Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a313031323a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a313031323a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          HsLEax0/H1C+8Unusdc0A2F4LbJwD7DKP6nbxej3Qsc=
Subject key identifier:   5E:FB:E9:B1:76:BB:F6:77:48:C6:D3:A2:5C:A2:86:C6:8F:20:23:56
Certificate issuer:       /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial:       29BF8DA828F44627C80B34774700D5F18C295D2D
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a313031323a3a2f34382d313238203d3e203532303235.roa
Signing time:             Thu 04 Jun 2026 16:33:05 +0000
ROA not before:           Thu 04 Jun 2026 16:28:05 +0000
ROA not after:            Thu 03 Jun 2027 16:33:05 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:1012::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:bf:8d:a8:28:f4:46:27:c8:0b:34:77:47:00:d5:f1:8c:29:5d:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
        Validity
            Not Before: Jun  4 16:28:05 2026 GMT
            Not After : Jun  3 16:33:05 2027 GMT
        Subject: CN=5EFBE9B176BBF67748C6D3A25CA286C68F202356
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:db:50:ba:30:58:df:ce:83:5d:7e:f3:1e:7f:
                    40:b8:68:ad:e0:35:a2:1b:2e:49:ca:2b:97:08:64:
                    3f:92:c2:f8:d6:eb:d9:a8:97:d9:ec:c2:78:82:3e:
                    21:c4:70:0b:65:ec:f1:f6:9a:17:b2:c9:eb:b6:80:
                    91:34:a1:86:b7:f2:d9:e6:eb:b7:4f:73:05:d8:cf:
                    fc:a2:e1:16:10:4d:72:ce:96:79:96:db:e2:93:f3:
                    f5:2b:54:2d:6f:64:66:3e:37:b3:72:1d:48:04:06:
                    8c:9b:6d:c1:38:4f:ae:c7:c5:58:1a:7b:cf:d2:64:
                    26:3f:cd:b9:18:e5:12:a8:32:b9:b4:97:52:6e:53:
                    22:64:d0:aa:3d:fd:de:11:cc:74:3c:9c:57:38:fd:
                    26:e2:4f:b3:ac:12:7b:0d:5c:94:ba:89:af:c2:3f:
                    da:f6:60:71:2f:fd:3c:63:73:b9:d9:98:4b:e8:70:
                    be:a5:8b:d7:1c:bc:40:5d:f9:06:9f:ad:12:8e:76:
                    25:a3:43:bb:74:23:82:89:be:4c:c9:a1:51:32:6f:
                    76:ac:37:de:63:30:49:53:d9:41:91:55:cb:e9:c5:
                    99:cb:78:7a:c3:88:1a:2f:4e:0e:92:5e:bb:65:78:
                    01:26:96:9e:41:14:87:84:e6:6c:ba:32:ef:9f:87:
                    39:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:FB:E9:B1:76:BB:F6:77:48:C6:D3:A2:5C:A2:86:C6:8F:20:23:56
            X509v3 Authority Key Identifier:
                keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a313031323a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:1012::/48

    Signature Algorithm: sha256WithRSAEncryption
         22:55:90:45:14:3e:f7:a0:fd:88:ae:b9:67:92:3b:2a:3a:de:
         ce:9d:94:ac:6a:f3:ff:5f:62:6c:a4:b0:16:75:53:3c:2d:ea:
         d2:d5:81:be:ac:47:64:2c:7e:3d:18:86:b3:43:a4:8e:ea:a2:
         01:d4:5c:65:3f:ef:55:27:eb:cb:f5:c2:ae:68:aa:6f:4d:2b:
         a3:9d:ee:10:c7:f3:1c:8a:fb:1e:e1:79:70:14:d8:66:ed:4b:
         df:7e:ed:94:b2:c4:22:f0:61:f5:60:0b:81:13:5c:53:49:1b:
         5c:c5:4e:1e:2c:21:8e:ee:ac:63:31:4b:62:eb:c1:e1:09:03:
         b8:af:28:bf:4f:9e:3e:4e:e7:7a:01:31:f5:0e:cc:fc:9c:71:
         a2:c3:19:31:79:4f:58:1e:30:34:e2:46:f2:31:cd:5f:b3:81:
         f2:d0:ef:cf:20:af:47:9f:bb:3d:0d:b9:f7:e0:78:2a:5c:85:
         90:73:b4:2d:80:57:03:ba:35:78:df:bd:0b:28:3f:f3:f7:3e:
         38:cf:90:f5:f1:b8:5a:57:a3:86:49:0a:4f:2d:07:f1:03:66:
         b0:36:59:d0:8c:9d:3c:d2:25:e4:32:a4:0e:c7:42:80:ed:29:
         85:7f:ec:ea:85:a3:32:db:1b:c8:c0:0c:c5:62:8e:6a:d6:2d:
         4e:7d:8a:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 21:58:36 2026 by rpki-client