Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a313431353a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a313431353a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          mWw+2L1CncYu+ZhvPiGV7jf97stPEQSLE2H3VrTzzxw=
Subject key identifier:   B1:83:95:7A:86:B6:33:56:F2:2D:2E:2C:8B:CE:56:B3:58:E3:F5:74
Certificate issuer:       /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial:       14708925B4885C34DD895C36F18042D0F454FF32
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a313431353a3a2f34382d313238203d3e203532303235.roa
Signing time:             Thu 04 Jun 2026 16:32:40 +0000
ROA not before:           Thu 04 Jun 2026 16:27:40 +0000
ROA not after:            Thu 03 Jun 2027 16:32:40 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:1415::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:70:89:25:b4:88:5c:34:dd:89:5c:36:f1:80:42:d0:f4:54:ff:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
        Validity
            Not Before: Jun  4 16:27:40 2026 GMT
            Not After : Jun  3 16:32:40 2027 GMT
        Subject: CN=B183957A86B63356F22D2E2C8BCE56B358E3F574
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:db:44:22:9f:22:e1:d3:14:70:6b:49:48:eb:
                    2f:d8:1a:6a:98:26:24:35:57:8e:72:ae:f2:eb:ba:
                    58:16:f0:ef:91:9c:67:4c:73:8d:9c:50:41:aa:cc:
                    79:89:43:aa:95:a0:35:10:bf:a0:39:d3:d6:5c:e2:
                    ab:c4:f1:b2:cb:05:1c:89:66:20:e4:9a:35:ae:d3:
                    35:d2:d3:df:aa:a8:3a:09:a8:b8:8a:ba:39:68:99:
                    19:da:0a:b6:ce:8c:77:30:21:62:e2:c2:65:cc:e2:
                    e1:c9:2d:a4:a5:02:bb:52:f4:c6:a0:40:bf:67:74:
                    32:7d:6b:4e:22:18:00:df:32:05:b6:1d:f6:6c:cb:
                    a9:e7:39:29:ea:4b:4a:3b:ec:eb:e6:2e:7b:81:46:
                    c7:d6:12:8e:de:05:34:8a:33:a7:7d:e5:c4:bf:e8:
                    d6:5c:85:2e:ac:6d:17:55:bb:e0:29:c6:6b:c1:e0:
                    d2:f4:9b:b2:ae:b7:e4:47:9a:f9:73:08:65:cf:36:
                    57:90:6a:32:34:72:04:26:0a:ea:4c:3c:da:67:80:
                    4f:55:60:cc:26:f2:d5:b3:2d:81:f5:2b:82:db:7c:
                    ce:2b:31:3c:5b:ae:d1:9d:ca:21:3c:4d:ad:b2:1f:
                    e6:48:9e:1e:08:76:72:ee:8a:78:79:b6:95:33:01:
                    b0:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:83:95:7A:86:B6:33:56:F2:2D:2E:2C:8B:CE:56:B3:58:E3:F5:74
            X509v3 Authority Key Identifier:
                keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a313431353a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:1415::/48

    Signature Algorithm: sha256WithRSAEncryption
         35:33:43:2a:dd:5e:a4:3c:a8:80:06:e5:1e:41:35:12:5c:c2:
         43:c9:f9:bc:25:5a:a3:6e:49:c7:93:a4:c5:87:fe:22:a8:9b:
         ae:79:70:db:d1:7f:89:98:bd:04:98:d6:f3:75:a0:57:8d:10:
         32:be:00:93:ae:88:eb:09:db:f1:70:75:80:7f:f0:bf:19:bf:
         5e:91:4a:48:0d:45:23:7d:a3:be:23:71:39:8f:69:d8:77:eb:
         b0:ba:01:61:20:4d:f2:21:ef:d7:4e:a3:cf:c5:7e:fc:64:60:
         1d:68:65:17:35:83:15:4d:fd:a9:62:64:00:db:af:1e:f4:c8:
         fa:6c:d3:6c:4d:0f:8a:9f:f0:0d:a2:b4:c5:77:d9:8f:d8:5d:
         a4:6a:55:ae:d6:43:03:6e:56:d0:3f:32:7c:6a:99:e1:2f:22:
         34:3f:b1:38:72:49:44:73:40:7f:75:4f:30:00:8b:cd:2f:9b:
         ff:66:e5:12:4e:d5:98:64:c2:c4:ff:4a:92:2e:83:b2:d0:97:
         46:be:79:29:af:70:81:f1:46:c6:e1:18:00:3d:49:bf:18:cd:
         eb:01:61:9b:64:1b:ac:6f:dc:73:79:e5:59:7e:07:cd:fd:c8:
         fa:08:dd:1c:7e:de:22:05:79:87:b0:82:fb:06:a3:5a:02:ee:
         a4:f5:26:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 21:56:35 2026 by rpki-client