Route Origin Authorization

$ rpki-client -vvvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a313531373a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a313531373a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          a0XWSzOr6iDfF7+AFXu8VWdwONenG1/jcsFfrYiH0JQ=
Subject key identifier:   9F:3A:E8:74:31:9E:EA:C0:2A:A5:34:CE:BF:F2:6F:10:6E:75:8A:09
Certificate issuer:       /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial:       5D6BF3EF5EC4ED9C8D337A9BC39476B1E140530E
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a313531373a3a2f34382d313238203d3e203532303235.roa
Signing time:             Sat 15 Aug 2026 23:21:04 +0000
ROA not before:           Sat 15 Aug 2026 23:16:04 +0000
ROA not after:            Sat 14 Aug 2027 23:21:04 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:1517::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Aug 2026 23:30:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:6b:f3:ef:5e:c4:ed:9c:8d:33:7a:9b:c3:94:76:b1:e1:40:53:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
        Validity
            Not Before: Aug 15 23:16:04 2026 GMT
            Not After : Aug 14 23:21:04 2027 GMT
        Subject: CN=9F3AE874319EEAC02AA534CEBFF26F106E758A09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:57:6a:4c:aa:49:95:7f:d4:34:81:e7:41:63:
                    1f:1f:70:e6:4d:5a:66:69:b7:50:e6:7f:ba:37:f9:
                    45:20:bf:66:74:d8:b7:0b:7a:10:8a:28:7f:37:c6:
                    4a:a8:a0:35:a4:6e:0b:7f:a9:d9:c8:e3:40:bf:39:
                    fb:ef:fd:1b:da:42:37:f4:18:74:53:13:d4:4c:e5:
                    9c:d9:f2:ba:1a:c0:b2:dc:14:b3:79:bd:9d:10:8b:
                    a2:23:6f:af:1c:6e:0b:58:95:5c:ef:b4:7a:f0:0a:
                    0c:56:62:32:65:e5:c8:21:4c:5c:77:9c:f9:24:1f:
                    66:6e:0d:70:f1:d8:be:3a:98:5f:69:3e:a1:61:4d:
                    4f:b3:8b:00:0b:18:42:04:87:9c:20:96:c0:74:0c:
                    4a:a4:0a:5e:2b:7e:e5:96:cb:bf:cd:ff:76:65:9c:
                    ed:1f:7d:fb:87:7a:78:c8:05:ef:45:2b:a3:fc:4a:
                    32:54:9a:6a:f2:ea:8a:7a:1a:c3:86:af:99:89:6e:
                    bd:0a:59:59:53:34:04:ad:85:a3:f9:44:fe:56:da:
                    58:a4:cf:9f:91:81:98:cc:ab:a0:22:a0:c5:a6:3e:
                    69:bf:e1:75:df:c9:8a:df:20:28:4f:88:a8:56:66:
                    79:82:32:59:f1:f7:df:41:8e:01:3c:74:78:05:1c:
                    6f:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:3A:E8:74:31:9E:EA:C0:2A:A5:34:CE:BF:F2:6F:10:6E:75:8A:09
            X509v3 Authority Key Identifier:
                keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a313531373a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:1517::/48

    Signature Algorithm: sha256WithRSAEncryption
         46:f9:dd:94:14:99:0e:19:af:ae:56:02:90:46:48:1d:3a:dc:
         d3:1c:89:a5:65:ad:7d:b4:07:5d:ef:ea:f6:15:ca:a6:b0:1e:
         a3:b6:10:32:ee:da:1e:56:e8:d2:36:70:b4:61:f4:52:cb:b5:
         4b:a7:3b:64:af:26:06:1b:03:5e:85:a2:dc:a4:f3:a9:7f:e5:
         73:df:8f:b3:5e:26:09:ae:96:7a:9f:7a:4f:3e:a8:a7:ee:90:
         87:16:86:83:7b:ec:d9:1c:8e:be:ca:51:db:a7:84:8f:25:4c:
         15:7c:33:18:7f:22:1a:bd:f3:1a:11:34:39:af:c2:5b:74:e8:
         48:89:a0:62:b1:43:de:51:fd:14:1c:e0:0e:b5:5a:e5:89:83:
         e5:dc:12:b7:e9:92:d5:e9:51:2d:b4:60:c6:9e:42:75:3d:49:
         fb:20:b8:d6:02:a6:61:47:04:44:59:ac:35:2c:69:a5:f8:c8:
         59:26:3f:4c:aa:3c:5d:bc:ac:f0:ad:1b:8e:2d:9f:c3:3a:db:
         30:da:a3:fb:d8:4f:9b:f4:47:22:e4:cc:07:70:4d:22:16:82:
         bf:86:75:47:82:dd:a3:78:2c:51:aa:fe:97:21:9c:e5:6a:24:
         f0:a3:1f:f0:3a:6c:4d:96:ce:b2:32:17:b6:03:3f:a7:ea:6b:
         78:6b:0f:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 10:37:27 2026 by rpki-client