Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a3131663a3a2f34382d3438203d3e203532303235.roa
File:                     326130353a646663343a3131663a3a2f34382d3438203d3e203532303235.roa (raw, json)
Hash identifier:          TbxxixUeYT9I+by85R9l/6ZtviH8oEz2GbNGZffmkgE=
Subject key identifier:   B9:FA:C5:7A:65:50:AB:42:C8:E2:DE:06:E7:CD:19:AE:83:33:31:F5
Certificate issuer:       /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial:       759B6FD06454303DDEF4156079C4AD12D15B3BF5
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a3131663a3a2f34382d3438203d3e203532303235.roa
Signing time:             Thu 04 Jun 2026 16:33:01 +0000
ROA not before:           Thu 04 Jun 2026 16:28:01 +0000
ROA not after:            Thu 03 Jun 2027 16:33:01 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:11f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:9b:6f:d0:64:54:30:3d:de:f4:15:60:79:c4:ad:12:d1:5b:3b:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
        Validity
            Not Before: Jun  4 16:28:01 2026 GMT
            Not After : Jun  3 16:33:01 2027 GMT
        Subject: CN=B9FAC57A6550AB42C8E2DE06E7CD19AE833331F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:f2:48:c9:a1:c0:cd:b6:7b:d9:e1:70:dd:e5:
                    ac:26:c6:26:47:39:ed:d9:01:f0:8c:6a:42:7f:14:
                    96:89:6e:a5:6d:ca:8d:bd:12:c2:d8:c9:0e:3e:bc:
                    24:7b:1c:03:6e:00:fb:e5:75:58:4e:51:4a:37:23:
                    4f:02:b5:cf:ea:99:a5:34:b7:31:c4:69:84:f2:e5:
                    cc:9a:0e:7e:5f:5f:8f:9e:0b:18:39:5d:f3:76:64:
                    da:bb:21:6c:40:12:9b:64:fb:0c:cd:53:b4:91:a6:
                    cb:5d:17:3d:fa:9c:fc:1e:97:be:db:7b:31:37:5e:
                    c0:0b:27:87:98:2d:d6:a5:32:26:6b:6c:57:18:45:
                    ca:16:c2:88:5d:83:a1:d1:9b:59:58:ab:0b:19:44:
                    cb:34:12:dc:6c:43:02:05:84:45:de:76:65:9d:ca:
                    d2:1e:0a:ed:cf:fb:64:ca:b7:39:3c:5d:cf:60:94:
                    70:e4:a5:13:34:8c:6e:af:2e:cd:f5:14:ff:09:eb:
                    24:83:a0:20:3f:82:87:24:a3:00:b1:c3:e8:59:1a:
                    ae:df:0b:c1:ab:ca:87:ed:d3:a4:cd:6a:a1:1d:c4:
                    e0:70:01:20:59:b0:66:7c:51:5d:30:55:0a:e2:36:
                    76:03:94:1f:56:4f:c6:8b:e0:ad:d1:a0:76:88:0a:
                    fe:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:FA:C5:7A:65:50:AB:42:C8:E2:DE:06:E7:CD:19:AE:83:33:31:F5
            X509v3 Authority Key Identifier:
                keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a3131663a3a2f34382d3438203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:11f::/48

    Signature Algorithm: sha256WithRSAEncryption
         67:b1:13:f6:dc:66:e3:c7:fe:ad:f7:5b:6c:33:48:28:62:7e:
         7f:c1:e2:cd:18:a5:16:40:70:9d:76:83:e6:3c:59:ef:24:2a:
         1b:a3:ce:12:82:0f:79:7f:ff:57:4d:1e:3f:a4:23:ba:fa:30:
         d3:89:49:43:4e:69:1a:a2:ed:bc:e9:d4:e6:0a:d6:8b:83:e5:
         c7:1d:ef:d7:fe:21:d9:39:98:dd:a3:c4:b5:c4:66:86:c8:cc:
         7f:39:41:22:75:32:c3:4f:5f:c4:35:af:97:ba:88:84:62:db:
         f1:84:72:34:11:40:b5:1a:92:ff:10:40:cf:c0:c5:0e:7d:c7:
         d9:e6:29:96:29:bb:fc:b6:da:a3:94:07:77:36:94:9e:5f:2d:
         92:5f:b5:be:45:27:94:7d:8b:61:61:17:e1:28:6a:03:76:4c:
         1c:24:49:b8:07:43:c1:8d:92:80:16:22:62:0c:66:30:80:67:
         f7:08:28:28:ab:9c:68:f0:1d:a5:0e:c9:40:44:68:e4:4c:24:
         3c:64:15:ad:33:36:ca:59:cd:2a:05:88:e9:16:4d:a7:e5:15:
         f2:20:d9:ed:93:89:31:1b:e8:c0:ea:9f:c9:2d:95:24:08:c5:
         5c:77:03:bf:ab:ac:af:76:54:1d:09:f4:c1:f7:74:92:63:4a:
         f9:5e:4c:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 21:51:31 2026 by rpki-client