Route Origin Authorization

$ rpki-client -vvvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a313231343a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a313231343a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          lTkynnmzhn3CNqGu8zB2KpISvh3UBj+s4Os9h6wzYmE=
Subject key identifier:   5F:24:A6:3C:33:61:9E:90:0E:D0:7F:2E:4F:0C:E8:58:B2:93:87:51
Certificate issuer:       /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial:       256DE3D1B4354585960A89B8311DFED813FA9376
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a313231343a3a2f34382d313238203d3e203532303235.roa
Signing time:             Sat 15 Aug 2026 23:18:27 +0000
ROA not before:           Sat 15 Aug 2026 23:13:27 +0000
ROA not after:            Sat 14 Aug 2027 23:18:27 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:1214::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Aug 2026 23:30:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:6d:e3:d1:b4:35:45:85:96:0a:89:b8:31:1d:fe:d8:13:fa:93:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
        Validity
            Not Before: Aug 15 23:13:27 2026 GMT
            Not After : Aug 14 23:18:27 2027 GMT
        Subject: CN=5F24A63C33619E900ED07F2E4F0CE858B2938751
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:cb:3d:a5:89:76:53:4a:e7:0c:34:31:96:43:
                    ac:32:50:f2:ba:f9:04:c7:b4:51:f3:f3:6f:16:0f:
                    9b:30:72:88:61:84:0a:e2:6c:1d:01:6d:e9:c3:64:
                    55:5e:3b:fc:a6:ae:cf:60:02:33:e4:7f:8f:84:7c:
                    b1:34:bd:ad:8a:70:70:3c:62:85:1f:cc:25:71:e3:
                    19:76:4e:5e:b5:53:7a:a1:f7:b3:b7:dd:71:d4:53:
                    11:ab:fd:88:77:d8:62:16:19:8a:33:e6:e2:83:ba:
                    16:bb:ad:9d:57:51:b8:16:20:5a:be:41:97:fe:bd:
                    c6:47:be:3c:84:f1:25:08:c7:e8:d1:52:6e:15:e1:
                    7f:c0:d1:86:50:4e:31:e1:16:dc:c9:cb:8f:10:cc:
                    14:89:ed:85:98:fc:ca:07:2a:de:52:56:76:56:3e:
                    11:67:0d:9a:42:af:58:cf:ac:c0:9e:08:34:b3:87:
                    aa:8b:92:ce:0a:7b:8a:df:60:4c:ad:98:4d:87:2f:
                    19:c8:5b:14:4a:6a:69:03:c1:93:bf:71:44:d5:54:
                    70:5d:35:22:b3:7a:04:a9:3b:4f:d1:89:73:95:eb:
                    00:6d:74:89:3a:0a:02:03:e3:1a:85:02:99:dd:67:
                    0d:55:6c:02:07:b3:75:96:d1:52:b0:5e:9f:4e:9f:
                    ff:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:24:A6:3C:33:61:9E:90:0E:D0:7F:2E:4F:0C:E8:58:B2:93:87:51
            X509v3 Authority Key Identifier:
                keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a313231343a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:1214::/48

    Signature Algorithm: sha256WithRSAEncryption
         77:2a:4f:30:c8:7d:08:13:ef:36:96:07:fe:04:bc:f9:75:08:
         ba:63:05:61:f6:09:76:e5:ff:73:9a:85:2f:bf:68:a9:52:5f:
         8a:90:93:2e:e0:b5:c6:c9:f5:30:f5:90:96:e4:5c:43:40:d4:
         b9:f9:c5:98:0d:a2:88:0b:11:05:eb:01:92:75:04:28:81:6b:
         0a:a1:06:85:3d:5e:84:a8:ff:ec:2b:d8:42:0e:9b:fc:5f:39:
         7d:e7:b7:91:85:10:81:ad:80:dd:cf:59:7b:f6:0a:ed:ec:14:
         9e:82:28:14:0f:fc:e9:2e:04:40:04:96:e0:4a:7c:1d:00:b7:
         79:7d:99:cf:2c:6f:9d:bb:fa:df:6b:be:0e:bd:eb:d7:f0:07:
         4e:9b:ed:02:c2:42:21:9c:5c:79:c8:7b:29:c1:38:c1:cf:0c:
         aa:b7:3d:4d:cc:0f:e3:74:28:be:38:d7:e4:0a:2e:7f:67:7d:
         d3:3b:3a:4d:15:8e:2f:fd:93:3a:82:d8:aa:a7:99:ac:91:1d:
         4d:d6:44:28:41:17:79:92:0b:81:25:1c:2f:7a:ba:71:70:e8:
         63:51:6f:0f:f1:c6:6d:97:3e:13:da:5b:b4:49:2b:26:22:69:
         c6:55:c1:9d:9d:aa:2c:e5:ca:1f:d8:80:27:7e:79:04:d8:e7:
         fa:ff:97:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 10:37:58 2026 by rpki-client