Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a3132663a3a2f34382d3438203d3e203532303235.roa
File:                     326130353a646663343a3132663a3a2f34382d3438203d3e203532303235.roa (raw, json)
Hash identifier:          JJISSDg8y0CbtkH9nrPLYcFzHCOBnDKF/LEjrvuTyw8=
Subject key identifier:   70:8D:23:45:97:20:F8:12:D8:62:E0:94:62:D5:94:3D:1E:4E:DE:26
Certificate issuer:       /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial:       1CE84CF3A3A0473BC6C48066CF9E687C2BBD3CB5
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a3132663a3a2f34382d3438203d3e203532303235.roa
Signing time:             Thu 04 Jun 2026 16:33:03 +0000
ROA not before:           Thu 04 Jun 2026 16:28:03 +0000
ROA not after:            Thu 03 Jun 2027 16:33:03 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:12f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:e8:4c:f3:a3:a0:47:3b:c6:c4:80:66:cf:9e:68:7c:2b:bd:3c:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
        Validity
            Not Before: Jun  4 16:28:03 2026 GMT
            Not After : Jun  3 16:33:03 2027 GMT
        Subject: CN=708D23459720F812D862E09462D5943D1E4EDE26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:23:59:3c:cf:a8:74:06:e5:67:32:08:66:12:
                    5c:cd:6a:12:e4:84:df:6a:81:25:7c:9b:2b:43:cb:
                    b6:45:9f:e1:25:14:7a:d5:19:8a:a4:a4:60:b2:c1:
                    fc:e3:82:67:97:a4:bb:c7:33:e2:06:48:33:53:2f:
                    17:5c:83:83:35:c9:b5:3e:a3:64:f2:25:ca:b6:49:
                    41:6c:ba:44:10:3f:01:1a:9e:91:8f:01:a0:be:82:
                    e4:27:86:a1:ef:23:02:dd:f0:98:ce:2d:bc:ce:4a:
                    3c:1b:da:76:b8:0d:5a:d5:78:96:4f:b1:c5:dc:81:
                    0c:74:70:85:11:b9:f3:6a:9e:70:f4:b9:80:62:33:
                    19:be:99:8d:81:33:25:c2:76:53:1c:1e:55:3f:93:
                    29:72:12:db:71:04:3d:ee:30:a1:4a:3b:bb:b8:4c:
                    e4:9d:df:ea:e2:c0:7b:b6:07:67:b0:e1:88:5f:75:
                    8a:8e:2d:6e:cd:75:30:0e:10:89:7f:70:83:af:10:
                    c0:f8:d0:e1:3a:32:bc:50:1d:f2:bb:3c:4b:37:f3:
                    67:ce:b9:a0:3b:92:78:13:43:ef:24:c5:76:26:3e:
                    6a:81:b2:0d:0d:d7:5a:a3:e1:1b:f1:03:87:0c:78:
                    c5:3c:35:b3:59:db:8f:83:5f:c6:64:86:fc:c3:69:
                    87:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:8D:23:45:97:20:F8:12:D8:62:E0:94:62:D5:94:3D:1E:4E:DE:26
            X509v3 Authority Key Identifier:
                keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a3132663a3a2f34382d3438203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:12f::/48

    Signature Algorithm: sha256WithRSAEncryption
         12:3b:f1:fa:5e:b2:9e:f2:01:85:d5:6d:9e:ed:e8:e9:a9:8e:
