Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a31313a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a31313a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          pKcOWMPZ3BB0228/hFhNvvWhgnQbOwXyWi3eRNyN6H8=
Subject key identifier:   81:AB:A0:76:7A:A2:2A:96:28:17:EC:E8:01:46:5A:A6:E0:A1:3A:09
Certificate issuer:       /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial:       279A9439A0CCD869E4BE92BFA38FAFA8F5222076
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a31313a3a2f34382d313238203d3e203532303235.roa
Signing time:             Thu 04 Jun 2026 16:32:50 +0000
ROA not before:           Thu 04 Jun 2026 16:27:50 +0000
ROA not after:            Thu 03 Jun 2027 16:32:50 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:11::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:9a:94:39:a0:cc:d8:69:e4:be:92:bf:a3:8f:af:a8:f5:22:20:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
        Validity
            Not Before: Jun  4 16:27:50 2026 GMT
            Not After : Jun  3 16:32:50 2027 GMT
        Subject: CN=81ABA0767AA22A962817ECE801465AA6E0A13A09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b7:da:cd:b4:2a:46:57:a6:bd:78:fe:11:91:
                    46:fe:94:7b:c2:0b:e7:3b:3a:c2:d3:d9:34:24:41:
                    81:93:88:64:79:6b:1c:ec:df:0c:44:a4:0c:09:5b:
                    74:dd:85:b2:f4:7a:29:88:79:4c:e8:86:a0:98:31:
                    3c:a6:6d:f0:b1:57:11:87:64:b9:6c:53:94:4e:ee:
                    23:e2:5d:10:58:b6:0b:c1:10:c2:3e:9d:37:64:b6:
                    69:55:3b:32:78:4d:36:71:e8:4c:b9:5e:8a:14:c3:
                    9d:83:4d:eb:e4:70:74:ba:b5:7d:4d:ea:c8:2f:ac:
                    8d:cb:73:de:58:ea:73:c3:74:37:a5:45:0b:14:c8:
                    e6:01:1a:04:73:9e:46:81:23:25:71:9e:2d:9e:3f:
                    4c:bd:58:89:ed:50:48:32:e9:a3:0a:d6:58:62:d6:
                    06:44:22:d8:70:eb:3c:68:3f:a4:0a:51:1a:c0:1c:
                    46:c3:a4:ed:7a:db:3a:ff:45:29:41:a4:6d:b5:4b:
                    b1:d7:bb:a5:53:bc:62:13:13:a2:b1:c5:36:d7:bf:
                    08:7e:d0:71:0e:70:3a:ff:c0:09:ca:28:a9:03:96:
                    72:64:0a:54:f8:c5:51:b3:3c:d3:d8:1b:3e:f5:09:
                    07:62:1a:7f:32:e4:51:b6:d6:12:01:9f:31:91:d3:
                    ef:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:AB:A0:76:7A:A2:2A:96:28:17:EC:E8:01:46:5A:A6:E0:A1:3A:09
            X509v3 Authority Key Identifier:
                keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a31313a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:11::/48

    Signature Algorithm: sha256WithRSAEncryption
         23:28:7c:37:c1:55:1b:9f:53:e1:6b:b3:18:63:99:e0:61:a1:
         a8:1d:1d:c8:bd:ce:3c:72:34:be:2d:2c:66:2e:92:8f:0b:c6:
         d8:b0:b3:4a:1c:49:a7:3a:bc:8b:33:5a:b6:d6:3c:b0:d8:8c:
         05:18:a1:45:a1:6d:7b:fd:b3:01:67:0b:cf:0d:00:03:a4:92:
         95:2a:e5:3a:5b:86:13:27:c9:c1:db:1a:6e:dd:c9:39:29:83:
         f4:9b:3d:8d:a8:58:e2:62:15:0c:c3:58:68:48:6c:96:3a:db:
         36:ca:52:82:87:48:15:99:ec:5a:71:a0:f6:7c:a0:41:5b:f5:
         e0:18:f4:54:24:9d:26:2d:c2:62:6d:94:85:91:d8:6f:b6:c5:
         88:9e:5d:99:6b:b3:ed:c2:20:c3:11:92:c0:63:a0:fa:1a:99:
         f2:00:65:f5:c9:3b:cf:6d:e9:fe:3b:1b:e3:f4:3a:c7:f1:86:
         b4:c7:5b:4a:1e:a9:f7:67:d2:11:e7:ea:be:b6:bf:86:a0:1a:
         1d:5a:13:f2:56:ad:90:67:0b:9e:16:e1:ea:fd:87:df:68:14:
         f5:6e:99:cd:3d:5c:cf:57:5e:2b:21:e9:44:ca:31:07:3a:eb:
         15:72:94:8c:70:f9:3b:d7:73:56:5e:5b:6e:e5:f2:c2:d0:8d:
         c7:e7:4a:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 21:55:04 2026 by rpki-client