Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/4/323630323a666137653a32303a3a2f34382d3438203d3e203532303235.roa
File:                     323630323a666137653a32303a3a2f34382d3438203d3e203532303235.roa (raw, json)
Hash identifier:          I7PCSoITRZo9vrOEn+ALZsnUI18RBABu6I6aMWDkHFU=
Subject key identifier:   A4:C6:97:06:31:12:61:5B:6A:2F:D3:16:CF:6A:1E:E9:0B:3E:63:1B
Certificate issuer:       /CN=edff5ee9c6c74e18ab3cd3244d38ecf6acc07c9835684cca08
Certificate serial:       731F4BA86A5C1F3D9C9D0A5EA5A0C357D19CBE5F
Authority key identifier: 26:29:24:3C:9E:8D:A7:B1:4D:0A:BD:25:66:0A:74:AC:40:81:C8:8B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c88f518-5118-4680-a0ba-d2cc67b27b07/edff5ee9c6c74e18ab3cd3244d38ecf6acc07c9835684cca08.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/4/323630323a666137653a32303a3a2f34382d3438203d3e203532303235.roa
Signing time:             Tue 20 Jan 2026 23:28:05 +0000
ROA not before:           Tue 20 Jan 2026 23:23:05 +0000
ROA not after:            Tue 19 Jan 2027 23:28:05 +0000
asID:                     52025
IP address blocks:        2602:fa7e:20::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/4/2629243C9E8DA7B14D0ABD25660A74AC4081C88B.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/4/2629243C9E8DA7B14D0ABD25660A74AC4081C88B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c88f518-5118-4680-a0ba-d2cc67b27b07/edff5ee9c6c74e18ab3cd3244d38ecf6acc07c9835684cca08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c88f518-5118-4680-a0ba-d2cc67b27b07/9c88f518-5118-4680-a0ba-d2cc67b27b07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c88f518-5118-4680-a0ba-d2cc67b27b07/9c88f518-5118-4680-a0ba-d2cc67b27b07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c88f518-5118-4680-a0ba-d2cc67b27b07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 21 Feb 2026 01:20:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:1f:4b:a8:6a:5c:1f:3d:9c:9d:0a:5e:a5:a0:c3:57:d1:9c:be:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edff5ee9c6c74e18ab3cd3244d38ecf6acc07c9835684cca08
        Validity
            Not Before: Jan 20 23:23:05 2026 GMT
            Not After : Jan 19 23:28:05 2027 GMT
        Subject: CN=A4C697063112615B6A2FD316CF6A1EE90B3E631B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ed:74:36:a3:0f:76:81:c1:2a:2d:18:f9:92:
                    5d:cd:6f:93:02:c2:37:50:9c:8f:f7:07:ab:4d:1b:
                    46:14:47:ea:d4:16:07:65:8e:db:86:8b:4f:1c:09:
                    d2:bb:3f:af:a9:c3:f5:be:35:17:f9:4f:18:28:9c:
                    3b:de:32:c5:56:b0:73:ee:ff:c6:c9:bc:9e:aa:7b:
                    a8:c9:87:06:3a:57:35:f3:e1:23:a5:4b:4c:17:ae:
                    3a:9b:d3:0a:c4:f4:7b:cc:3b:95:e4:e9:f5:29:6c:
                    45:c3:5b:77:69:e5:37:fd:bb:6e:35:34:14:b7:ba:
                    ab:33:fb:9a:a6:da:da:62:d9:c3:93:d2:13:26:b6:
                    18:57:b4:76:14:54:32:60:68:75:92:b7:f5:2c:51:
                    d8:ae:fc:d9:6c:0b:ca:e5:88:f9:c8:a1:d2:a7:7b:
                    b8:07:52:06:7a:c0:c0:21:5a:97:27:04:b4:c1:51:
                    14:8e:20:d1:79:f8:db:15:2a:73:ec:a6:99:f5:f2:
                    1f:a4:bb:61:2b:af:b6:c5:e9:02:98:f4:b2:a1:2e:
                    90:ff:e6:fe:8c:6c:52:43:68:4d:5f:4a:09:24:dc:
                    12:27:f1:73:b6:98:97:b2:25:df:a9:e3:2c:70:79:
                    de:70:a8:fd:32:2a:83:d6:bc:ca:af:eb:74:cd:3d:
                    7b:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:C6:97:06:31:12:61:5B:6A:2F:D3:16:CF:6A:1E:E9:0B:3E:63:1B
            X509v3 Authority Key Identifier:
                keyid:26:29:24:3C:9E:8D:A7:B1:4D:0A:BD:25:66:0A:74:AC:40:81:C8:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/4/2629243C9E8DA7B14D0ABD25660A74AC4081C88B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c88f518-5118-4680-a0ba-d2cc67b27b07/edff5ee9c6c74e18ab3cd3244d38ecf6acc07c9835684cca08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/4/323630323a666137653a32303a3a2f34382d3438203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa7e:20::/48

    Signature Algorithm: sha256WithRSAEncryption
         81:61:ea:f2:33:6a:12:45:ba:b3:bd:d2:61:0c:d0:93:18:ef:
         6c:60:6b:5d:98:66:f1:68:1b:bd:fb:3d:a0:c0:76:3b:0b:e5:
         80:9e:07:71:39:62:8f:3d:9c:ec:cc:72:0b:ad:f2:74:20:f3:
         5c:1c:29:2c:98:3e:eb:c4:87:bd:59:1a:a1:0a:fc:62:42:05:
         c1:e3:20:3b:60:1c:94:1d:73:b8:16:33:40:4a:0a:c2:e4:a7:
         08:d7:4b:ba:4b:f0:58:17:ac:dc:79:a8:6c:14:97:50:4d:0e:
         0a:a9:aa:c0:0c:af:8a:a1:ee:3c:09:0f:79:44:fe:a9:e0:7a:
         c2:68:3b:5d:6e:13:b8:dc:01:5a:6a:83:31:4f:5e:d3:c7:16:
         90:31:91:3e:85:c2:c3:83:11:be:aa:fa:0c:6c:7e:e6:6e:71:
         a4:62:be:aa:82:62:a7:fb:8b:54:43:86:28:6a:fa:b6:75:99:
         ba:6c:2a:99:1d:c1:08:0f:c5:15:48:b3:c9:c2:0e:ef:e4:32:
         89:02:45:36:b6:15:73:1d:e6:41:b9:6d:16:24:61:e8:f8:be:
         f3:e2:87:12:bf:e8:18:08:82:2f:60:64:5b:b8:72:bf:7e:ca:
         ab:02:de:94:1e:9e:3c:15:99:12:58:98:17:36:f8:97:5d:b8:
         91:44:fa:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 16:17:59 2026 by rpki-client