Route Origin Authorization

$ rpki-client -vvvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a313931633a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a313931633a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          9cKiDeZRSIgeWumi1F/JjzEAOs976SVcyM/APhpGb3Q=
Subject key identifier:   CE:C3:CD:1B:CF:53:4C:F9:9D:F2:FF:37:13:EF:A0:78:55:40:69:33
Certificate issuer:       /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial:       1F92A95A9BF9F4399D1C4C4A6A0BF817D1903E4E
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a313931633a3a2f34382d313238203d3e203532303235.roa
Signing time:             Sat 15 Aug 2026 23:21:23 +0000
ROA not before:           Sat 15 Aug 2026 23:16:23 +0000
ROA not after:            Sat 14 Aug 2027 23:21:23 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:191c::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Aug 2026 22:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:92:a9:5a:9b:f9:f4:39:9d:1c:4c:4a:6a:0b:f8:17:d1:90:3e:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
        Validity
            Not Before: Aug 15 23:16:23 2026 GMT
            Not After : Aug 14 23:21:23 2027 GMT
        Subject: CN=CEC3CD1BCF534CF99DF2FF3713EFA07855406933
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:5d:74:47:46:c6:f6:0c:f3:6c:f4:12:f9:12:
                    4e:fb:5a:d3:53:be:ab:bd:55:5c:bf:eb:01:c0:bb:
                    b4:8e:a9:21:ce:05:b2:be:fa:99:e4:cc:1f:8c:76:
                    60:23:fc:06:e7:d6:da:18:38:23:8b:df:27:ca:8d:
                    0c:3d:8f:46:ab:47:a1:10:22:63:17:d7:5c:62:fa:
                    25:90:61:c6:56:d2:7a:2f:4b:93:bc:6e:67:fc:1c:
                    3a:3a:99:2d:e7:2f:cc:28:69:8e:f3:fd:32:44:84:
                    79:c1:4a:69:db:d3:86:a0:4b:bc:65:09:75:e1:b3:
                    55:5b:83:d0:ae:e1:65:3a:47:3b:f8:c2:0b:f8:ff:
                    4c:ba:28:08:3f:ad:4f:e7:c4:aa:53:d5:9b:5e:05:
                    8a:35:42:ee:7f:75:38:72:48:87:c8:1c:9c:b4:4a:
                    92:d2:65:99:a3:a4:ad:d0:c4:56:75:00:72:6d:ee:
                    86:b2:ed:28:44:9e:d5:81:ee:ea:d2:f6:a6:7b:a1:
                    1f:38:df:06:9c:2a:1a:e7:d0:1a:7f:38:33:bb:0f:
                    71:91:08:3c:a0:ea:e8:7b:6a:82:e0:a9:3f:8d:ba:
                    f0:6b:5b:f6:9a:27:65:16:f2:21:e3:44:96:79:34:
                    ce:d0:96:d3:50:a0:6e:43:d5:10:77:a0:15:52:54:
                    0c:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:C3:CD:1B:CF:53:4C:F9:9D:F2:FF:37:13:EF:A0:78:55:40:69:33
            X509v3 Authority Key Identifier:
                keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a313931633a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:191c::/48

    Signature Algorithm: sha256WithRSAEncryption
         23:2a:bb:ab:97:7e:bf:4b:10:be:95:9b:86:94:93:c7:ea:89:
         fd:e9:d3:d9:28:6d:ab:f1:6e:47:8a:9b:d2:ff:e4:4e:0e:6e:
         4e:9c:d1:3e:d1:37:8c:dc:4a:01:bb:d2:39:a1:16:c1:79:78:
         2f:55:94:76:8f:a8:16:f0:a9:1a:a6:62:c3:cb:75:d7:09:fa:
         99:25:35:44:a0:01:9d:6c:bc:0c:7d:fd:ae:7d:23:c4:99:40:
         fb:57:cb:5a:52:07:52:01:70:a8:cd:bc:23:3f:90:35:12:12:
         31:fe:bc:fd:ba:9b:6c:9a:e4:1d:24:2d:c7:b5:4d:1f:6f:a3:
         b4:a2:30:70:5e:cc:24:f7:db:56:79:f9:e4:cf:39:b5:b0:88:
         c8:cf:a4:54:af:33:f3:5f:6c:ef:55:18:09:f5:59:38:87:0b:
         59:7c:c6:52:5a:1a:e2:7d:84:d5:28:24:3d:d8:74:c5:2c:01:
         ee:ef:06:4e:e6:2e:99:e1:04:19:79:c6:65:76:97:28:dd:2b:
         86:bd:5e:15:c6:9b:7d:90:ef:58:64:96:a4:d2:b9:81:9a:a1:
         30:1d:02:77:09:82:b9:29:c5:cb:7f:55:8c:f7:11:30:51:51:
         5d:64:36:a7:c0:ea:19:ef:2f:e3:1c:b7:63:4b:78:08:ef:a1:
         6f:bc:d3:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 08:21:45 2026 by rpki-client