Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a316231663a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a316231663a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          6T/sWjsdJyAMDvzqu8v53SABZ3gIQM+pAFzY6MME0Ps=
Subject key identifier:   0D:D9:D0:85:37:28:23:8A:C3:8F:53:CD:48:44:02:AB:10:63:30:D2
Certificate issuer:       /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial:       37180F951C188FC8A975C76C0DBA3D584AAE33A6
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a316231663a3a2f34382d313238203d3e203532303235.roa
Signing time:             Thu 04 Jun 2026 16:33:04 +0000
ROA not before:           Thu 04 Jun 2026 16:28:04 +0000
ROA not after:            Thu 03 Jun 2027 16:33:04 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:1b1f::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:18:0f:95:1c:18:8f:c8:a9:75:c7:6c:0d:ba:3d:58:4a:ae:33:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
        Validity
            Not Before: Jun  4 16:28:04 2026 GMT
            Not After : Jun  3 16:33:04 2027 GMT
        Subject: CN=0DD9D0853728238AC38F53CD484402AB106330D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:0c:34:1a:0d:94:8d:9b:cd:01:ed:16:25:ae:
                    96:55:91:a2:43:82:b3:e0:ee:e2:c2:1c:bb:0d:1a:
                    b9:ce:28:3c:c0:9c:60:15:91:42:b1:f0:a5:8a:b9:
                    7c:6c:f0:d2:87:01:2d:04:6e:b1:eb:93:3e:7f:ba:
                    43:9b:46:5b:a6:5b:e8:20:e4:46:b7:26:7f:08:d2:
                    ae:70:9e:8c:6a:e3:ab:11:9a:cc:60:0d:df:30:98:
                    c1:70:14:87:ab:d6:78:80:39:8d:f1:14:f7:f6:8f:
                    7f:20:9c:b2:4a:84:b7:fc:24:66:1f:a8:4b:3d:2f:
                    3c:7e:56:1b:34:f1:72:b4:19:34:00:85:f9:a6:bd:
                    a5:7a:33:6b:7a:9e:9a:65:50:f4:13:39:b1:01:3a:
                    98:51:7e:49:da:aa:55:6f:04:2f:6d:59:04:e1:5b:
                    61:02:06:fa:55:fe:49:d8:f7:98:d1:77:8e:35:4b:
                    6e:81:0e:23:c8:12:99:29:42:bb:56:f5:4b:73:8a:
                    b6:c4:10:e5:09:90:04:74:34:4e:b4:61:99:79:72:
                    be:a0:0c:6a:ec:cb:38:cd:8a:69:fc:06:bb:50:ec:
                    50:f0:4a:9a:49:4a:51:3f:4f:52:d9:7a:c5:4f:7d:
                    b6:52:3b:a5:82:32:1e:cc:7f:40:6b:3e:8d:47:e7:
                    26:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:D9:D0:85:37:28:23:8A:C3:8F:53:CD:48:44:02:AB:10:63:30:D2
            X509v3 Authority Key Identifier:
                keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a316231663a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:1b1f::/48

    Signature Algorithm: sha256WithRSAEncryption
         3c:2b:fe:67:bc:df:64:e4:2e:34:81:f7:ae:4c:02:9c:99:c1:
         31:80:56:06:6f:df:54:2e:34:a8:34:aa:d5:7d:58:71:21:b9:
         8b:35:8e:8d:13:99:e2:61:d0:2c:57:4e:16:3e:ab:3c:51:a4:
         d2:70:d3:4a:7d:0c:0b:b0:54:c5:d7:44:6b:a8:17:55:19:0b:
         94:99:1b:83:29:d2:7b:19:7b:55:e7:b2:bc:55:40:84:3f:72:
         33:50:66:36:9f:4e:1e:ad:f9:3b:56:08:a3:a7:ab:04:46:45:
         83:87:d3:4a:f3:4f:65:7d:cb:0e:fc:0b:0f:60:c0:f4:34:b4:
         1b:9a:dd:8e:24:51:aa:23:45:0e:e1:2a:69:63:c8:1b:c9:d6:
         44:aa:cb:05:5b:95:b1:50:f2:11:80:da:c7:84:d4:04:16:2d:
         47:7a:3d:6e:3f:c3:b5:ad:d1:0c:ee:e6:ae:8a:ac:ba:ac:5b:
         b4:80:dd:06:6f:36:26:83:53:cf:84:d1:c8:83:43:8c:dd:76:
         06:13:0e:9d:05:01:97:bf:15:1b:61:74:3e:d5:0d:12:80:ff:
         66:3b:c9:c3:70:64:cc:11:b4:27:98:f9:c5:c7:80:44:11:71:
         df:11:4d:39:5f:81:ca:66:f1:01:5e:08:dc:f9:92:50:cf:cd:
         a8:17:02:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 21:52:10 2026 by rpki-client