Route Origin Authorization

$ rpki-client -vvvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a313433313a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a313433313a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          oy42nvg/RfjFTyDYulLVlzQVGAS6GfDekkrRx1Y5Ayg=
Subject key identifier:   6C:77:E8:76:52:0D:85:92:26:D8:DC:33:76:9E:50:76:8D:5D:F8:4F
Certificate issuer:       /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial:       16DCEF7B67276C32D4035F00CE3550727CB2F645
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a313433313a3a2f34382d313238203d3e203532303235.roa
Signing time:             Sat 15 Aug 2026 23:22:01 +0000
ROA not before:           Sat 15 Aug 2026 23:17:01 +0000
ROA not after:            Sat 14 Aug 2027 23:22:01 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:1431::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Aug 2026 22:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:dc:ef:7b:67:27:6c:32:d4:03:5f:00:ce:35:50:72:7c:b2:f6:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
        Validity
            Not Before: Aug 15 23:17:01 2026 GMT
            Not After : Aug 14 23:22:01 2027 GMT
        Subject: CN=6C77E876520D859226D8DC33769E50768D5DF84F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:02:47:d5:66:be:4f:e5:0f:b3:69:3e:ec:74:
                    15:c1:0f:bf:90:3d:2e:21:27:d9:47:fc:14:a6:a1:
                    89:33:ed:23:81:28:fd:d7:9c:e4:09:78:9a:b9:58:
                    c6:fd:26:35:9f:d3:62:71:e2:b2:40:cc:bc:30:f5:
                    b1:ff:3c:4c:6f:df:c9:c9:6d:16:bb:42:63:f6:79:
                    6e:9b:25:93:93:9f:f6:fd:8d:b2:1d:71:33:c3:ab:
                    2b:d5:3e:b8:05:b1:92:52:a0:76:05:13:ae:47:da:
                    34:78:e2:52:82:3f:ef:65:74:db:fb:89:2c:5d:08:
                    85:70:25:01:87:db:92:de:29:c0:65:86:3d:2d:f8:
                    d1:ae:a1:f1:9e:f3:f8:01:89:33:34:61:ba:fe:b5:
                    b6:81:32:06:23:ce:8e:21:b1:b2:7e:09:96:27:78:
                    31:0d:99:cf:4a:ef:0c:5e:48:6c:fb:c9:16:ae:92:
                    12:d9:8e:36:10:cf:df:c8:4d:22:99:b3:4e:3c:5d:
                    43:c5:bc:06:40:94:7d:8b:c4:94:5f:96:02:e4:30:
                    7a:a9:0f:26:60:7b:60:d4:02:d5:b8:81:72:f6:36:
                    bd:f7:2c:4b:7f:5e:fc:74:17:f3:52:0e:a2:f0:44:
                    9e:aa:41:a0:3d:0a:de:13:44:41:65:9d:47:45:be:
                    26:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:77:E8:76:52:0D:85:92:26:D8:DC:33:76:9E:50:76:8D:5D:F8:4F
            X509v3 Authority Key Identifier:
                keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a313433313a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:1431::/48

    Signature Algorithm: sha256WithRSAEncryption
         2f:1c:53:45:42:dd:d4:2e:48:06:42:2c:ad:91:8c:be:bb:d9:
         04:4c:21:5e:7b:26:d4:3f:5a:35:e9:18:09:5c:2d:0a:83:c5:
         30:44:0a:cb:2d:fa:dd:3e:32:14:4d:ee:29:80:92:7e:4b:ad:
         98:be:f4:bc:29:a2:40:c6:35:32:74:c6:66:65:d3:98:b6:9b:
         f7:0e:d5:4d:ff:a7:0c:9b:30:2c:4e:4c:81:21:bb:37:da:be:
         09:1f:f4:34:21:f3:4c:de:14:f0:63:f3:66:f3:42:bb:4a:d3:
         eb:bd:d2:28:57:ac:69:4c:69:ae:cf:e7:83:32:b8:c8:ab:f9:
         79:d0:6d:21:ee:67:54:80:2d:67:18:a4:fb:ca:2a:af:af:c2:
         f8:0a:d4:21:dc:be:2f:f7:48:df:78:18:a9:92:40:b9:74:e1:
         03:08:fd:76:f6:96:f0:f8:86:d5:ce:67:00:a1:e4:d0:92:4f:
         5a:05:2c:96:b0:f2:28:fd:bd:07:80:81:48:7c:34:d0:94:6c:
         8a:24:18:0b:20:8e:20:84:c0:13:73:4c:d1:33:74:ce:50:fa:
         4a:c9:bd:03:d1:a4:69:32:cd:cb:75:7d:6c:4c:30:3f:d9:96:
         5b:4c:a4:dd:e4:de:1a:41:01:e5:e0:26:90:ec:20:b8:9c:2b:
         1e:08:bf:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 08:22:27 2026 by rpki-client