Route Origin Authorization

$ rpki-client -vvvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a313631383a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a313631383a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          irgnevUVSlswspsWTahGbyI58lOD+iV+qg8o7q4aB3w=
Subject key identifier:   05:60:CE:64:43:CC:2C:48:48:99:F7:A1:58:6B:23:C0:94:38:B3:57
Certificate issuer:       /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial:       4E08E31873FECE67B49D500FBB124F2D4FEE083F
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a313631383a3a2f34382d313238203d3e203532303235.roa
Signing time:             Sat 15 Aug 2026 23:17:48 +0000
ROA not before:           Sat 15 Aug 2026 23:12:48 +0000
ROA not after:            Sat 14 Aug 2027 23:17:48 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:1618::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Aug 2026 23:30:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:08:e3:18:73:fe:ce:67:b4:9d:50:0f:bb:12:4f:2d:4f:ee:08:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
        Validity
            Not Before: Aug 15 23:12:48 2026 GMT
            Not After : Aug 14 23:17:48 2027 GMT
        Subject: CN=0560CE6443CC2C484899F7A1586B23C09438B357
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:7a:e5:dc:5f:b5:ad:1c:65:6f:53:9a:b8:5d:
                    aa:b3:1a:e4:9b:c3:d9:8a:50:e1:fb:16:b9:1a:25:
                    3d:f9:9e:f6:da:6b:d6:95:2a:7b:d7:10:d4:68:19:
                    4b:73:94:a9:ac:98:16:01:7c:3d:84:3b:72:03:96:
                    dc:e6:96:36:41:e3:27:4c:3c:e1:ea:9d:de:60:ed:
                    3c:3f:46:70:0b:5f:8c:8e:dc:9c:1f:b6:65:79:db:
                    44:eb:78:f2:58:05:ad:43:76:28:75:3c:73:64:61:
                    75:f0:83:47:a4:06:f0:44:f2:38:c7:54:ff:a2:92:
                    1f:ef:99:04:76:36:cd:7b:a2:c1:4a:35:ce:55:7b:
                    56:91:d2:f1:a0:70:c0:e4:b8:f1:95:cc:40:7f:8a:
                    a1:62:86:54:de:62:33:eb:ca:bb:89:23:90:3b:37:
                    b2:34:b4:46:a4:54:d7:aa:87:21:61:8e:b5:b7:c2:
                    66:32:65:50:9d:31:55:42:13:63:b2:74:d6:cb:9e:
                    66:5e:31:b8:26:0b:01:9c:55:dd:83:b9:78:7c:18:
                    94:11:5f:9a:66:5f:21:b5:3c:27:b8:51:8d:24:e9:
                    42:30:13:cf:ac:94:aa:58:09:94:58:aa:9a:f8:09:
                    30:25:21:67:ff:02:19:7e:b0:ac:7f:90:22:ed:2d:
                    2e:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:60:CE:64:43:CC:2C:48:48:99:F7:A1:58:6B:23:C0:94:38:B3:57
            X509v3 Authority Key Identifier:
                keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a313631383a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:1618::/48

    Signature Algorithm: sha256WithRSAEncryption
