Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a313333663a3a2f34382d3438203d3e203532303235.roa
File:                     326130353a646663343a313333663a3a2f34382d3438203d3e203532303235.roa (raw, json)
Hash identifier:          7U1JvxvETQVXrOpqTR0CIi4Kv+5lpRVS0TXmMjzzZnA=
Subject key identifier:   A5:A3:7C:2D:0C:2F:E7:5A:11:A5:F9:82:41:6D:64:8F:CE:81:11:8F
Certificate issuer:       /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial:       2FB6BADB813B066B8809811FA3E1ABE7271BABD3
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a313333663a3a2f34382d3438203d3e203532303235.roa
Signing time:             Thu 04 Jun 2026 16:32:54 +0000
ROA not before:           Thu 04 Jun 2026 16:27:54 +0000
ROA not after:            Thu 03 Jun 2027 16:32:54 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:133f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:b6:ba:db:81:3b:06:6b:88:09:81:1f:a3:e1:ab:e7:27:1b:ab:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
        Validity
            Not Before: Jun  4 16:27:54 2026 GMT
            Not After : Jun  3 16:32:54 2027 GMT
        Subject: CN=A5A37C2D0C2FE75A11A5F982416D648FCE81118F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:d0:a8:63:2b:41:9b:78:77:4e:a7:26:f1:fa:
                    8d:a4:b2:0f:71:1b:30:68:e6:26:39:23:84:13:15:
                    3f:5f:b5:f4:9c:46:38:b7:21:98:8e:c4:6f:ce:be:
                    83:76:b8:78:a2:c0:d5:40:63:c1:80:55:0a:f2:2c:
                    aa:08:c0:68:de:ef:69:bf:4a:30:f0:b8:ef:d2:20:
                    b3:82:99:37:20:a5:0d:ac:40:0f:c4:57:09:47:ee:
                    02:92:c0:b1:df:83:65:49:f1:5c:75:4f:9b:6f:1b:
                    12:43:de:80:7f:16:1a:c0:84:b8:e6:3d:0b:62:f6:
                    87:09:b1:b2:44:b8:9d:55:c2:75:f0:0d:51:cd:dd:
                    45:f6:6a:67:11:15:cf:bd:cc:8c:0f:1f:47:41:57:
                    c3:4d:eb:bf:7a:f3:4b:b1:50:69:63:e9:82:11:7a:
                    95:31:ac:65:01:20:93:9e:18:b6:91:a5:bc:30:71:
                    d8:d6:fe:ad:ee:d9:2c:a7:85:39:ad:63:10:2e:a9:
                    50:75:cb:c1:39:91:db:2c:b9:b1:57:40:d9:f2:8c:
                    d2:40:7a:16:5f:99:5e:6b:b4:e3:93:fa:9e:aa:c7:
                    e3:67:3a:bc:3c:31:c2:c3:3a:67:ee:af:fe:82:81:
                    0e:c5:ef:56:14:ec:79:8b:4e:2d:52:c7:87:3e:68:
                    8d:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:A3:7C:2D:0C:2F:E7:5A:11:A5:F9:82:41:6D:64:8F:CE:81:11:8F
            X509v3 Authority Key Identifier:
                keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a313333663a3a2f34382d3438203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:133f::/48

    Signature Algorithm: sha256WithRSAEncryption
         06:24:33:ac:a3:51:f8:dc:a2:d5:31:35:0d:72:6d:1f:4e:18:
