:80:d5:d7:92:97:1c:21:de:
         b4:bc:20:bd:2c:82:b4:f4:75:cc:52:6e:3f:78:ed:de:a1:ac:
         09:c6:56:d0:82:13:b2:9c:39:ff:31:a9:2e:5e:18:89:21:f1:
         ba:b8:b5:9d:b3:1f:09:4e:9c:6d:39:fb:b1:ff:64:b5:9c:dc:
         52:1d:9f:74:79:dc:a4:c2:76:f2:54:32:b6:43:55:f9:a4:7d:
         a6:b1:46:7f:9e:be:46:62:17:5f:05:9c:f0:8b:2a:94:79:26:
         e3:a1:1e:b3:50:5b:60:49:c7:f7:e3:52:47:10:ae:cd:30:fa:
         7a:c0:3c:8c:1a:a8:f3:ce:d1:60:84:11:e0:c9:af:ae:33:fa:
         90:fd:bd:5f:a3:12:8a:38:28:b7:ee:89:6b:01:12:3a:d7:38:
         87:03:df:37:71:e8:7e:e1:4a:7f:be:90:7e:98:09:a6:cd:e5:
         2b:1b:f0:1b:c3:b3:3d:18:68:4e:a9:12:c6:36:90:88:63:50:
         0f:9f:b6:9e:7e:40:5c:14:e7:f6:89:95:5e:4e:ed:63:fc:88:
         26:15:45:f4:96:0b:c8:63:0f:2c:31:fa:94:96:be:79:80:42:
         73:34:8b:0b:0a:13:88:bc:0c:a1:51:b5:8c:03:3d:48:20:c2:
         12:46:87:45
-----BEGIN CERTIFICATE-----
MIIFiTCCBHGgAwIBAgIUVcCKr86eMJ9wjw5f1OAd1ueaPtEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZWRmZjVlZTljNmM3NGUxOGFiM2NkMzI0NGQzOGVjZjZh
Y2MwN2M5ODM1Njg0Y2NhMDgwHhcNMjYwMTE4MTMyMjU5WhcNMjcwMTE3MTMyNzU5
WjAzMTEwLwYDVQQDEyhDODREQTY1NDdGOUQwN0Q5QjQyMTY5ODY1NTJEODVCMDhD
REQzODBFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0WUCAnUzlfI
egIwLuzoM3ya8DRxdZyYVSeez+d4ZPzAR2JA7zHoK82Wf2Lldgioa/aHoMh2oD3u
CxrtR/CA/GgKBskaD2SNDDEqZ99OJiqyfp7NKYCUs4xwUCuCD1mc+vhaTHHSlMTc
vwp9VYNDawF1rAmz5nw7+ryAKAyEpoPOnb0Q4b2OwkxPiHC2+KuBm+BU2NgyObIQ
F6u9cG4Jr1LfkCWbpnGkkfCAdqlSpfPUQxHdhod3iGTw4huZPJj6kalBBTkLobHQ
xWur8kG/CS2f5avcssg5X9jgTwhlT08FJxvKDFNJjDT/fdQY+QOZ7vK5efEpSKQV
kQEBxp80wwIDAQABo4ICiTCCAoUwHQYDVR0OBBYEFMhNplR/nQfZtCFphlUthbCM
3TgOMB8GA1UdIwQYMBaAFCYpJDyejaexTQq9JWYKdKxAgciLMA4GA1UdDwEB/wQE
AwIHgDBuBgNVHR8EZzBlMGOgYaBfhl1yc3luYzovL3Jwa2ktMDEucGR4bmV0LnVr
L3JlcG8vcGFyYWRveG5ldHdvcmtzLzQvMjYyOTI0M0M5RThEQTdCMTREMEFCRDI1
NjYwQTc0QUM0MDgxQzg4Qi5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEF
BQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBr
aS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIw
Y2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1LzljODhmNTE4LTUxMTgtNDY4
MC1hMGJhLWQyY2M2N2IyN2IwNy9lZGZmNWVlOWM2Yzc0ZTE4YWIzY2QzMjQ0ZDM4
ZWNmNmFjYzA3Yzk4MzU2ODRjY2EwOC5jZXIwgY4GCCsGAQUFBwELBIGBMH8wfQYI
KwYBBQUHMAuGcXJzeW5jOi8vcnBraS0wMS5wZHhuZXQudWsvcmVwby9wYXJhZG94
bmV0d29ya3MvNC8zMjM2MzAzMjNhNjY2MTM3NjUzYTMxMzMzYTNhMmYzNDM4MmQz
MTMyMzgyMDNkM2UyMDM1MzIzMDMyMzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAmAvp+ABMwDQYJKoZI
hvcNAQELBQADggEBAI4BVybPiQJTLeOA1deSlxwh3rS8IL0sgrT0dcxSbj947d6h
rAnGVtCCE7KcOf8xqS5eGIkh8bq4tZ2zHwlOnG05+7H/ZLWc3FIdn3R53KTCdvJU
MrZDVfmkfaaxRn+evkZiF18FnPCLKpR5JuOhHrNQW2BJx/fjUkcQrs0w+nrAPIwa
qPPO0WCEEeDJr64z+pD9vV+jEoo4KLfuiWsBEjrXOIcD3zdx6H7hSn++kH6YCabN
5Ssb8BvDsz0YaE6pEsY2kIhjUA+ftp5+QFwU5/aJlV5O7WP8iCYVRfSWC8hjDywx
+pSWvnmAQnM0iwsKE4i8DKFRtYwDPUggwhJGh0U=
-----END CERTIFICATE-----
Generated at Fri Feb 20 16:19:06 2026 by rpki-client