Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a313231343a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a313231343a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          wB3bXIwv1vKPDOuBTmmmUrOONJd21m4AaZ9IwDu1g0U=
Subject key identifier:   7D:23:22:F1:0D:B6:54:51:4E:5F:33:9C:FD:2E:94:FB:76:39:D2:31
Certificate issuer:       /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial:       6AD9F8B43B6484DA78D7E241FA723F86B4E07D55
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a313231343a3a2f34382d313238203d3e203532303235.roa
Signing time:             Thu 04 Jun 2026 16:32:50 +0000
ROA not before:           Thu 04 Jun 2026 16:27:50 +0000
ROA not after:            Thu 03 Jun 2027 16:32:50 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:1214::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:d9:f8:b4:3b:64:84:da:78:d7:e2:41:fa:72:3f:86:b4:e0:7d:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
        Validity
            Not Before: Jun  4 16:27:50 2026 GMT
            Not After : Jun  3 16:32:50 2027 GMT
        Subject: CN=7D2322F10DB654514E5F339CFD2E94FB7639D231
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:73:d8:15:a3:8d:0f:a2:d8:e5:ac:34:29:fb:
                    a6:b6:d7:cb:c9:8b:c4:a5:25:0c:ca:c1:55:f1:a8:
                    32:c6:22:82:10:5e:b1:f3:76:2a:92:29:1b:6b:f5:
                    d5:45:c9:ae:9a:c9:30:dc:95:a3:df:5f:2e:a4:e9:
                    e7:92:aa:30:aa:e5:cd:b5:5c:69:7c:0f:39:1e:d9:
                    fe:5a:44:f8:59:c4:5d:39:5b:e2:93:6b:a0:be:3e:
                    94:cd:6f:d3:f4:ba:3e:58:4d:6d:2a:6b:cf:2e:0b:
                    e1:b3:2f:58:a8:c6:88:d3:5c:e1:81:1e:20:c6:12:
                    26:92:7e:65:13:be:37:f4:ce:a9:ac:14:cd:97:26:
                    2f:be:00:42:09:5d:f4:22:81:8c:ec:c4:cc:87:30:
                    6b:64:bb:f5:ef:c8:b0:00:00:85:2a:34:d3:71:52:
                    79:01:28:02:da:85:fc:72:9c:f5:34:ce:2a:5f:be:
                    55:3c:67:f6:7b:72:54:00:e2:8b:c9:6a:fd:3f:c5:
                    3c:91:c3:e9:95:a4:c3:6b:3d:55:67:7e:c4:de:0c:
                    a6:a3:c8:f1:71:fc:80:d4:ee:31:0b:41:db:8e:09:
                    ad:20:07:ae:30:e6:c3:4f:0d:1e:df:06:99:5d:32:
                    77:d5:84:a1:b2:83:3d:b5:b8:a6:a8:5e:ab:70:16:
                    1c:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:23:22:F1:0D:B6:54:51:4E:5F:33:9C:FD:2E:94:FB:76:39:D2:31
            X509v3 Authority Key Identifier:
                keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a313231343a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:1214::/48

    Signature Algorithm: sha256WithRSAEncryption
         87:96:7e:67:2a:34:b9:af:df:8d:a0:ce:71:7d:8a:52:b3:b6:
         71:f5:a1:fe:47:55:00:61:2d:b3:9a:3c:aa:0f:75:01:81:82:
         65:43:f5:7a:6f:5f:46:0b:0a:94:36:21:10:4c:50:ae:c5:86:
         35:18:27:b4:4d:1c:5e:fb:72:b5:c8:69:5c:f8:32:7f:c8:54:
         7b:56:d0:96:a6:b1:56:5b:88:d7:5f:18:21:fd:fd:47:85:79:
         a4:47:95:5c:f9:ca:66:db:7e:8b:25:08:51:8a:4a:42:2a:38:
         d1:17:57:1a:e1:dd:0e:89:ec:4d:e7:d9:2a:e3:37:fc:2e:bb:
         d4:43:54:c8:aa:30:b8:b2:35:a8:f1:5c:dc:53:ad:48:0c:86:
         34:42:af:a3:b2:cc:86:0e:b4:ea:1d:04:1e:3b:5b:41:c8:95:
         3e:be:59:30:9d:34:cf:a7:c0:ca:1d:6a:59:de:bc:55:b0:e5:
         38:86:60:d8:31:63:19:b1:38:51:3a:a3:e4:b8:c9:e4:91:75:
         00:81:6d:4b:72:b7:5b:26:0a:a1:a5:c0:83:f0:11:05:85:06:
         e6:89:7d:5b:83:d4:a8:f9:cd:33:d7:fb:1c:d4:0e:7b:2c:fd:
         9f:52:98:72:92:7e:eb:67:eb:76:6c:2d:2a:39:72:19:45:0e:
         a9:e3:f9:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 21:57:17 2026 by rpki-client