Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a3133333a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a3133333a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          gV5F4jZEwGGZtuuWTmAEQXSGlLjhIfHyApYaLMV3m4U=
Subject key identifier:   40:C1:A8:44:CA:67:E6:80:1A:EA:80:7B:7F:1D:09:08:B9:03:96:2C
Certificate issuer:       /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial:       0A3A5E36EC65C2A91BCD3BF6BF5EAB30C94EDF43
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a3133333a3a2f34382d313238203d3e203532303235.roa
Signing time:             Thu 04 Jun 2026 16:32:55 +0000
ROA not before:           Thu 04 Jun 2026 16:27:55 +0000
ROA not after:            Thu 03 Jun 2027 16:32:55 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:133::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:3a:5e:36:ec:65:c2:a9:1b:cd:3b:f6:bf:5e:ab:30:c9:4e:df:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
        Validity
            Not Before: Jun  4 16:27:55 2026 GMT
            Not After : Jun  3 16:32:55 2027 GMT
        Subject: CN=40C1A844CA67E6801AEA807B7F1D0908B903962C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:b3:b2:bb:47:05:3d:a1:6b:f3:a2:a1:fb:60:
                    5e:81:17:b1:ef:ee:f9:7f:c1:22:d3:5c:4e:7c:56:
                    94:38:39:a4:6a:fc:1a:e6:dc:3e:eb:42:51:67:8a:
                    51:fe:16:b9:0f:15:ec:93:7f:47:db:2d:72:ce:21:
                    ae:5f:f7:5e:24:18:f2:e6:24:5a:32:2c:64:58:95:
                    2b:be:4b:f0:d7:ad:67:4a:be:80:45:8a:4c:0b:84:
                    ce:b0:b2:5b:c2:88:9b:06:df:99:4d:50:4a:8c:99:
                    57:ec:b2:30:a5:1a:49:68:6f:75:60:b3:b9:ba:00:
                    cc:fd:f7:6e:18:d0:d9:78:9f:89:18:20:07:0f:e7:
                    1a:fe:06:c3:1b:ca:3e:17:a9:1a:4c:e8:86:b8:ef:
                    b0:eb:4b:8c:4d:aa:5a:e1:16:26:75:13:50:b0:36:
                    af:7a:89:10:2d:fc:ad:e8:82:51:bd:71:b0:9d:db:
                    4e:9c:dc:d0:90:fc:5f:58:3e:4e:87:a4:76:59:a5:
                    45:3f:2c:63:34:33:4a:0f:16:fc:5f:ea:09:bc:08:
                    d3:ba:76:5c:fb:99:79:6d:09:e2:6e:63:f8:a1:c0:
                    8f:d7:2b:2d:47:51:16:c9:1d:28:42:50:5d:9c:9c:
                    e6:3a:79:31:80:8e:1f:2c:6e:98:e7:b2:8c:c7:f7:
                    e7:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:C1:A8:44:CA:67:E6:80:1A:EA:80:7B:7F:1D:09:08:B9:03:96:2C
            X509v3 Authority Key Identifier:
                keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a3133333a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:133::/48

    Signature Algorithm: sha256WithRSAEncryption
         50:45:78:b5:dc:62:69:01:3e:83:9f:d9:98:23:a8:ae:42:8b:
