Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a313831393a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a313831393a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          sKCI9n/ZCHZwhOM57NojKACT4tHKfRCfY9iigEfFzYs=
Subject key identifier:   76:B5:C2:76:F5:16:AB:E6:0B:1D:C9:5D:8C:8A:E8:5B:36:C1:AF:AD
Certificate issuer:       /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial:       2CFBC2B277774DCC73AEF23507ADF734E7B2E8E0
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a313831393a3a2f34382d313238203d3e203532303235.roa
Signing time:             Thu 04 Jun 2026 16:33:03 +0000
ROA not before:           Thu 04 Jun 2026 16:28:03 +0000
ROA not after:            Thu 03 Jun 2027 16:33:03 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:1819::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:fb:c2:b2:77:77:4d:cc:73:ae:f2:35:07:ad:f7:34:e7:b2:e8:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
        Validity
            Not Before: Jun  4 16:28:03 2026 GMT
            Not After : Jun  3 16:33:03 2027 GMT
        Subject: CN=76B5C276F516ABE60B1DC95D8C8AE85B36C1AFAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:0e:23:0e:f7:58:22:c4:77:87:6d:f5:01:d4:
                    09:2d:b1:93:4f:be:df:45:dc:ff:cd:d7:0d:96:c1:
                    3e:0c:a9:63:8b:a0:a0:18:46:7b:b3:f8:e7:14:db:
                    23:8e:f0:75:20:8d:9d:77:67:68:97:ab:55:79:e2:
                    f4:20:a9:3e:dc:a0:fe:07:cd:65:ba:74:7d:89:fe:
                    96:40:6e:93:60:a6:fd:6f:8f:d4:75:19:a0:de:de:
                    3a:bc:60:80:c7:3f:fa:6d:a5:46:06:fb:de:ab:b0:
                    aa:c0:b2:a8:dc:2c:94:6e:3b:2a:cc:55:22:eb:82:
                    96:cc:ea:5d:06:e0:3d:83:d2:13:bb:68:51:bf:b7:
                    0d:6a:c1:db:12:27:de:d3:f9:c9:1a:17:7a:c7:31:
                    21:9d:e6:e0:0d:ed:c0:5e:28:03:2a:a8:3e:9b:5e:
                    ac:74:12:63:2f:8d:19:85:f0:9f:3f:30:31:47:a6:
                    1e:75:00:bd:56:82:ae:1d:af:67:da:01:e3:26:89:
                    ae:e8:46:ac:19:3f:27:4c:26:be:47:0e:35:f2:10:
                    29:8e:c2:c7:c4:b0:bd:b5:b1:71:08:55:fe:84:00:
                    06:1e:c4:09:42:78:61:52:08:7f:05:25:02:e3:1a:
                    88:13:59:af:95:b2:56:b8:d5:2f:b5:b5:74:8d:8f:
                    d5:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:B5:C2:76:F5:16:AB:E6:0B:1D:C9:5D:8C:8A:E8:5B:36:C1:AF:AD
            X509v3 Authority Key Identifier:
                keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a313831393a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:1819::/48

    Signature Algorithm: sha256WithRSAEncryption
         5b:e0:b5:a8:db:5f:fc:43:f7:a0:df:dc:f0:7f:be:90:8a:6e:
         d9:e4:45:8f:e2:1f:7f:b9:58:e0:fd:58:a6:02:30:a7:27:02:
         4c:12:7f:f8:90:ad:11:de:fb:68:9c:a5:46:bf:9c:31:ca:86:
         54:33:c9:af:d7:c4:27:05:70:24:d2:0b:2c:49:d8:58:e3:40:
         4d:aa:98:9c:ec:b5:ba:18:4a:23:37:8f:79:9c:64:e9:8c:f4:
         e7:3d:54:ee:d1:29:b4:f0:56:84:5c:54:21:9d:ae:38:de:6e:
         a2:dd:84:ac:89:49:84:71:6a:73:6d:19:ba:21:25:6c:22:53:
         8d:fb:44:41:e6:dd:1b:e0:85:3a:aa:03:86:24:9e:b4:24:06:
         44:47:32:a3:1f:84:07:37:d4:3d:4a:bf:38:c4:ad:4a:88:23:
         fb:0e:0c:23:3f:27:e0:11:57:40:da:cf:38:5d:09:bf:cc:99:
         02:2a:7e:f2:5f:93:ad:36:a4:fb:5b:59:a2:60:27:26:cc:92:
         2d:e7:f1:4a:f4:7b:14:67:38:c6:66:a5:66:b6:93:ec:14:da:
         cc:f0:22:50:9a:2c:b0:aa:f0:f6:26:23:2a:32:d0:23:0c:ac:
         13:7d:ee:33:c4:91:81:fb:0b:08:8a:99:3b:43:b9:fd:e0:a2:
         65:0d:c7:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 21:57:18 2026 by rpki-client