Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a313432343a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a313432343a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          EWEMO4DuKvoNnzPMNAaYnZMCFw4Fja8zbTdUu9g8byY=
Subject key identifier:   0C:30:AC:7F:03:BC:72:8B:F2:E0:7B:6E:16:49:2A:77:2E:BF:00:A5
Certificate issuer:       /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial:       73208DFE0D6C49D2FC68AE2C7C147261C7CEBF9C
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a313432343a3a2f34382d313238203d3e203532303235.roa
Signing time:             Thu 04 Jun 2026 16:33:00 +0000
ROA not before:           Thu 04 Jun 2026 16:28:00 +0000
ROA not after:            Thu 03 Jun 2027 16:33:00 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:1424::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:20:8d:fe:0d:6c:49:d2:fc:68:ae:2c:7c:14:72:61:c7:ce:bf:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
        Validity
            Not Before: Jun  4 16:28:00 2026 GMT
            Not After : Jun  3 16:33:00 2027 GMT
        Subject: CN=0C30AC7F03BC728BF2E07B6E16492A772EBF00A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:0f:9d:90:d1:f5:8c:4e:9c:a1:c6:c1:b9:ea:
                    1b:5d:06:8d:82:d5:66:c8:c0:aa:d2:49:1c:78:e4:
                    ef:2e:91:ae:83:5b:a6:6f:39:bc:a9:72:7c:99:5d:
                    ce:d8:ca:cb:dd:24:59:87:38:0b:9c:db:88:7b:78:
                    61:7f:29:bd:48:89:18:54:5a:82:17:5a:99:76:63:
                    d0:2d:49:92:8e:46:92:fb:c0:3f:36:84:b1:c6:1e:
                    40:0c:46:51:1a:19:2e:af:1d:2a:45:a6:e9:50:c8:
                    10:f8:17:fc:0f:c6:bc:28:9d:85:99:3f:f9:27:68:
                    eb:81:fb:29:00:07:0b:ec:32:ce:00:27:33:c6:2d:
                    ea:6b:38:0d:77:9d:b8:8a:87:ab:71:8a:3f:43:e8:
                    44:88:c8:2b:c3:43:db:41:f6:34:83:a1:34:f2:8c:
                    5c:8b:6e:85:77:63:f0:fb:4c:b4:5c:0e:6c:e4:c6:
                    2e:ed:15:a8:1f:5a:53:a2:44:c3:3d:9f:f1:32:b7:
                    f2:7b:4c:3c:db:f7:4a:e4:87:72:5a:77:df:65:12:
                    1a:1f:37:51:b1:38:3b:d7:84:2f:4e:93:94:77:67:
                    a3:57:7e:4d:2d:b7:dc:73:b2:d1:2c:0c:0f:fa:4c:
                    e7:e6:48:15:1a:0b:14:e4:db:56:2e:57:3e:46:47:
                    77:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:30:AC:7F:03:BC:72:8B:F2:E0:7B:6E:16:49:2A:77:2E:BF:00:A5
            X509v3 Authority Key Identifier:
                keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a313432343a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:1424::/48

    Signature Algorithm: sha256WithRSAEncryption
         2e:be:2d:1f:b4:d6:36:ac:56:7b:b5:e6:2a:d8:f9:83:c7:24:
         b1:d8:4e:d5:50:d3:75:60:f5:5e:38:82:d7:c0:f9:f8:0c:3a:
         fb:93:6f:cf:ce:68:7d:e8:b2:59:1e:a7:12:e0:1d:b3:d9:96:
         32:ce:90:a7:51:29:d6:1a:f9:e5:ce:6a:13:90:b6:16:0a:c6:
         a0:10:48:aa:36:19:ca:32:45:7c:c6:b5:ec:30:4b:87:a3:0a:
         3c:d7:b8:db:5c:ec:1b:66:51:a7:60:d0:3b:68:f2:3d:9e:f8:
         d5:e1:b0:e6:77:16:3f:78:6e:60:5b:7e:ad:1a:f0:e7:3b:15:
         d3:2f:54:8e:b5:c6:07:e9:67:78:07:25:86:f5:20:4a:f3:d1:
         53:2d:91:db:b9:68:1e:14:14:89:77:f7:2a:a3:75:ca:bf:76:
         4e:44:f9:c2:b9:99:b6:ff:82:11:53:db:9d:93:77:8e:78:f7:
         75:c1:3b:73:04:15:d9:1f:35:39:1c:ec:07:a7:4a:8a:a3:77:
         74:15:18:21:5a:ae:b7:9e:2f:c8:09:a7:c8:4a:1e:28:d5:48:
         6b:5b:b9:93:ff:ca:8d:34:52:2e:63:d2:ed:8f:e4:6d:73:aa:
         a0:ed:2c:ec:91:d7:2e:f0:7a:bd:dc:8e:75:03:81:d5:7e:32:
         04:44:f6:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 21:56:34 2026 by rpki-client