Route Origin Authorization

$ rpki-client -vvvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a313731613a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a313731613a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          yDnh1cuxd5/q7sDz3jVnARxLsFJOPonrPBdEvj9CxLA=
Subject key identifier:   86:2A:53:66:3F:79:73:41:56:8E:BD:4D:F3:71:CE:11:AB:A9:C2:3E
Certificate issuer:       /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial:       494359036A410D534386ABE64F0219AEF9B8E34E
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a313731613a3a2f34382d313238203d3e203532303235.roa
Signing time:             Sat 15 Aug 2026 23:20:24 +0000
ROA not before:           Sat 15 Aug 2026 23:15:24 +0000
ROA not after:            Sat 14 Aug 2027 23:20:24 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:171a::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Aug 2026 23:30:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:43:59:03:6a:41:0d:53:43:86:ab:e6:4f:02:19:ae:f9:b8:e3:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
        Validity
            Not Before: Aug 15 23:15:24 2026 GMT
            Not After : Aug 14 23:20:24 2027 GMT
        Subject: CN=862A53663F797341568EBD4DF371CE11ABA9C23E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:91:33:ce:a1:9f:42:ad:1a:69:3c:43:9f:85:
                    5e:39:28:1f:6b:08:ec:8a:52:b0:8e:e0:55:97:4e:
                    0c:43:a8:2b:42:a9:58:92:26:a9:4f:70:99:37:ed:
                    04:d1:35:80:da:c4:7b:3b:05:d4:66:1e:29:92:b2:
                    bf:93:54:41:2d:66:1e:e2:5d:78:2f:c2:26:2c:2d:
                    79:ad:35:16:6b:0f:fa:6c:81:d2:7a:df:fc:8f:fc:
                    e8:a4:fb:33:f3:9f:99:9d:da:46:88:ee:f5:c9:59:
                    ca:4d:f0:75:e6:12:2d:08:7b:b0:7a:37:49:90:a1:
                    98:89:2d:0a:9b:6d:19:d9:c6:92:00:66:5f:1a:05:
                    d0:d8:43:b0:0c:11:ca:d6:eb:d5:09:58:c2:6e:b9:
                    99:f5:b4:7c:c8:b0:4d:8d:8b:a7:98:3b:3b:77:b9:
                    aa:16:f6:d2:c3:73:c5:f6:4a:f7:1d:a7:a3:50:a7:
                    ed:b4:43:ef:a0:a4:3d:54:b1:70:ac:85:28:c8:e5:
                    05:a7:36:2e:af:51:18:66:f2:20:97:b2:04:26:4f:
                    a1:70:82:12:ea:f5:08:aa:a3:50:d8:7f:4e:28:37:
                    7c:5e:63:e6:cf:7a:be:08:f1:00:ec:8f:70:a7:7d:
                    97:61:91:0e:82:b2:98:ba:06:4e:70:1e:9a:1c:8e:
                    1c:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:2A:53:66:3F:79:73:41:56:8E:BD:4D:F3:71:CE:11:AB:A9:C2:3E
            X509v3 Authority Key Identifier:
                keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a313731613a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:171a::/48

    Signature Algorithm: sha256WithRSAEncryption
         1a:85:70:3a:75:4b:1e:bc:4e:bd:92:e6:e9:66:c1:45:4e:00:
         95:95:d0:ef:fa:01:35:4b:67:61:ef:7c:6b:83:f9:3d:5a:1f:
         e5:0c:61:0d:4b:c4:f6:d6:10:07:83:3d:95:18:08:50:6b:46:
         db:89:98:c7:78:9b:7c:a8:5b:b6:83:e3:72:69:f8:71:90:d6:
         2b:cf:1b:16:30:a5:ba:d6:be:b2:fa:0d:b8:87:cd:4c:77:0f:
         1f:94:d8:41:86:1f:0c:49:b6:15:90:68:e0:a5:9b:77:4e:38:
         aa:95:05:ee:3b:7d:24:5d:21:b9:30:59:2c:27:bf:dd:1b:ba:
         8e:63:21:99:75:55:91:ae:6a:11:29:7a:84:d3:38:b8:ad:b8:
         b1:a1:26:c5:68:6f:9d:fe:a4:0b:05:10:4a:19:2e:eb:76:ff:
         dd:8c:c0:99:60:dc:ca:d2:d3:8b:8f:a7:9f:d5:f4:e7:b3:d0:
         d8:9f:e8:bc:ab:4a:75:9b:ed:b0:00:93:ef:ac:60:7d:81:b6:
         61:d5:35:ac:08:94:a7:b1:46:fc:f3:af:7e:f2:43:64:51:a2:
         80:de:27:9f:88:99:a7:d8:4c:0a:0c:6e:ee:da:95:11:69:40:
         7d:db:be:96:88:99:c2:94:a1:91:ee:d7:c0:81:a0:be:08:a2:
         03:94:ae:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 10:37:01 2026 by rpki-client