Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a313331313a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a313331313a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          QOCFiTUtwnEB+cGoHLKVBpfk3XeS6RKzMeeziRge7Ps=
Subject key identifier:   04:0D:80:42:B9:DB:C0:2E:01:D9:E7:C6:B7:AB:E1:01:06:1D:FB:62
Certificate issuer:       /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial:       453AF6F35901B2CBA5ADEDB4CB8601C7AC9BD0BE
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a313331313a3a2f34382d313238203d3e203532303235.roa
Signing time:             Thu 04 Jun 2026 16:32:48 +0000
ROA not before:           Thu 04 Jun 2026 16:27:48 +0000
ROA not after:            Thu 03 Jun 2027 16:32:48 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:1311::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:3a:f6:f3:59:01:b2:cb:a5:ad:ed:b4:cb:86:01:c7:ac:9b:d0:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
        Validity
            Not Before: Jun  4 16:27:48 2026 GMT
            Not After : Jun  3 16:32:48 2027 GMT
        Subject: CN=040D8042B9DBC02E01D9E7C6B7ABE101061DFB62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:fe:90:ed:0d:7c:8f:24:06:0d:15:c3:17:d6:
                    51:ec:e5:3c:da:d4:65:26:e4:66:ce:8c:10:93:42:
                    1c:a8:cb:32:9f:cd:73:0e:c7:8c:f3:67:c7:a7:0d:
                    be:92:f6:13:a0:a8:5b:08:63:2c:20:9f:a3:9a:d6:
                    3c:3d:82:f2:4e:c6:ca:54:e7:c4:0d:88:cc:67:ee:
                    fa:1a:c3:3a:64:05:25:7b:04:53:ba:f0:02:aa:fc:
                    e9:a5:d1:6b:88:6e:6c:03:83:57:67:ce:c6:22:b3:
                    67:bb:f7:d6:ea:ba:09:f1:32:9c:d9:f1:17:7b:eb:
                    b1:46:20:49:5e:71:82:2f:92:9a:5e:c0:aa:a0:fa:
                    e7:48:60:93:67:24:74:b3:30:2b:26:b1:d8:a7:42:
                    67:e8:6d:ef:c7:58:4b:36:2b:1e:41:25:90:f1:3a:
                    f2:ac:4f:90:90:50:6e:7c:42:ad:d7:64:25:74:eb:
                    c4:99:62:88:9e:c9:89:c1:32:1d:2d:71:18:cb:a4:
                    e7:32:45:dc:90:67:96:2c:aa:10:77:32:f3:e8:d7:
                    cf:21:d4:47:2b:88:3f:ad:55:d8:c0:b7:c9:09:80:
                    18:f3:f5:a3:17:85:c3:b1:f2:a0:d3:29:c5:5c:9d:
                    5c:17:74:81:09:75:79:5e:d4:53:07:f9:22:69:fb:
                    50:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:0D:80:42:B9:DB:C0:2E:01:D9:E7:C6:B7:AB:E1:01:06:1D:FB:62
            X509v3 Authority Key Identifier:
                keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a313331313a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:1311::/48

    Signature Algorithm: sha256WithRSAEncryption
         76:ca:06:41:6f:58:52:d2:f4:f6:0c:8a:11:3f:3f:d9:aa:74:
         b9:e2:3e:71:3a:4b:09:08:22:ac:65:db:70:bd:fa:15:46:cb:
         c4:90:2e:bd:2d:cc:be:1e:ed:6b:12:91:22:fc:7d:09:17:6b:
         38:80:3b:27:b3:8f:90:14:9f:48:62:87:60:38:7a:c2:c6:d3:
         f3:0f:47:7c:f4:67:88:1f:b8:7b:9e:3e:a2:4c:aa:91:37:e2:
         a2:b8:f1:4f:8a:52:1d:37:96:e3:60:73:3f:47:3f:d2:5b:7e:
         82:02:11:c8:b4:58:ad:5a:e0:b0:45:ff:13:6a:ba:78:fe:b8:
         7e:8b:f0:90:4b:70:39:9a:18:32:6a:b3:dc:f0:3f:2f:b7:f6:
         bd:f4:ef:c7:e7:db:2e:51:0b:c9:16:50:0f:54:e6:91:b6:62:
         0e:b1:2a:8d:42:d9:ba:3b:a8:6b:3c:34:8a:70:a2:0b:a9:01:
         0c:b9:63:76:52:5f:0d:3d:f3:22:5e:b7:1b:32:f4:f2:26:b4:
         63:81:62:4a:22:c3:2d:38:70:a3:c3:bf:02:3a:1b:d4:27:1e:
         bf:b3:9c:43:8f:e0:bf:b1:ff:ff:12:bd:52:77:a2:ba:af:82:
         21:6d:76:ee:e4:57:08:2f:45:fb:9c:e1:e1:2a:ce:b3:78:2b:
         c5:68:bd:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 21:57:16 2026 by rpki-client