Route Origin Authorization

$ rpki-client -vvvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a316131643a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a316131643a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          fehkUYW16LHsE2Lodng9dU9N+ZNeKghRkBpOgIJGzOY=
Subject key identifier:   BF:76:43:C8:0D:50:93:AE:E6:1C:7A:22:16:58:7F:90:18:17:76:CB
Certificate issuer:       /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial:       0371FAC685ED076D9B9714CB40CCE2E51DAE7B9F
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a316131643a3a2f34382d313238203d3e203532303235.roa
Signing time:             Sat 15 Aug 2026 23:18:19 +0000
ROA not before:           Sat 15 Aug 2026 23:13:19 +0000
ROA not after:            Sat 14 Aug 2027 23:18:19 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:1a1d::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Aug 2026 22:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:71:fa:c6:85:ed:07:6d:9b:97:14:cb:40:cc:e2:e5:1d:ae:7b:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
        Validity
            Not Before: Aug 15 23:13:19 2026 GMT
            Not After : Aug 14 23:18:19 2027 GMT
        Subject: CN=BF7643C80D5093AEE61C7A2216587F90181776CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:89:65:83:85:fd:79:da:20:42:ad:8b:b3:46:
                    ed:ee:4e:20:fc:fa:39:42:10:4c:dc:d0:62:e7:69:
                    bb:9a:a7:f8:50:43:95:e6:2a:a8:c3:ff:c2:fb:9e:
                    89:a1:f9:a7:dc:20:9f:cc:98:51:0b:f4:d6:2e:c8:
                    ca:96:77:c2:6b:ad:e6:03:57:a2:0d:c6:ee:d5:c2:
                    ac:2a:7b:f2:a4:c7:3e:48:16:89:af:d5:36:18:19:
                    d2:0a:e3:bf:26:75:1e:39:d2:11:2f:cc:57:02:33:
                    9c:f7:86:47:11:09:8d:85:74:fc:a0:67:01:5f:85:
                    4a:6f:9f:ef:f8:2b:a4:3c:7c:cf:8a:12:a1:4e:35:
                    71:9e:05:f2:a2:33:06:b2:0d:91:09:a4:0f:3f:af:
                    05:fc:08:d1:0d:60:e0:c7:71:0c:ca:d3:d5:a1:21:
                    e7:21:be:d2:b1:93:84:72:b9:2b:d7:9d:29:4c:49:
                    a7:13:7c:9c:3a:82:a0:a6:5f:14:64:a6:10:60:ce:
                    3e:b3:4d:c0:c8:ec:d2:f6:3c:71:1c:e9:67:93:5e:
                    8a:97:47:ba:e8:8d:71:db:51:c2:f7:69:65:81:79:
                    e2:f9:28:bc:9e:fd:da:15:71:87:46:80:30:7d:86:
                    34:d8:ad:0a:ba:41:0b:b4:70:60:df:7a:4c:95:85:
                    bb:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:76:43:C8:0D:50:93:AE:E6:1C:7A:22:16:58:7F:90:18:17:76:CB
            X509v3 Authority Key Identifier:
                keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a316131643a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:1a1d::/48

    Signature Algorithm: sha256WithRSAEncryption
         03:ca:21:5a:01:36:f2:77:8a:f5:81:d0:ae:7d:9d:ff:8c:d8:
         8b:25:ad:66:24:5f:1e:77:94:4d:9b:86:cb:c1:3a:d5:f9:e2:
         3e:a2:26:67:80:ac:22:10:4e:eb:03:98:08:79:6c:62:2e:ec:
         ee:59:e1:42:6f:87:68:eb:5e:0e:81:a7:92:78:49:2e:3b:c0:
         8a:2d:5a:32:4f:e7:1a:a6:76:bd:d3:a5:e9:72:fe:cb:95:e2:
         40:29:33:58:c9:01:33:29:ed:73:53:73:37:f7:56:bd:a8:8d:
         6a:53:c3:16:af:fb:e6:dc:db:e7:41:64:90:cb:0c:ee:2b:6a:
         eb:71:da:2d:0b:72:f1:13:19:88:63:6c:7f:36:33:f7:6f:be:
         04:b5:1c:cb:a1:c5:e2:a4:d3:af:36:4a:b0:5e:f0:83:6c:92:
         04:e0:7b:b2:4a:b3:f8:a6:a3:da:a3:a2:f9:72:1f:24:9e:a7:
         b0:f2:d2:a9:eb:92:29:83:2d:56:b2:42:6c:99:3b:e2:ae:d2:
         44:43:eb:54:d9:41:4d:6f:ba:1d:2e:21:14:02:74:a6:8d:81:
         73:a0:fd:17:91:fc:07:c2:b8:49:0e:dc:f7:91:38:c2:7b:e1:
         ee:4d:b4:8a:61:26:cf:98:87:35:15:4f:05:14:20:13:3d:e0:
         b8:f0:56:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 08:22:19 2026 by rpki-client