Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a313931633a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a313931633a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          3BD2gqKrPRG4i4DTivGSbSGyVRTq5ezQ2MvsNISWhpQ=
Subject key identifier:   F5:40:9D:A4:B8:02:12:65:87:51:AB:23:1C:A4:4B:71:8A:44:E4:8F
Certificate issuer:       /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial:       18E581533B51FA44518E844B9B708560014DABC2
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a313931633a3a2f34382d313238203d3e203532303235.roa
Signing time:             Thu 04 Jun 2026 16:33:09 +0000
ROA not before:           Thu 04 Jun 2026 16:28:09 +0000
ROA not after:            Thu 03 Jun 2027 16:33:09 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:191c::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:e5:81:53:3b:51:fa:44:51:8e:84:4b:9b:70:85:60:01:4d:ab:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
        Validity
            Not Before: Jun  4 16:28:09 2026 GMT
            Not After : Jun  3 16:33:09 2027 GMT
        Subject: CN=F5409DA4B80212658751AB231CA44B718A44E48F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:58:a1:09:31:9b:90:28:d2:59:dc:06:ec:aa:
                    6b:70:cb:d8:72:cc:d2:c4:d7:8e:ac:d4:86:5b:7c:
                    d3:ae:49:92:6a:eb:f6:bc:f6:1c:02:a9:31:7c:39:
                    8d:34:f8:6d:b8:a9:68:f6:b3:13:44:86:37:51:9e:
                    a8:e8:81:e7:f3:8b:a3:23:f3:6e:0d:9f:5a:75:88:
                    95:32:d5:8e:b1:e4:8b:3f:ce:0c:32:96:b6:74:34:
                    29:3a:bb:75:27:5e:52:f3:a5:7e:47:69:0c:d5:dd:
                    3f:c4:77:7e:db:12:d0:d3:e7:ee:6e:7a:4b:0f:85:
                    b8:b6:1c:10:62:fc:eb:f5:af:7c:c1:81:28:0c:b8:
                    1e:b6:34:0a:cd:69:30:23:89:73:8b:0f:6d:5b:2f:
                    f5:6b:11:44:47:d7:45:7a:4d:98:40:15:e5:c2:b5:
                    4b:b7:d3:d0:26:3c:93:0a:10:41:e3:0d:ee:f5:d9:
                    01:c6:2c:7d:5a:f2:3f:34:86:b2:91:b5:34:4d:05:
                    08:73:50:2a:75:19:62:ad:2b:ea:e5:83:53:c3:c5:
                    dd:ce:5f:36:f3:bb:f2:2e:6c:cb:41:0b:b7:c3:a5:
                    45:62:e9:ab:4d:50:ff:91:2d:53:38:c7:df:c8:06:
                    15:83:0e:ac:0d:39:be:89:68:95:6c:29:03:d3:07:
                    73:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:40:9D:A4:B8:02:12:65:87:51:AB:23:1C:A4:4B:71:8A:44:E4:8F
            X509v3 Authority Key Identifier:
                keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a313931633a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:191c::/48

    Signature Algorithm: sha256WithRSAEncryption
         10:b6:4f:d9:cd:20:fe:fa:7f:1d:72:4c:2c:14:67:ee:43:d3:
         bf:03:a9:40:c7:cf:79:aa:58:d3:36:33:58:92:3a:fa:27:04:
         23:1d:1d:a9:bb:70:a1:d1:3c:f4:c6:c3:e9:da:57:8d:52:dd:
         3a:86:fb:24:09:4b:5c:94:f8:4b:9b:79:55:45:06:88:35:8f:
         c4:dc:b5:73:b1:b5:66:d2:96:b3:96:d7:36:80:69:47:42:c4:
         e5:27:87:09:69:d6:ff:bc:37:77:eb:18:35:56:92:f0:9b:a6:
         7a:75:4d:44:3f:6a:d3:03:de:75:f8:60:e8:cc:0e:e0:f1:40:
         6a:12:20:c7:47:8f:87:94:d7:d9:0b:54:8e:d9:21:92:ff:16:
         32:67:3e:a9:55:f8:8d:55:ff:a3:fd:ad:43:d1:e9:5b:d9:a9:
         fc:95:14:ea:cb:75:aa:2a:58:a4:6d:3a:75:a5:72:73:c0:fd:
         d2:0a:19:53:45:1a:02:5a:80:49:99:8a:b6:ad:60:a9:f6:c5:
         13:4b:64:0f:fb:9d:58:70:ed:bd:c3:cc:3d:eb:49:f5:2b:8d:
         3a:f7:99:ae:54:bc:d1:32:57:69:62:19:78:ed:e3:0a:8e:a1:
         82:d9:bd:04:9d:48:6e:65:d7:67:15:de:b5:f1:fc:04:a2:6d:
         e7:2a:10:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 21:56:25 2026 by rpki-client