Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a313031333a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a313031333a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          Jjj3D0VgXEq1Ys6gXDFrdbauFQs+vIHBK3UuqxtlzOc=
Subject key identifier:   A0:E4:D2:42:2D:D0:CC:F5:18:40:25:AE:C5:5F:4B:EE:41:1F:25:8D
Certificate issuer:       /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial:       49EE776745C750E77CD24974089820DCF22884A6
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a313031333a3a2f34382d313238203d3e203532303235.roa
Signing time:             Thu 04 Jun 2026 16:33:05 +0000
ROA not before:           Thu 04 Jun 2026 16:28:05 +0000
ROA not after:            Thu 03 Jun 2027 16:33:05 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:1013::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:ee:77:67:45:c7:50:e7:7c:d2:49:74:08:98:20:dc:f2:28:84:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
        Validity
            Not Before: Jun  4 16:28:05 2026 GMT
            Not After : Jun  3 16:33:05 2027 GMT
        Subject: CN=A0E4D2422DD0CCF5184025AEC55F4BEE411F258D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:f5:43:19:4f:d9:ec:69:db:7b:fb:00:59:5b:
                    84:e6:d1:ae:75:45:21:e0:8b:a4:b4:1c:bd:cc:19:
                    2c:7b:32:e4:be:95:ee:be:c7:a8:b1:26:20:05:a4:
                    79:fe:38:b7:83:4d:0d:90:5c:82:a1:35:12:cd:24:
                    b2:b5:dc:5d:ae:cd:af:73:be:6a:b0:17:91:da:8c:
                    06:0c:72:13:c4:b0:df:fb:3f:d0:24:19:49:54:c5:
                    e7:2a:c7:95:d2:5f:60:be:80:2e:ac:ea:a6:37:cf:
                    0b:cc:1b:85:ee:99:07:c8:de:a1:21:f8:09:f7:5e:
                    1f:87:d4:8a:1d:8a:4b:8e:dd:22:c9:fe:5a:19:37:
                    e1:9d:2a:dd:a9:6f:11:76:a6:db:3e:96:d8:95:fa:
                    74:4c:70:b5:87:e1:89:4b:fb:ea:6d:85:c8:f6:dc:
                    82:43:9f:db:07:02:ca:84:83:35:54:f2:90:bd:a1:
                    09:23:b6:c1:bb:92:4b:7b:d8:b2:95:4c:f0:7e:5b:
                    1a:cc:18:03:48:d4:ab:34:91:12:f1:fa:7f:c0:78:
                    25:b0:8a:81:d7:08:d0:ae:52:47:ab:9a:7b:83:02:
                    5e:b9:8f:ca:03:1e:73:18:cf:22:a5:3e:5b:f2:36:
                    c8:c7:e0:f0:c0:9d:cf:0a:53:ab:52:fb:4c:3b:75:
                    72:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:E4:D2:42:2D:D0:CC:F5:18:40:25:AE:C5:5F:4B:EE:41:1F:25:8D
            X509v3 Authority Key Identifier:
                keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a313031333a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:1013::/48

    Signature Algorithm: sha256WithRSAEncryption
         2f:f6:a9:a0:84:d0:4c:26:d7:ac:4a:0e:f8:ba:a5:88:b8:2a:
         40:e8:71:b3:2f:e0:85:ba:d8:5e:96:2a:9e:7d:f6:4d:85:76:
         dd:42:66:8c:96:77:fa:97:f0:e1:c5:3d:5b:ae:3a:73:09:5c:
         27:5e:0e:49:37:54:66:d9:04:c8:12:2a:84:46:f4:33:80:d5:
         81:54:b7:0c:b6:34:1b:9c:d4:d2:e2:a7:9e:64:c3:16:1b:af:
         5f:a9:03:43:b9:94:70:be:c8:bd:e0:01:83:d8:47:35:d1:0d:
         1e:5c:f0:82:86:1e:fb:b1:cc:de:f0:d2:3c:e4:83:21:1a:ab:
         b4:e4:d4:fb:0a:61:94:cc:48:53:4b:b8:b0:a5:02:ad:4e:61:
         ec:78:af:cc:80:f5:f2:b0:37:ae:00:65:e4:38:d6:23:d1:c7:
         75:f6:3c:f9:63:0d:da:5c:1c:18:15:91:df:d8:53:c9:7f:3a:
         ab:a5:9d:c6:3d:f2:d8:59:8d:de:71:87:d4:e6:b6:8f:e6:5f:
         a7:4c:60:b6:c1:ff:8b:8a:14:d9:cf:b3:11:9f:37:86:9d:66:
         d7:1b:4e:44:1f:0f:07:5c:d5:08:62:f9:5e:a6:60:bb:73:4e:
         27:75:19:18:87:a2:93:71:a2:de:42:a4:d7:27:78:ed:62:b7:
         f5:89:24:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 21:58:30 2026 by rpki-client