Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a313131333a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a313131333a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          SQpgoK/T/zC0OgPrRLmPcZhZZyhwXnVQWPxL9If2I4Y=
Subject key identifier:   14:C3:0F:0C:7A:66:D6:41:67:B4:4C:6E:85:41:93:8B:1A:54:BB:89
Certificate issuer:       /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial:       29A4EB3282A2FA33C5CBB11041A0895376E24BC7
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a313131333a3a2f34382d313238203d3e203532303235.roa
Signing time:             Thu 04 Jun 2026 16:32:47 +0000
ROA not before:           Thu 04 Jun 2026 16:27:47 +0000
ROA not after:            Thu 03 Jun 2027 16:32:47 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:1113::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:a4:eb:32:82:a2:fa:33:c5:cb:b1:10:41:a0:89:53:76:e2:4b:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
        Validity
            Not Before: Jun  4 16:27:47 2026 GMT
            Not After : Jun  3 16:32:47 2027 GMT
        Subject: CN=14C30F0C7A66D64167B44C6E8541938B1A54BB89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:56:57:93:4d:7e:80:b9:1a:2c:16:c6:78:36:
                    f3:78:97:26:b3:6c:72:6f:9f:68:c1:8f:ab:f9:2c:
                    d6:7d:37:74:68:fe:69:16:d5:68:8b:ec:11:06:03:
                    bf:a5:b8:97:62:08:d2:94:5e:07:0d:51:b9:dc:04:
                    64:fb:c4:05:31:38:10:1e:34:cf:0d:79:16:a0:2b:
                    59:26:67:4c:1a:8c:b7:d1:a9:a2:a6:ba:c0:e6:f8:
                    4c:8e:1e:58:22:92:05:1e:1a:dc:3f:1d:de:92:c8:
                    5e:e0:86:d0:ee:70:13:01:f4:63:cd:84:61:e0:1a:
                    de:98:e8:ad:e2:27:69:23:c6:81:5c:8b:3d:6b:e1:
                    4e:75:48:9f:b2:38:4a:f7:be:86:5d:cc:29:e7:45:
                    3e:2f:d6:49:f7:64:94:e6:78:7c:e3:50:0a:30:87:
                    92:5f:33:d0:d2:90:13:b3:dd:55:59:68:dc:39:68:
                    11:35:3d:ad:e7:10:41:3b:2a:59:9c:17:6d:f9:db:
                    ef:76:db:2c:78:fe:bf:f6:56:fb:dd:82:c0:be:f2:
                    7d:6d:74:59:69:e7:ed:99:ed:95:a0:1f:83:48:e5:
                    66:bf:56:ad:e4:39:4b:38:c2:51:46:ca:94:d7:c4:
                    a1:6f:9c:6a:84:26:41:80:c0:76:39:8b:11:2b:60:
                    5c:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:C3:0F:0C:7A:66:D6:41:67:B4:4C:6E:85:41:93:8B:1A:54:BB:89
            X509v3 Authority Key Identifier:
                keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a313131333a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:1113::/48

    Signature Algorithm: sha256WithRSAEncryption
         39:86:5b:60:79:58:cd:76:25:dc:12:92:ad:9f:ec:cc:2e:3a:
