Route Origin Authorization

$ rpki-client -vvvf rpki-01.pdxnet.uk/repo/paradoxnetworks/7/3139322e36372e33322e302f32342d3332203d3e203335393532.roa
File:                     3139322e36372e33322e302f32342d3332203d3e203335393532.roa (raw, json)
Hash identifier:          bm4aN85h9XTcnPewtPK2JLqZePZuCcciHBRC/qYRGYk=
Subject key identifier:   84:E2:85:52:CF:76:73:81:87:F5:C3:C7:CF:23:5E:88:96:72:31:00
Certificate issuer:       /CN=716ED138312A679CA1B1F88B3EF7301163F16356
Certificate serial:       6241CFA65AD5BB2751986E2247F5C91A074D150C
Authority key identifier: 71:6E:D1:38:31:2A:67:9C:A1:B1:F8:8B:3E:F7:30:11:63:F1:63:56
Authority info access:    rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/716ED138312A679CA1B1F88B3EF7301163F16356.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/7/3139322e36372e33322e302f32342d3332203d3e203335393532.roa
Signing time:             Fri 21 Aug 2026 17:37:25 +0000
ROA not before:           Fri 21 Aug 2026 17:32:25 +0000
ROA not after:            Fri 20 Aug 2027 17:37:25 +0000
asID:                     35952
IP address blocks:        192.67.32.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/7/716ED138312A679CA1B1F88B3EF7301163F16356.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/7/716ED138312A679CA1B1F88B3EF7301163F16356.mft
                          rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/716ED138312A679CA1B1F88B3EF7301163F16356.cer
                          rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.crl
                          rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Sep 2026 08:06:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:41:cf:a6:5a:d5:bb:27:51:98:6e:22:47:f5:c9:1a:07:4d:15:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=716ED138312A679CA1B1F88B3EF7301163F16356
        Validity
            Not Before: Aug 21 17:32:25 2026 GMT
            Not After : Aug 20 17:37:25 2027 GMT
        Subject: CN=84E28552CF76738187F5C3C7CF235E8896723100
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:9d:2b:ce:9a:dd:9c:0a:5e:4d:65:89:e5:2b:
                    c0:92:d8:43:7f:22:23:2a:4d:15:3e:8c:81:17:5b:
                    61:d1:25:68:7c:61:f3:99:0d:54:a7:57:e1:0c:e7:
                    6b:7e:38:85:f5:3a:61:14:12:35:df:b3:99:a6:87:
                    9f:4c:12:97:87:64:3d:28:e5:ed:d9:54:2e:56:1c:
                    ba:e2:cb:43:d4:ed:cb:fb:b6:f1:c4:ec:9b:09:ee:
                    a8:b5:ff:3c:5b:c0:a3:24:28:3c:61:64:a6:e8:b3:
                    0a:10:d4:2a:2f:a5:aa:0e:c0:8d:02:39:87:5f:10:
                    e5:81:2f:ab:1e:70:61:3f:18:f2:04:92:bc:d0:ee:
                    0b:b9:7a:4a:96:8d:68:1f:36:ca:cb:98:a9:85:88:
                    18:47:80:5d:5a:db:7d:c9:d1:14:94:2a:82:66:d5:
                    c8:f7:d1:10:8d:c3:67:73:75:a8:fa:48:0b:ad:c6:
                    dd:d8:b4:a2:57:73:30:21:86:4b:a6:39:31:ae:d4:
                    79:cb:80:e6:fc:f0:60:92:21:6d:e5:c3:9d:fe:8d:
                    35:02:85:31:21:48:a7:f0:d9:1e:65:24:d7:3e:d0:
                    e1:68:be:c8:93:73:3f:65:73:9c:34:63:0b:84:2a:
                    27:f2:ff:bc:0a:71:8a:46:0d:cb:d2:1b:ac:7c:ce:
                    f6:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:E2:85:52:CF:76:73:81:87:F5:C3:C7:CF:23:5E:88:96:72:31:00
            X509v3 Authority Key Identifier:
                keyid:71:6E:D1:38:31:2A:67:9C:A1:B1:F8:8B:3E:F7:30:11:63:F1:63:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/7/716ED138312A679CA1B1F88B3EF7301163F16356.crl

            Authority Information Access:
                CA Issuers - URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/716ED138312A679CA1B1F88B3EF7301163F16356.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/7/3139322e36372e33322e302f32342d3332203d3e203335393532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.67.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:fb:b9:c9:82:4f:2e:3a:6b:0e:d1:f4:76:9d:7e:15:84:cd:
         a1:2a:a0:6d:25:c5:3d:57:4f:58:82:94:77:1c:cc:35:88:b7:
         50:11:77:d6:cb:6e:6b:aa:85:c2:db:be:15:ca:02:ba:20:07:
         e2:c4:af:c7:4c:bc:26:f7:ba:dd:b9:be:06:fc:3d:4e:d9:ec:
         a9:5c:5b:69:bc:a3:d1:1a:7c:af:37:5e:85:97:31:07:3f:90:
         bc:cc:c5:61:df:64:0a:3c:2c:ac:9b:56:fb:a6:1f:bd:8d:fc:
         82:4d:fe:1b:f5:eb:89:cc:94:38:42:80:0a:c3:22:cd:9b:1c:
         4a:13:70:a8:0d:e3:1a:05:bd:14:bd:0b:7b:a4:2d:d7:cb:d9:
         a8:6d:24:9b:9e:77:a4:ea:1f:11:04:b5:42:f7:e4:89:b3:88:
         68:33:64:7d:c9:e0:51:e7:69:e8:fe:94:2c:4a:25:d4:55:5b:
         b7:76:0c:d3:8e:71:e2:d8:71:64:30:f6:ef:e4:56:c2:6e:4e:
         ed:55:14:98:33:12:f8:28:ad:f7:03:77:53:05:21:e5:85:19:
         dd:63:22:18:8e:ee:5a:bf:30:5f:7f:a1:30:af:00:00:83:13:
         5b:9b:cd:ab:93:25:9a:30:6f:ff:03:5c:cb:29:28:20:72:84:
         34:82:e1:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:45:29 2026 by rpki-client