         6f:d9:a9:5b:a6:eb:de:a1:d3:1f:d6:50:3c:f7:8a:f4:13:02:
         f2:05:4a:1b:6b:42:53:c2:06:57:32:92:5e:f5:5c:cc:79:f9:
         99:01:98:54:98:f8:ae:9d:62:be:29:bb:c2:0c:99:53:99:1d:
         5d:51:e1:36:3f:3b:28:ae:35:e9:3f:cf:98:ad:16:5b:c1:86:
         b6:d4:1d:67:ea:9f:dc:bc:62:dd:08:64:63:a7:31:cd:eb:0f:
         db:0a:6f:63:0f:c1:35:6f:62:93:77:12:8e:1c:b4:9f:20:74:
         2f:ef:0a:29:eb:42:3f:c0:6d:e4:f8:e4:25:96:21:9e:c5:4e:
         0d:00:75:6f:a0:ab:c1:a4:08:03:e8:cd:ad:88:ef:f5:8b:19:
         81:32:b2:30:33:51:3a:10:07:24:d8:78:6d:04:43:e2:65:db:
         69:40:b0:59:3c:8c:e4:66:db:a7:eb:77:61:87:91:2d:aa:f0:
         f4:e1:b8:a2:ca:57:a5:98:8c:6e:13:1e:c0:9e:3a:c0:f6:72:
         f5:ec:d0:96:45:27:76:68:2f:64:d8:02:7b:10:d3:26:f4:f7:
         32:72:e9:e4:ce:b5:81:23:86:45:55:a0:32:a7:0d:44:fe:d8:
         07:29:2d:fd:92:94:2e:39:a7:ac:f6:90:94:e4:9c:fd:1a:af:
         7f:df:75:1d
-----BEGIN CERTIFICATE-----
MIIFJTCCBA2gAwIBAgIUTgjjGHP+zme0nVAPuxJPLU/uCD8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjYzODZGQUJFQTM5MjEwQjY2NUE2QTU1QUU1REE2NkJF
Njc0MTU5NzAeFw0yNjA4MTUyMzEyNDhaFw0yNzA4MTQyMzE3NDhaMDMxMTAvBgNV
BAMTKDA1NjBDRTY0NDNDQzJDNDg0ODk5RjdBMTU4NkIyM0MwOTQzOEIzNTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIeuXcX7WtHGVvU5q4XaqzGuSb
w9mKUOH7FrkaJT35nvbaa9aVKnvXENRoGUtzlKmsmBYBfD2EO3IDltzmljZB4ydM
POHqnd5g7Tw/RnALX4yO3JwftmV520TrePJYBa1Ddih1PHNkYXXwg0ekBvBE8jjH
VP+ikh/vmQR2Ns17osFKNc5Ve1aR0vGgcMDkuPGVzEB/iqFihlTeYjPryruJI5A7
N7I0tEakVNeqhyFhjrW3wmYyZVCdMVVCE2OydNbLnmZeMbgmCwGcVd2DuXh8GJQR
X5pmXyG1PCe4UY0k6UIwE8+slKpYCZRYqpr4CTAlIWf/Ahl+sKx/kCLtLS71AgMB
AAGjggIvMIICKzAdBgNVHQ4EFgQUBWDOZEPMLEhImfehWGsjwJQ4s1cwHwYDVR0j
BBgwFoAU9jhvq+o5IQtmWmpVrl2ma+Z0FZcwDgYDVR0PAQH/BAQDAgeAMG4GA1Ud
HwRnMGUwY6BhoF+GXXJzeW5jOi8vcnBraS0wMS5wZHhuZXQudWsvcmVwby9wYXJh
ZG94bmV0d29ya3MvOC9GNjM4NkZBQkVBMzkyMTBCNjY1QTZBNTVBRTVEQTY2QkU2
NzQxNTk3LmNybDCBkwYIKwYBBQUHAQEEgYYwgYMwgYAGCCsGAQUFBzAChnRyc3lu
YzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYz
ZTAxODU3NTVjOTFiZTNmOWQvNy9GNjM4NkZBQkVBMzkyMTBCNjY1QTZBNTVBRTVE
QTY2QkU2NzQxNTk3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzAL
hnVyc3luYzovL3Jwa2ktMDEucGR4bmV0LnVrL3JlcG8vcGFyYWRveG5ldHdvcmtz
LzgvMzI2MTMwMzUzYTY0NjY2MzM0M2EzMTM2MzEzODNhM2EyZjM0MzgyZDMxMzIz
ODIwM2QzZTIwMzUzMjMwMzIzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF38QWGDANBgkqhkiG9w0B
AQsFAAOCAQEAb9mpW6br3qHTH9ZQPPeK9BMC8gVKG2tCU8IGVzKSXvVczHn5mQGY
VJj4rp1ivim7wgyZU5kdXVHhNj87KK416T/PmK0WW8GGttQdZ+qf3Lxi3QhkY6cx
zesP2wpvYw/BNW9ik3cSjhy0nyB0L+8KKetCP8Bt5PjkJZYhnsVODQB1b6CrwaQI
A+jNrYjv9YsZgTKyMDNROhAHJNh4bQRD4mXbaUCwWTyM5Gbbp+t3YYeRLarw9OG4
ospXpZiMbhMewJ46wPZy9ezQlkUndmgvZNgCexDTJvT3MnLp5M61gSOGRVWgMqcN
RP7YBykt/ZKULjmnrPaQlOSc/Rqvf991HQ==
-----END CERTIFICATE-----
Generated at Mon Aug 24 10:37:26 2026 by rpki-client