         d8:a2:45:ab:c9:88:10:36:25:99:ad:21:fc:b6:cf:e4:92:30:
         09:c0:58:8c:4d:cc:44:6d:96:5a:73:c1:57:34:1a:df:7f:10:
         19:8d:d7:56:1f:e9:fc:a1:35:4d:ad:d8:cb:fa:c7:65:60:f1:
         53:80:aa:87:9a:70:14:5f:76:30:9e:8a:bf:56:70:8c:39:8d:
         cd:02:3c:68:b3:c9:03:d2:fb:4c:f2:79:bc:06:2e:5f:3c:f2:
         f4:b8:69:d1:93:bd:84:ce:52:1c:5f:a9:54:01:80:6b:39:5c:
         6b:e2:21:15:7b:70:5c:4f:6f:10:b5:44:0e:74:2c:15:c1:27:
         ff:2e:e8:9d:c2:d5:ff:ed:47:08:02:90:c4:e5:fb:78:af:17:
         c0:3f:16:fb:17:3f:63:42:9d:65:56:11:e5:34:38:6c:05:fa:
         83:7e:79:18:c8:93:77:e7:c7:95:60:17:9a:cd:cc:83:54:f8:
         47:0e:31:1e:07:99:a1:ad:b7:c3:70:a5:9c:53:83:01:6f:8a:
         e0:b2:ab:34:88:02:b1:76:09:9e:0a:a6:72:9d:37:10:5f:e4:
         b8:78:a0:43:69:19:47:f6:ee:0f:40:8a:4e:01:4c:c4:fe:6b:
         cb:1e:d7:ad
-----BEGIN CERTIFICATE-----
MIIFJTCCBA2gAwIBAgIUKaTrMoKi+jPFy7EQQaCJU3biS8cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjYzODZGQUJFQTM5MjEwQjY2NUE2QTU1QUU1REE2NkJF
Njc0MTU5NzAeFw0yNjA2MDQxNjI3NDdaFw0yNzA2MDMxNjMyNDdaMDMxMTAvBgNV
BAMTKDE0QzMwRjBDN0E2NkQ2NDE2N0I0NEM2RTg1NDE5MzhCMUE1NEJCODkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfVleTTX6AuRosFsZ4NvN4lyaz
bHJvn2jBj6v5LNZ9N3Ro/mkW1WiL7BEGA7+luJdiCNKUXgcNUbncBGT7xAUxOBAe
NM8NeRagK1kmZ0wajLfRqaKmusDm+EyOHlgikgUeGtw/Hd6SyF7ghtDucBMB9GPN
hGHgGt6Y6K3iJ2kjxoFciz1r4U51SJ+yOEr3voZdzCnnRT4v1kn3ZJTmeHzjUAow
h5JfM9DSkBOz3VVZaNw5aBE1Pa3nEEE7KlmcF2352+922yx4/r/2VvvdgsC+8n1t
dFlp5+2Z7ZWgH4NI5Wa/Vq3kOUs4wlFGypTXxKFvnGqEJkGAwHY5ixErYFxdAgMB
AAGjggIvMIICKzAdBgNVHQ4EFgQUFMMPDHpm1kFntExuhUGTixpUu4kwHwYDVR0j
BBgwFoAU9jhvq+o5IQtmWmpVrl2ma+Z0FZcwDgYDVR0PAQH/BAQDAgeAMG4GA1Ud
HwRnMGUwY6BhoF+GXXJzeW5jOi8vcnBraS0wMS5wZHhuZXQudWsvcmVwby9wYXJh
ZG94bmV0d29ya3MvOC9GNjM4NkZBQkVBMzkyMTBCNjY1QTZBNTVBRTVEQTY2QkU2
NzQxNTk3LmNybDCBkwYIKwYBBQUHAQEEgYYwgYMwgYAGCCsGAQUFBzAChnRyc3lu
YzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYz
ZTAxODU3NTVjOTFiZTNmOWQvNy9GNjM4NkZBQkVBMzkyMTBCNjY1QTZBNTVBRTVE
QTY2QkU2NzQxNTk3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzAL
hnVyc3luYzovL3Jwa2ktMDEucGR4bmV0LnVrL3JlcG8vcGFyYWRveG5ldHdvcmtz
LzgvMzI2MTMwMzUzYTY0NjY2MzM0M2EzMTMxMzEzMzNhM2EyZjM0MzgyZDMxMzIz
ODIwM2QzZTIwMzUzMjMwMzIzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF38QREzANBgkqhkiG9w0B
AQsFAAOCAQEAOYZbYHlYzXYl3BKSrZ/szC462KJFq8mIEDYlma0h/LbP5JIwCcBY
jE3MRG2WWnPBVzQa338QGY3XVh/p/KE1Ta3Yy/rHZWDxU4Cqh5pwFF92MJ6Kv1Zw
jDmNzQI8aLPJA9L7TPJ5vAYuXzzy9Lhp0ZO9hM5SHF+pVAGAazlca+IhFXtwXE9v
ELVEDnQsFcEn/y7oncLV/+1HCAKQxOX7eK8XwD8W+xc/Y0KdZVYR5TQ4bAX6g355
GMiTd+fHlWAXms3Mg1T4Rw4xHgeZoa23w3ClnFODAW+K4LKrNIgCsXYJngqmcp03
EF/kuHigQ2kZR/buD0CKTgFMxP5ryx7XrQ==
-----END CERTIFICATE-----
Generated at Thu Jun 11 21:56:35 2026 by rpki-client