Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a313831303a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a313831303a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          3YleBeCuIEFeoCGx/1dFxtRrOvIfx4V7xbyCh0IGamo=
Subject key identifier:   45:44:94:6F:ED:EF:3A:2E:42:BF:4A:55:0A:C9:BF:56:1B:ED:86:BF
Certificate issuer:       /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial:       4AC1BE3B7CDF7FB105AE39891CD9AD42BDEE0CC4
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a313831303a3a2f34382d313238203d3e203532303235.roa
Signing time:             Thu 04 Jun 2026 16:32:45 +0000
ROA not before:           Thu 04 Jun 2026 16:27:45 +0000
ROA not after:            Thu 03 Jun 2027 16:32:45 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:1810::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:c1:be:3b:7c:df:7f:b1:05:ae:39:89:1c:d9:ad:42:bd:ee:0c:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
        Validity
            Not Before: Jun  4 16:27:45 2026 GMT
            Not After : Jun  3 16:32:45 2027 GMT
        Subject: CN=4544946FEDEF3A2E42BF4A550AC9BF561BED86BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e6:a7:46:28:9f:69:6f:8a:c2:41:93:93:38:
                    f0:51:e4:ec:54:ab:12:9c:5a:b2:a9:70:20:c5:4c:
                    8b:42:68:02:be:d8:46:77:3b:47:77:e8:93:ae:f8:
                    11:f6:1c:e2:94:70:9b:32:c1:f7:a0:30:d2:98:a8:
                    dd:d1:33:ba:0d:86:bf:0e:41:54:6f:98:d9:6b:19:
                    58:a9:a1:ca:12:4d:9e:f1:1f:61:d3:75:f6:00:2a:
                    19:53:34:fe:68:b8:1a:ca:19:7b:d9:b5:8d:73:db:
                    1f:da:dd:4e:49:f1:23:7e:1f:8e:c4:1d:17:04:7d:
                    ec:df:ef:6e:97:94:77:25:2d:c4:86:83:81:1a:99:
                    bb:58:9e:07:21:57:cf:bb:6a:4a:2f:85:6d:f0:65:
                    29:52:cf:25:31:2b:35:8c:fc:bd:63:8c:88:88:5e:
                    be:c6:68:50:54:a4:ea:bf:84:45:78:d3:bc:d4:7f:
                    54:ad:ce:09:3c:c7:cc:ca:1b:9d:55:c4:8a:bc:ee:
                    30:f2:78:19:fd:ea:72:3e:a3:73:89:f9:ac:67:31:
                    bb:58:2d:0f:47:a1:7b:35:fd:bd:dc:59:8a:7b:de:
                    ab:9f:06:bd:55:93:e8:c0:99:12:1b:1a:7a:61:d8:
                    17:c1:fe:2b:e8:17:26:2f:20:e1:2f:71:bc:e7:64:
                    77:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:44:94:6F:ED:EF:3A:2E:42:BF:4A:55:0A:C9:BF:56:1B:ED:86:BF
            X509v3 Authority Key Identifier:
                keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a313831303a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:1810::/48

    Signature Algorithm: sha256WithRSAEncryption
         75:2c:5d:bf:36:c9:bb:39:a1:7c:97:85:cf:5c:ed:87:f1:f3:
         a1:99:d3:a9:08:90:05:49:25:a7:2a:85:d1:9d:4d:6a:b6:df:
         ba:8e:bc:25:83:ff:5c:b2:34:80:08:22:8a:7f:fd:48:7c:c3:
         54:84:c2:f5:ee:28:3e:09:05:b6:da:6e:27:9d:1e:35:42:3c:
         20:b7:1d:59:e7:cf:69:dc:83:da:04:6c:64:b3:ed:55:4d:e0:
         48:89:f5:34:5c:30:d4:0e:26:62:7b:47:e4:78:00:63:ae:81:
         47:31:31:27:81:fc:2b:91:d1:3b:bd:2c:a3:9a:fc:df:33:f3:
         c1:4e:dd:d5:1e:25:40:8a:98:93:44:14:5c:d4:c8:c1:81:d2:
         fb:66:7f:3f:02:b5:b3:d0:4a:9e:35:f0:ff:ec:56:cd:79:d8:
         60:86:31:2b:37:85:a1:14:1d:b1:45:b5:e8:29:fe:c4:d6:f9:
         d2:56:a2:cd:0b:62:cc:a7:93:9f:a8:d2:5c:55:dc:f0:de:37:
         55:68:6e:c6:87:de:80:14:b7:4d:8d:f6:84:aa:ba:17:08:ef:
         f1:02:8b:05:c8:df:99:75:8d:95:b1:d4:44:4c:d4:45:36:f2:
         3f:b4:79:64:35:86:09:94:fe:21:4f:08:92:7f:08:d3:8f:45:
         6f:52:0c:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 21:58:29 2026 by rpki-client