Route Origin Authorization

$ rpki-client -vvvf rpki-01.pdxnet.uk/repo/paradoxnetworks/4/323630323a666137653a3a2f33322d3332203d3e2030.roa
File:                     323630323a666137653a3a2f33322d3332203d3e2030.roa (raw, json)
Hash identifier:          pWn471D1G7CUbiTTA976WMVRIGdLBwpMlxpQmQjL2N4=
Subject key identifier:   AA:B7:E3:0B:B1:17:A9:23:58:C0:B8:77:28:C1:F1:78:35:EF:AA:A4
Certificate issuer:       /CN=edff5ee9c6c74e18ab3cd3244d38ecf6acc07c9835684cca08
Certificate serial:       77A1DE7D1AB32F9C665F87C3E04699BCD39C1E28
Authority key identifier: 26:29:24:3C:9E:8D:A7:B1:4D:0A:BD:25:66:0A:74:AC:40:81:C8:8B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c88f518-5118-4680-a0ba-d2cc67b27b07/edff5ee9c6c74e18ab3cd3244d38ecf6acc07c9835684cca08.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/4/323630323a666137653a3a2f33322d3332203d3e2030.roa
Signing time:             Sat 15 Aug 2026 22:55:12 +0000
ROA not before:           Sat 15 Aug 2026 22:50:12 +0000
ROA not after:            Sat 14 Aug 2027 22:55:12 +0000
asID:                     0
IP address blocks:        2602:fa7e::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/4/2629243C9E8DA7B14D0ABD25660A74AC4081C88B.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/4/2629243C9E8DA7B14D0ABD25660A74AC4081C88B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c88f518-5118-4680-a0ba-d2cc67b27b07/edff5ee9c6c74e18ab3cd3244d38ecf6acc07c9835684cca08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c88f518-5118-4680-a0ba-d2cc67b27b07/9c88f518-5118-4680-a0ba-d2cc67b27b07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c88f518-5118-4680-a0ba-d2cc67b27b07/9c88f518-5118-4680-a0ba-d2cc67b27b07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c88f518-5118-4680-a0ba-d2cc67b27b07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 21:32:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:a1:de:7d:1a:b3:2f:9c:66:5f:87:c3:e0:46:99:bc:d3:9c:1e:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edff5ee9c6c74e18ab3cd3244d38ecf6acc07c9835684cca08
        Validity
            Not Before: Aug 15 22:50:12 2026 GMT
            Not After : Aug 14 22:55:12 2027 GMT
        Subject: CN=AAB7E30BB117A92358C0B87728C1F17835EFAAA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:49:ff:2f:4b:4e:f9:99:ad:78:c8:ba:3e:64:
                    af:fe:f2:25:1a:ca:d0:0f:40:cd:17:c1:11:2d:c9:
                    35:1b:64:f7:d4:f3:9b:5a:8b:f1:36:64:b5:30:d0:
                    a8:3c:92:d6:2a:9d:db:69:9a:b6:97:a8:b4:f0:be:
                    c9:a3:f3:1e:68:a9:0a:e4:4d:ae:b4:45:e6:aa:4c:
                    43:13:a0:a8:75:3c:74:6c:be:56:5c:9b:6a:70:d8:
                    e1:94:75:1d:0a:c6:eb:61:1d:9e:59:ef:ba:56:3c:
                    05:5c:62:26:8e:6c:a5:a9:08:4d:39:d4:5a:c6:39:
                    0a:68:0a:27:cd:ac:e6:6a:58:d9:96:26:1e:b8:b3:
                    d3:c9:f1:74:c7:0f:5f:61:5a:95:7b:12:6d:4b:61:
                    0c:45:f3:f2:37:96:c8:97:de:4e:c1:60:94:89:69:
                    e1:c5:ab:e5:a5:e0:ac:ac:8f:2f:35:03:81:54:9f:
                    16:4c:47:2a:51:12:c0:56:e9:3f:ec:bd:d8:ca:ae:
                    b1:56:de:49:d5:26:99:01:3a:07:1d:c5:32:78:82:
                    7d:95:6c:dc:5f:be:29:b0:82:72:f7:15:a1:90:52:
                    c0:3b:5b:2a:f8:86:76:e6:88:c1:19:fe:fc:98:1c:
                    0b:c9:1d:f0:3a:e4:8e:ab:09:ad:24:45:9c:78:bc:
                    24:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:B7:E3:0B:B1:17:A9:23:58:C0:B8:77:28:C1:F1:78:35:EF:AA:A4
            X509v3 Authority Key Identifier:
                keyid:26:29:24:3C:9E:8D:A7:B1:4D:0A:BD:25:66:0A:74:AC:40:81:C8:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/4/2629243C9E8DA7B14D0ABD25660A74AC4081C88B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c88f518-5118-4680-a0ba-d2cc67b27b07/edff5ee9c6c74e18ab3cd3244d38ecf6acc07c9835684cca08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/4/323630323a666137653a3a2f33322d3332203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa7e::/32

    Signature Algorithm: sha256WithRSAEncryption
         a5:c4:0c:7e:c6:bf:6a:3d:c8:1a:fa:d6:d3:a4:43:8c:50:65:
         58:98:a3:dd:27:4b:50:9f:df:bf:2f:4c:d4:eb:55:2d:2f:6f:
         54:21:4e:5d:c2:d5:29:51:f0:6d:48:51:28:bd:04:1e:59:66:
         93:fc:48:f4:23:69:25:e8:7d:74:0f:69:a4:49:f8:87:6a:76:
         e0:e2:ee:de:64:c9:70:2c:49:06:3c:77:ae:39:e6:94:06:20:
         05:02:77:3d:0d:d5:60:0e:f8:5e:ce:d5:85:3d:c0:9e:eb:c0:
         72:3b:9b:b6:be:8b:ad:e0:b5:78:c2:e6:3c:cf:a4:4c:a7:24:
         33:6a:f5:4e:7b:db:54:f2:cd:85:98:bf:8f:b3:a7:66:d9:1c:
         92:62:86:bb:42:1b:af:ff:79:14:6f:20:16:e6:1b:92:be:fd:
         3b:d4:eb:e6:bb:11:f0:c9:9e:77:0f:09:41:65:ff:b9:88:c9:
         dc:21:e9:0b:ce:d7:16:b7:76:f2:63:87:bc:ce:c9:79:e9:a0:
         11:cc:68:15:ff:0e:d5:e2:e5:13:2b:0e:f7:6b:54:7b:18:1f:
         f7:de:f2:95:c5:dd:93:db:09:9f:6a:40:8f:d6:cd:18:23:51:
         e1:93:7a:0b:dd:a7:af:86:7a:f3:30:db:c9:b8:0b:0a:c1:e2:
         de:31:d4:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 23:07:47 2026 by rpki-client