         0b:11:e9:d0:68:ef:91:ad:c2:e6:5c:c5:a6:21:d9:37:34:41:
         bf:d8:b1:b0:26:e5:1f:98:68:2f:a2:19:bf:6c:33:d8:21:c0:
         9b:18:d5:df:e6:42:77:e3:5e:3a:a7:b1:ac:42:6b:d0:bf:16:
         e6:f4:8e:a5:42:24:36:ca:2a:45:26:0d:e4:65:89:9f:9d:92:
         dd:af:b7:62:52:87:46:76:29:f4:3e:b2:06:f4:5a:1b:2b:9b:
         6f:76:9f:f4:d5:4f:e6:bf:f7:1d:5b:45:42:d3:c9:80:d6:c3:
         2b:aa:15:9e:a0:98:de:d2:77:fa:38:fd:cd:45:a1:7d:27:a3:
         3b:54:cb:5a:aa:6a:eb:07:b0:90:1c:4c:84:07:06:25:09:98:
         fa:60:43:9a:7a:f4:ee:8b:f4:e7:22:f0:dd:d3:d5:66:86:9a:
         57:8c:21:68:8c:79:ed:7a:4c:cb:ce:ba:4d:1d:5c:bf:e9:a0:
         c8:10:c7:49:3e:49:12:8e:9f:e3:1f:03:40:b4:0c:3d:14:07:
         51:11:f5:9f:42:6d:ac:c3:24:e0:18:92:e9:44:bb:f5:80:b8:
         35:72:3c:bc:cc:ca:2b:6e:e1:1a:8f:f5:fa:db:34:49:f6:31:
         a7:a0:03:7d
-----BEGIN CERTIFICATE-----
MIIFHzCCBAegAwIBAgIUHOhM86OgRzvGxIBmz55ofCu9PLUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjYzODZGQUJFQTM5MjEwQjY2NUE2QTU1QUU1REE2NkJF
Njc0MTU5NzAeFw0yNjA2MDQxNjI4MDNaFw0yNzA2MDMxNjMzMDNaMDMxMTAvBgNV
BAMTKDcwOEQyMzQ1OTcyMEY4MTJEODYyRTA5NDYyRDU5NDNEMUU0RURFMjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWI1k8z6h0BuVnMghmElzNahLk
hN9qgSV8mytDy7ZFn+ElFHrVGYqkpGCywfzjgmeXpLvHM+IGSDNTLxdcg4M1ybU+
o2TyJcq2SUFsukQQPwEanpGPAaC+guQnhqHvIwLd8JjOLbzOSjwb2na4DVrVeJZP
scXcgQx0cIURufNqnnD0uYBiMxm+mY2BMyXCdlMcHlU/kylyEttxBD3uMKFKO7u4
TOSd3+riwHu2B2ew4YhfdYqOLW7NdTAOEIl/cIOvEMD40OE6MrxQHfK7PEs382fO
uaA7kngTQ+8kxXYmPmqBsg0N11qj4RvxA4cMeMU8NbNZ24+DX8ZkhvzDaYcxAgMB
AAGjggIpMIICJTAdBgNVHQ4EFgQUcI0jRZcg+BLYYuCUYtWUPR5O3iYwHwYDVR0j
BBgwFoAU9jhvq+o5IQtmWmpVrl2ma+Z0FZcwDgYDVR0PAQH/BAQDAgeAMG4GA1Ud
HwRnMGUwY6BhoF+GXXJzeW5jOi8vcnBraS0wMS5wZHhuZXQudWsvcmVwby9wYXJh
ZG94bmV0d29ya3MvOC9GNjM4NkZBQkVBMzkyMTBCNjY1QTZBNTVBRTVEQTY2QkU2
NzQxNTk3LmNybDCBkwYIKwYBBQUHAQEEgYYwgYMwgYAGCCsGAQUFBzAChnRyc3lu
YzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYz
ZTAxODU3NTVjOTFiZTNmOWQvNy9GNjM4NkZBQkVBMzkyMTBCNjY1QTZBNTVBRTVE
QTY2QkU2NzQxNTk3LmNlcjCBjgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4Zx
cnN5bmM6Ly9ycGtpLTAxLnBkeG5ldC51ay9yZXBvL3BhcmFkb3huZXR3b3Jrcy84
LzMyNjEzMDM1M2E2NDY2NjMzNDNhMzEzMjY2M2EzYTJmMzQzODJkMzQzODIwM2Qz
ZTIwMzUzMjMwMzIzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggr
BgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF38QBLzANBgkqhkiG9w0BAQsFAAOC
AQEAEjvx+l6ynvIBhdVtnu3o6amOCxHp0Gjvka3C5lzFpiHZNzRBv9ixsCblH5ho
L6IZv2wz2CHAmxjV3+ZCd+NeOqexrEJr0L8W5vSOpUIkNsoqRSYN5GWJn52S3a+3
YlKHRnYp9D6yBvRaGyubb3af9NVP5r/3HVtFQtPJgNbDK6oVnqCY3tJ3+jj9zUWh
fSejO1TLWqpq6wewkBxMhAcGJQmY+mBDmnr07ov05yLw3dPVZoaaV4whaIx57XpM
y866TR1cv+mgyBDHST5JEo6f4x8DQLQMPRQHURH1n0JtrMMk4BiS6US79YC4NXI8
vMzKK27hGo/1+ts0SfYxp6ADfQ==
-----END CERTIFICATE-----
Generated at Thu Jun 11 21:58:08 2026 by rpki-client