Route Origin Authorization

$ rpki-client -vvvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a313431353a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a313431353a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          cmGUgFlMb2MwgQNZsDJUPBYtzhYUcV7Mpri0RYhZBzo=
Subject key identifier:   3A:C9:09:8B:F2:18:50:B5:36:5C:F4:7C:10:1C:0E:A1:AC:0C:EF:0D
Certificate issuer:       /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial:       6596B83B433211F99E73ACC021D9921B9E83E329
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a313431353a3a2f34382d313238203d3e203532303235.roa
Signing time:             Sat 15 Aug 2026 23:21:55 +0000
ROA not before:           Sat 15 Aug 2026 23:16:55 +0000
ROA not after:            Sat 14 Aug 2027 23:21:55 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:1415::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Aug 2026 23:30:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:96:b8:3b:43:32:11:f9:9e:73:ac:c0:21:d9:92:1b:9e:83:e3:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
        Validity
            Not Before: Aug 15 23:16:55 2026 GMT
            Not After : Aug 14 23:21:55 2027 GMT
        Subject: CN=3AC9098BF21850B5365CF47C101C0EA1AC0CEF0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:d8:aa:dd:10:d3:17:6c:f6:46:8b:7b:3a:a7:
                    20:bb:aa:f1:71:1d:b9:30:06:72:36:8f:86:71:1b:
                    4f:b6:72:16:fc:ff:53:21:f8:c5:fb:23:d5:e5:63:
                    13:f0:58:00:22:69:8c:1c:12:69:ba:c1:6c:e4:65:
                    cb:37:51:05:f4:1f:3c:61:8e:da:3c:b0:6c:2c:ca:
                    c1:1f:0c:3c:a5:97:c2:b7:bb:ef:ca:aa:f5:50:ea:
                    8c:bf:54:2e:72:c5:c6:f4:8d:a5:86:bc:e0:80:83:
                    1b:6d:12:72:9f:ec:bb:4f:5d:72:b5:d0:82:2c:0e:
                    93:5d:e9:20:c8:36:e6:50:41:1b:65:ae:15:9c:4a:
                    b6:26:7e:20:59:c7:8d:f7:32:e1:8e:04:c3:a5:be:
                    a8:a9:7c:3e:d7:78:37:d4:3a:b4:e6:a9:5d:84:1a:
                    32:2e:38:a1:1e:d1:29:ef:c4:84:b9:17:25:ba:7a:
                    ca:17:07:39:f6:40:8e:75:eb:ea:b5:31:39:66:c8:
                    cb:92:ed:f1:1c:8f:74:8d:ad:fb:e6:ad:f2:9c:d7:
                    25:48:92:b7:7a:ae:57:43:42:34:a4:d9:3d:e6:ac:
                    46:ee:3d:3f:a6:98:99:48:04:c9:f5:c6:6c:f7:e8:
                    f3:69:cc:05:9d:f6:43:94:9d:37:03:93:46:fb:b9:
                    a2:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:C9:09:8B:F2:18:50:B5:36:5C:F4:7C:10:1C:0E:A1:AC:0C:EF:0D
            X509v3 Authority Key Identifier:
                keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a313431353a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:1415::/48

    Signature Algorithm: sha256WithRSAEncryption
         5a:cf:63:eb:e3:12:ac:62:9c:cc:1a:23:08:bb:1f:bc:27:fa:
         de:32:ff:dd:9a:ff:01:90:5e:fe:93:e6:97:4c:91:e0:f4:0c:
         eb:e0:ae:5d:8e:6c:df:f6:f4:c2:99:01:7e:b7:ad:ab:d1:a0:
         db:18:ff:5b:0c:e9:33:cc:25:bd:14:74:91:70:ad:18:ad:96:
         c6:99:72:bd:b1:72:b4:40:de:3f:f0:0d:f4:6f:6e:cc:1b:8b:
         71:25:31:0a:b7:65:8f:c3:cb:38:8c:70:5f:29:ba:d1:f0:d8:
         24:aa:2c:17:fb:a3:00:b2:f1:66:22:c1:ab:c7:54:c3:ac:c4:
         3a:c5:0e:30:53:cc:af:6b:4e:e7:fc:ce:84:29:3a:da:b2:bf:
         d5:7b:f7:b5:b9:e4:eb:9c:ae:41:5e:34:17:ae:a8:58:6a:16:
         4c:3d:d4:c0:b4:be:62:97:2f:08:f4:cb:d4:b1:99:17:41:67:
         ff:40:33:09:f6:6b:7c:3c:fa:7d:99:b1:4b:33:c1:32:62:26:
         65:e5:d6:12:8d:06:f9:dc:d2:b3:e9:50:2d:7e:fc:81:c9:b0:
         3d:2d:9a:e2:ca:4d:ea:7c:1c:a2:5a:6d:0b:78:49:b4:bb:81:
         5c:00:d9:61:45:d3:ef:04:fc:e9:01:b8:f6:38:56:95:9f:71:
         0a:37:45:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 10:37:23 2026 by rpki-client