Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a313731613a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a313731613a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          BVlVnqfoRBasN4gj9NHJhvwxdg1ueqGs/Q0rSbizK0k=
Subject key identifier:   77:FA:1E:E0:E2:79:CE:9D:53:BC:73:C9:1C:D4:FE:0F:8E:B3:FB:DE
Certificate issuer:       /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial:       4D19780DD8E27867C45CE1ECB5EED5969C92D5E0
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a313731613a3a2f34382d313238203d3e203532303235.roa
Signing time:             Thu 04 Jun 2026 16:33:00 +0000
ROA not before:           Thu 04 Jun 2026 16:28:00 +0000
ROA not after:            Thu 03 Jun 2027 16:33:00 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:171a::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:19:78:0d:d8:e2:78:67:c4:5c:e1:ec:b5:ee:d5:96:9c:92:d5:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
        Validity
            Not Before: Jun  4 16:28:00 2026 GMT
            Not After : Jun  3 16:33:00 2027 GMT
        Subject: CN=77FA1EE0E279CE9D53BC73C91CD4FE0F8EB3FBDE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:50:10:a7:c0:18:36:00:1e:55:e8:5a:d1:c8:
                    bd:5d:0d:fb:4f:a3:52:ee:04:d2:b9:c2:ab:7d:3d:
                    c5:57:69:4c:81:40:41:dc:57:aa:f4:d8:a4:78:e9:
                    50:a6:16:9b:c7:b5:b6:7e:00:76:32:e2:5a:7b:c0:
                    72:95:b5:02:a4:5c:fb:37:81:7a:f3:2d:69:f2:de:
                    af:d6:28:b1:62:78:0d:9f:ad:83:00:6a:35:7f:2c:
                    1a:63:74:5c:f2:05:35:48:e4:7c:17:10:f0:4b:fd:
                    65:8d:60:b0:06:c2:6d:6f:64:02:ae:2a:21:01:cb:
                    91:4d:92:61:92:d0:ea:ef:78:f8:02:2f:0c:19:ba:
                    26:ef:60:08:59:5d:39:b3:68:35:64:89:86:48:dd:
                    e3:0e:99:da:17:3a:91:1c:60:a4:d3:d0:d4:5a:42:
                    0f:07:ba:3a:80:b7:2b:23:2d:ec:5e:79:5a:03:36:
                    31:dd:35:1b:20:c6:0d:38:33:9d:7c:00:e0:87:25:
                    84:45:16:05:49:15:be:33:d9:83:8d:90:90:e5:9b:
                    36:aa:02:9c:19:17:58:b2:d7:70:c7:c4:7f:e1:f2:
                    b0:a9:1f:e8:d3:46:9d:81:da:67:06:2a:91:5a:99:
                    90:89:f6:93:c8:d8:94:db:95:83:89:96:d9:ca:4b:
                    77:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:FA:1E:E0:E2:79:CE:9D:53:BC:73:C9:1C:D4:FE:0F:8E:B3:FB:DE
            X509v3 Authority Key Identifier:
                keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a313731613a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:171a::/48

    Signature Algorithm: sha256WithRSAEncryption
         3e:f5:7c:16:51:54:0a:7c:d7:20:1e:61:06:5d:0a:fc:5c:dd:
         31:d2:cd:16:4c:54:6c:6d:35:77:d6:84:89:19:cc:3b:66:d9:
         45:a0:7f:2a:3f:a1:34:2d:71:4e:2c:94:70:92:64:e8:9f:3c:
         09:b1:66:47:d5:91:f0:e8:d0:14:2b:10:57:b5:db:dd:da:58:
         39:eb:da:a7:f4:5c:cc:63:84:df:97:a4:a9:19:eb:6d:76:45:
         f5:8a:d2:fd:3b:63:0c:91:0d:41:94:94:a5:d2:c8:f5:ce:03:
         e9:43:14:e3:81:9b:96:ac:dd:65:3f:17:64:02:8a:75:80:ba:
         54:32:b9:cb:ae:42:88:80:2f:d5:d8:63:7a:28:ae:17:2f:53:
         07:5f:97:fc:a6:e6:0b:23:f2:a1:93:d1:b0:15:cb:be:f4:74:
         b6:63:db:e2:01:94:93:1e:14:ed:87:09:99:c8:5c:4a:1d:e6:
         cc:57:e0:78:3d:61:84:8f:86:40:91:26:06:08:9c:26:80:cf:
         0b:b3:31:e5:44:98:68:35:6c:35:63:05:e6:2a:2a:1a:bf:91:
         28:35:12:80:1a:5b:40:ad:d4:21:d4:5b:91:10:d4:0d:4b:00:
         e4:3e:bb:89:d8:5d:e3:a4:cd:91:c6:cb:a6:39:11:26:3b:47:
         b1:7a:95:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 21:56:40 2026 by rpki-client