Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a31323a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a31323a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          wppn8oSnjscSafs38McV8xf+QZavM1thWmyfeZsU7gI=
Subject key identifier:   2C:7F:49:9C:D5:C9:55:1F:0B:F2:02:19:D1:6D:C3:0D:A9:0B:AE:02
Certificate issuer:       /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial:       0876A0AADCAE28AD48C88664358A5CF8AE54614D
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a31323a3a2f34382d313238203d3e203532303235.roa
Signing time:             Thu 04 Jun 2026 16:32:56 +0000
ROA not before:           Thu 04 Jun 2026 16:27:56 +0000
ROA not after:            Thu 03 Jun 2027 16:32:56 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:12::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:76:a0:aa:dc:ae:28:ad:48:c8:86:64:35:8a:5c:f8:ae:54:61:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
        Validity
            Not Before: Jun  4 16:27:56 2026 GMT
            Not After : Jun  3 16:32:56 2027 GMT
        Subject: CN=2C7F499CD5C9551F0BF20219D16DC30DA90BAE02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:3a:8b:8e:42:f9:d8:73:4b:5f:da:c3:f6:6e:
                    40:83:b5:8c:f8:bf:46:97:ad:21:ec:c7:4f:9c:42:
                    9f:10:2e:3d:9f:3c:a4:f7:49:b9:95:09:3a:d3:f7:
                    d0:75:9b:75:ab:e0:0b:19:51:fb:05:44:d1:e7:36:
                    57:50:19:bd:90:fd:c4:80:58:e1:40:29:13:4f:ce:
                    63:bc:34:85:ed:a1:74:74:28:29:dd:20:c1:40:83:
                    ac:47:7a:b3:d1:bc:cc:95:92:92:9d:1e:52:95:31:
                    e9:73:63:a7:f8:3b:fc:a7:0c:7b:8b:90:61:f5:01:
                    c9:47:77:46:a8:b4:79:34:90:5a:46:49:c9:21:25:
                    8c:71:fa:dd:f5:dd:ea:32:70:7b:8b:82:4c:14:98:
                    36:aa:a5:ba:13:e9:fd:52:10:16:aa:bd:bc:25:2e:
                    ab:5a:4c:34:74:76:b0:1f:ff:48:6f:a2:1a:45:02:
                    64:71:d7:fe:3c:83:0a:aa:84:c3:eb:53:d1:ae:bb:
                    4f:47:67:cf:e8:4d:45:1f:6e:b6:ca:5d:fa:50:f4:
                    45:1c:e8:46:d4:21:07:fb:43:03:a8:46:d2:df:fb:
                    eb:d3:ae:3b:14:13:50:28:bd:9e:0b:21:68:d5:44:
                    1d:5d:9a:cc:f6:e5:8c:ed:a2:2c:5d:47:1a:6d:62:
                    1f:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:7F:49:9C:D5:C9:55:1F:0B:F2:02:19:D1:6D:C3:0D:A9:0B:AE:02
            X509v3 Authority Key Identifier:
                keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a31323a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:12::/48

    Signature Algorithm: sha256WithRSAEncryption
         67:d2:b6:84:53:07:20:a0:c7:c1:49:cf:2a:71:af:ee:7a:78:
         14:c7:4b:22:75:8f:ab:6e:ea:5c:af:97:59:93:fd:ad:bb:5e:
         a4:f0:9c:d7:c5:02:af:65:89:32:2b:eb:14:a4:de:17:82:c4:
         30:36:76:2f:f1:07:cd:a0:0c:86:0d:e3:8c:95:93:b0:04:d5:
         2f:c1:e1:24:09:1b:1f:c3:55:38:6f:98:b1:63:c9:f6:8b:22:
         0b:aa:11:96:1e:0d:fd:f2:87:87:d0:1e:82:87:47:d2:e3:d9:
         e2:63:ef:1e:68:8f:1e:db:36:4e:9b:af:97:0d:de:3f:29:c0:
         16:55:18:73:0b:a1:d5:53:5b:a0:e9:0d:46:12:f9:85:90:cb:
         93:30:d3:94:c4:84:fb:3f:1b:68:24:63:f5:e8:62:bb:a2:45:
         56:49:a9:22:d4:e5:6c:f7:d9:12:ac:1d:04:57:35:95:96:7b:
         ab:87:2c:c1:eb:e4:3f:4e:4b:43:b9:41:44:5f:34:e5:65:3d:
         4e:94:d1:91:f6:34:e4:c8:21:a8:7b:8b:6b:1f:2d:e4:27:62:
         b0:64:28:f9:24:73:51:e1:a8:d6:66:04:ab:4d:2c:51:21:ee:
         51:f8:b0:1f:4d:b8:09:4b:0e:b4:c8:46:88:c0:70:67:3a:1a:
         fc:36:2f:7d
-----BEGIN CERTIFICATE-----
MIIFHzCCBAegAwIBAgIUCHagqtyuKK1IyIZkNYpc+K5UYU0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjYzODZGQUJFQTM5MjEwQjY2NUE2QTU1QUU1REE2NkJF
Njc0MTU5NzAeFw0yNjA2MDQxNjI3NTZaFw0yNzA2MDMxNjMyNTZaMDMxMTAvBgNV
BAMTKDJDN0Y0OTlDRDVDOTU1MUYwQkYyMDIxOUQxNkRDMzBEQTkwQkFFMDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNOouOQvnYc0tf2sP2bkCDtYz4
v0aXrSHsx0+cQp8QLj2fPKT3SbmVCTrT99B1m3Wr4AsZUfsFRNHnNldQGb2Q/cSA
WOFAKRNPzmO8NIXtoXR0KCndIMFAg6xHerPRvMyVkpKdHlKVMelzY6f4O/ynDHuL
kGH1AclHd0aotHk0kFpGSckhJYxx+t313eoycHuLgkwUmDaqpboT6f1SEBaqvbwl
LqtaTDR0drAf/0hvohpFAmRx1/48gwqqhMPrU9Guu09HZ8/oTUUfbrbKXfpQ9EUc
6EbUIQf7QwOoRtLf++vTrjsUE1AovZ4LIWjVRB1dmsz25YztoixdRxptYh+1AgMB
AAGjggIpMIICJTAdBgNVHQ4EFgQULH9JnNXJVR8L8gIZ0W3DDakLrgIwHwYDVR0j
BBgwFoAU9jhvq+o5IQtmWmpVrl2ma+Z0FZcwDgYDVR0PAQH/BAQDAgeAMG4GA1Ud
HwRnMGUwY6BhoF+GXXJzeW5jOi8vcnBraS0wMS5wZHhuZXQudWsvcmVwby9wYXJh
ZG94bmV0d29ya3MvOC9GNjM4NkZBQkVBMzkyMTBCNjY1QTZBNTVBRTVEQTY2QkU2
NzQxNTk3LmNybDCBkwYIKwYBBQUHAQEEgYYwgYMwgYAGCCsGAQUFBzAChnRyc3lu
YzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYz
ZTAxODU3NTVjOTFiZTNmOWQvNy9GNjM4NkZBQkVBMzkyMTBCNjY1QTZBNTVBRTVE
QTY2QkU2NzQxNTk3LmNlcjCBjgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4Zx
cnN5bmM6Ly9ycGtpLTAxLnBkeG5ldC51ay9yZXBvL3BhcmFkb3huZXR3b3Jrcy84
LzMyNjEzMDM1M2E2NDY2NjMzNDNhMzEzMjNhM2EyZjM0MzgyZDMxMzIzODIwM2Qz
ZTIwMzUzMjMwMzIzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggr
BgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF38QAEjANBgkqhkiG9w0BAQsFAAOC
AQEAZ9K2hFMHIKDHwUnPKnGv7np4FMdLInWPq27qXK+XWZP9rbtepPCc18UCr2WJ
MivrFKTeF4LEMDZ2L/EHzaAMhg3jjJWTsATVL8HhJAkbH8NVOG+YsWPJ9osiC6oR
lh4N/fKHh9AegodH0uPZ4mPvHmiPHts2Tpuvlw3ePynAFlUYcwuh1VNboOkNRhL5
hZDLkzDTlMSE+z8baCRj9ehiu6JFVkmpItTlbPfZEqwdBFc1lZZ7q4cswevkP05L
Q7lBRF805WU9TpTRkfY05MghqHuLax8t5CdisGQo+SRzUeGo1mYEq00sUSHuUfiw
H024CUsOtMhGiMBwZzoa/DYvfQ==
-----END CERTIFICATE-----
Generated at Thu Jun 11 21:55:05 2026 by rpki-client