         f8:32:3b:b1:b0:88:b8:42:2c:4d:84:20:d1:1f:19:e2:fa:a6:
         ac:ba:5d:ab:58:5d:87:e7:e4:67:b2:d6:77:9b:29:91:05:3e:
         0c:72:f3:1f:2e:df:5d:84:62:8e:b9:d0:bb:26:4a:6c:8a:56:
         5a:e1:9d:76:c7:0e:f0:fc:e4:19:3f:7b:a2:0d:f9:52:a6:67:
         2f:65:fa:e2:40:68:ee:c6:89:1f:86:26:0c:6c:3f:7d:2a:56:
         33:54:0e:5d:86:97:dc:42:e5:d5:dd:9b:c9:bf:57:58:f9:a0:
         da:be:1a:8e:cf:af:31:92:ba:79:89:26:b0:f3:4e:8f:74:54:
         07:25:35:5c:55:18:55:37:b9:99:bd:2e:76:ff:8a:28:49:7b:
         ac:8d:ad:c6:9f:3a:33:97:9a:59:9a:07:66:69:d4:a2:55:fc:
         ac:77:99:11:c6:5c:ef:e5:57:96:97:6c:6d:08:32:9e:be:b4:
         33:79:78:dd:24:f7:19:6e:3e:18:7e:db:d1:0f:c6:aa:a3:43:
         bf:57:00:aa:28:d6:0a:2e:52:9f:63:07:22:fe:82:49:32:3f:
         0c:52:44:e1:01:ee:58:a4:72:7a:39:65:24:5c:c9:2a:31:b7:
         9d:db:8a:e1
-----BEGIN CERTIFICATE-----
MIIFIjCCBAqgAwIBAgIUL7a624E7BmuICYEfo+Gr5ycbq9MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjYzODZGQUJFQTM5MjEwQjY2NUE2QTU1QUU1REE2NkJF
Njc0MTU5NzAeFw0yNjA2MDQxNjI3NTRaFw0yNzA2MDMxNjMyNTRaMDMxMTAvBgNV
BAMTKEE1QTM3QzJEMEMyRkU3NUExMUE1Rjk4MjQxNkQ2NDhGQ0U4MTExOEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD0KhjK0GbeHdOpybx+o2ksg9x
GzBo5iY5I4QTFT9ftfScRji3IZiOxG/OvoN2uHiiwNVAY8GAVQryLKoIwGje72m/
SjDwuO/SILOCmTcgpQ2sQA/EVwlH7gKSwLHfg2VJ8Vx1T5tvGxJD3oB/FhrAhLjm
PQti9ocJsbJEuJ1VwnXwDVHN3UX2amcRFc+9zIwPH0dBV8NN679680uxUGlj6YIR
epUxrGUBIJOeGLaRpbwwcdjW/q3u2SynhTmtYxAuqVB1y8E5kdssubFXQNnyjNJA
ehZfmV5rtOOT+p6qx+NnOrw8McLDOmfur/6CgQ7F71YU7HmLTi1Sx4c+aI2lAgMB
AAGjggIsMIICKDAdBgNVHQ4EFgQUpaN8LQwv51oRpfmCQW1kj86BEY8wHwYDVR0j
BBgwFoAU9jhvq+o5IQtmWmpVrl2ma+Z0FZcwDgYDVR0PAQH/BAQDAgeAMG4GA1Ud
HwRnMGUwY6BhoF+GXXJzeW5jOi8vcnBraS0wMS5wZHhuZXQudWsvcmVwby9wYXJh
ZG94bmV0d29ya3MvOC9GNjM4NkZBQkVBMzkyMTBCNjY1QTZBNTVBRTVEQTY2QkU2
NzQxNTk3LmNybDCBkwYIKwYBBQUHAQEEgYYwgYMwgYAGCCsGAQUFBzAChnRyc3lu
YzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYz
ZTAxODU3NTVjOTFiZTNmOWQvNy9GNjM4NkZBQkVBMzkyMTBCNjY1QTZBNTVBRTVE
QTY2QkU2NzQxNTk3LmNlcjCBkQYIKwYBBQUHAQsEgYQwgYEwfwYIKwYBBQUHMAuG
c3JzeW5jOi8vcnBraS0wMS5wZHhuZXQudWsvcmVwby9wYXJhZG94bmV0d29ya3Mv
OC8zMjYxMzAzNTNhNjQ2NjYzMzQzYTMxMzMzMzY2M2EzYTJmMzQzODJkMzQzODIw
M2QzZTIwMzUzMjMwMzIzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF38QTPzANBgkqhkiG9w0BAQsF
AAOCAQEABiQzrKNR+Nyi1TE1DXJtH04Y+DI7sbCIuEIsTYQg0R8Z4vqmrLpdq1hd
h+fkZ7LWd5spkQU+DHLzHy7fXYRijrnQuyZKbIpWWuGddscO8PzkGT97og35UqZn
L2X64kBo7saJH4YmDGw/fSpWM1QOXYaX3ELl1d2byb9XWPmg2r4ajs+vMZK6eYkm
sPNOj3RUByU1XFUYVTe5mb0udv+KKEl7rI2txp86M5eaWZoHZmnUolX8rHeZEcZc
7+VXlpdsbQgynr60M3l43ST3GW4+GH7b0Q/GqqNDv1cAqijWCi5Sn2MHIv6CSTI/
DFJE4QHuWKRyejllJFzJKjG3nduK4Q==
-----END CERTIFICATE-----
Generated at Thu Jun 11 21:56:39 2026 by rpki-client