         3c:56:69:bf:08:d2:c2:ff:a7:f4:62:fe:ef:40:e9:60:84:22:
         e8:0a:88:1c:62:3e:db:f4:0a:f2:0e:8b:90:cd:d0:3e:66:e4:
         38:0c:51:06:3e:dd:96:ce:f7:aa:a3:86:a9:56:c7:09:ac:cd:
         cc:5d:97:9e:fa:74:a3:db:74:d9:79:5d:e1:2e:e0:ae:0c:df:
         db:a0:80:a4:a9:8b:8f:d8:d4:8b:91:17:74:fc:fe:2b:82:e5:
         1c:1b:7c:c0:55:82:a6:26:16:e8:a7:7b:78:a8:e2:5a:9f:a9:
         0e:f2:0f:6f:3e:1e:98:4c:c7:51:b7:41:98:da:d3:4a:60:1d:
         d7:4a:57:41:2f:c3:ed:c8:b8:04:80:23:ee:a1:4f:ad:9e:7b:
         63:bc:67:43:3b:f2:9c:a6:c2:cd:f2:fa:ec:26:52:87:d0:79:
         5e:a6:00:c8:0d:b8:a5:15:5c:ce:c8:4b:68:80:f3:50:a3:71:
         69:fd:5f:02:b3:56:1e:2e:73:e8:05:75:38:ef:ca:28:41:48:
         f3:bc:12:a9:ab:16:37:17:b0:49:d6:f8:41:29:51:99:29:cd:
         c5:b5:88:9e:f6:ed:57:5f:b6:2f:ae:91:52:ca:7e:15:c3:d1:
         c1:60:17:97
-----BEGIN CERTIFICATE-----
MIIFIjCCBAqgAwIBAgIUCjpeNuxlwqkbzTv2v16rMMlO30MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjYzODZGQUJFQTM5MjEwQjY2NUE2QTU1QUU1REE2NkJF
Njc0MTU5NzAeFw0yNjA2MDQxNjI3NTVaFw0yNzA2MDMxNjMyNTVaMDMxMTAvBgNV
BAMTKDQwQzFBODQ0Q0E2N0U2ODAxQUVBODA3QjdGMUQwOTA4QjkwMzk2MkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLs7K7RwU9oWvzoqH7YF6BF7Hv
7vl/wSLTXE58VpQ4OaRq/Brm3D7rQlFnilH+FrkPFeyTf0fbLXLOIa5f914kGPLm
JFoyLGRYlSu+S/DXrWdKvoBFikwLhM6wslvCiJsG35lNUEqMmVfssjClGklob3Vg
s7m6AMz9924Y0Nl4n4kYIAcP5xr+BsMbyj4XqRpM6Ia477DrS4xNqlrhFiZ1E1Cw
Nq96iRAt/K3oglG9cbCd206c3NCQ/F9YPk6HpHZZpUU/LGM0M0oPFvxf6gm8CNO6
dlz7mXltCeJuY/ihwI/XKy1HURbJHShCUF2cnOY6eTGAjh8sbpjnsozH9+dtAgMB
AAGjggIsMIICKDAdBgNVHQ4EFgQUQMGoRMpn5oAa6oB7fx0JCLkDliwwHwYDVR0j
BBgwFoAU9jhvq+o5IQtmWmpVrl2ma+Z0FZcwDgYDVR0PAQH/BAQDAgeAMG4GA1Ud
HwRnMGUwY6BhoF+GXXJzeW5jOi8vcnBraS0wMS5wZHhuZXQudWsvcmVwby9wYXJh
ZG94bmV0d29ya3MvOC9GNjM4NkZBQkVBMzkyMTBCNjY1QTZBNTVBRTVEQTY2QkU2
NzQxNTk3LmNybDCBkwYIKwYBBQUHAQEEgYYwgYMwgYAGCCsGAQUFBzAChnRyc3lu
YzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYz
ZTAxODU3NTVjOTFiZTNmOWQvNy9GNjM4NkZBQkVBMzkyMTBCNjY1QTZBNTVBRTVE
QTY2QkU2NzQxNTk3LmNlcjCBkQYIKwYBBQUHAQsEgYQwgYEwfwYIKwYBBQUHMAuG
c3JzeW5jOi8vcnBraS0wMS5wZHhuZXQudWsvcmVwby9wYXJhZG94bmV0d29ya3Mv
OC8zMjYxMzAzNTNhNjQ2NjYzMzQzYTMxMzMzMzNhM2EyZjM0MzgyZDMxMzIzODIw
M2QzZTIwMzUzMjMwMzIzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF38QBMzANBgkqhkiG9w0BAQsF
AAOCAQEAUEV4tdxiaQE+g5/ZmCOorkKLPFZpvwjSwv+n9GL+70DpYIQi6AqIHGI+
2/QK8g6LkM3QPmbkOAxRBj7dls73qqOGqVbHCazNzF2Xnvp0o9t02Xld4S7grgzf
26CApKmLj9jUi5EXdPz+K4LlHBt8wFWCpiYW6Kd7eKjiWp+pDvIPbz4emEzHUbdB
mNrTSmAd10pXQS/D7ci4BIAj7qFPrZ57Y7xnQzvynKbCzfL67CZSh9B5XqYAyA24
pRVczshLaIDzUKNxaf1fArNWHi5z6AV1OO/KKEFI87wSqasWNxewSdb4QSlRmSnN
xbWInvbtV1+2L66RUsp+FcPRwWAXlw==
-----END CERTIFICATE-----
Generated at Thu Jun 11 21:56:41 2026 by rpki-client