Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a313531373a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a313531373a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          eDHE5fGCRXZGAwYEsP1+GI9hallJs+1rmDsjBfSINGU=
Subject key identifier:   98:DA:37:A8:0E:24:5D:B2:E0:BB:98:A1:38:72:15:A9:94:FC:61:04
Certificate issuer:       /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial:       440CBA8441A0B3DC2904B28B3A6DB04FCDA53A0E
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a313531373a3a2f34382d313238203d3e203532303235.roa
Signing time:             Thu 04 Jun 2026 16:33:05 +0000
ROA not before:           Thu 04 Jun 2026 16:28:05 +0000
ROA not after:            Thu 03 Jun 2027 16:33:05 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:1517::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:0c:ba:84:41:a0:b3:dc:29:04:b2:8b:3a:6d:b0:4f:cd:a5:3a:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
        Validity
            Not Before: Jun  4 16:28:05 2026 GMT
            Not After : Jun  3 16:33:05 2027 GMT
        Subject: CN=98DA37A80E245DB2E0BB98A1387215A994FC6104
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:99:43:4f:9b:bc:4c:de:3f:b9:23:8a:de:69:
                    e7:c6:7c:a0:b9:7d:9f:48:4d:f1:53:31:5e:a0:28:
                    c7:df:08:97:c8:6f:a5:38:9b:a6:a8:84:49:46:06:
                    f6:1c:5d:89:e7:41:fd:46:ca:a6:81:56:27:b2:06:
                    a4:a9:a6:73:8b:28:c4:6e:2d:21:9a:9c:f6:fa:b1:
                    59:7b:73:c7:ce:86:f0:82:2a:e3:6e:ec:04:bb:88:
                    9e:e1:b1:ae:d7:ca:6e:77:0d:9c:65:83:a7:76:a2:
                    d4:45:43:19:58:ad:00:43:14:aa:4e:8a:cb:b5:7d:
                    98:21:3a:a3:ee:ff:ab:c7:fa:38:f3:c0:df:d6:c6:
                    f7:d4:02:db:58:cc:6f:11:19:14:74:5c:b9:0d:0f:
                    32:d2:21:b7:1c:3f:8d:5e:51:c4:b4:c2:33:d4:b6:
                    af:2a:9e:84:fc:a4:8d:61:85:b6:ca:42:69:92:3a:
                    d5:34:c6:3d:87:f5:79:72:a8:fa:17:48:d5:48:b4:
                    1a:af:f5:75:88:58:67:e5:cb:11:c7:d1:21:dd:77:
                    9b:94:8c:cb:92:87:a0:70:54:a6:32:94:3f:94:d7:
                    a9:7a:5a:eb:25:c6:29:9f:79:5f:38:00:63:a0:da:
                    3f:c9:04:04:88:05:18:7d:ba:05:a2:6e:ba:0d:c3:
                    a1:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:DA:37:A8:0E:24:5D:B2:E0:BB:98:A1:38:72:15:A9:94:FC:61:04
            X509v3 Authority Key Identifier:
                keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a313531373a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:1517::/48

    Signature Algorithm: sha256WithRSAEncryption
         5a:92:d7:d7:16:fb:93:48:92:03:ab:2d:18:07:06:72:be:60:
         cc:d7:1f:a4:b1:83:8e:a5:18:a9:22:9f:a3:ce:6c:48:3b:09:
         a5:cc:58:63:87:02:76:83:84:99:d1:48:b5:81:b1:d0:97:b9:
         5c:8d:a6:da:ab:37:d0:b5:40:cb:1d:b5:7a:84:c2:06:8e:50:
         10:ce:45:ae:b4:68:08:8d:99:0a:d8:62:4c:3a:79:3d:0b:91:
         c8:f8:c4:03:29:61:bb:60:15:51:59:f7:0e:c6:d1:89:43:fe:
         75:11:ab:82:4a:be:69:fb:91:3e:a6:a5:88:11:de:4b:cc:0c:
         8f:08:42:06:ec:3a:b1:89:fa:99:08:bf:9f:2b:de:d9:b4:1f:
         bb:aa:a4:a6:47:83:85:8d:40:18:d7:e0:1e:88:fe:c8:e8:1a:
         87:cc:35:d6:39:df:b8:fe:c2:e9:f1:84:4d:e0:92:c4:1f:42:
         35:1d:82:bc:b1:16:d0:85:3f:19:ba:17:1b:50:ac:87:96:e4:
         80:d1:7c:30:78:9c:3b:71:d9:f0:be:6e:d6:d6:7d:d7:c5:c5:
         15:33:bf:14:4e:5d:ea:e8:76:2f:df:73:f8:a7:44:a7:6f:27:
         8b:7d:09:1e:46:88:13:5e:c8:44:80:c2:e5:ec:f4:84:22:a8:
         8d:89:e6:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 21:56:39 2026 by rpki-client