Route Origin Authorization

$ rpki-client -vvvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a316231663a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a316231663a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          U7EdSKNbZD/0qy3t6K3HMsAz9eufRvRV5H9zSl9gVI0=
Subject key identifier:   77:C2:5A:C9:31:7C:8A:0E:72:9C:B0:2F:9A:56:2C:E8:90:EF:A5:95
Certificate issuer:       /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial:       40B30A431A1A5FA763D535ACDC4779D2CF3CBB24
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a316231663a3a2f34382d313238203d3e203532303235.roa
Signing time:             Sat 15 Aug 2026 23:19:32 +0000
ROA not before:           Sat 15 Aug 2026 23:14:32 +0000
ROA not after:            Sat 14 Aug 2027 23:19:32 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:1b1f::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Aug 2026 22:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:b3:0a:43:1a:1a:5f:a7:63:d5:35:ac:dc:47:79:d2:cf:3c:bb:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
        Validity
            Not Before: Aug 15 23:14:32 2026 GMT
            Not After : Aug 14 23:19:32 2027 GMT
        Subject: CN=77C25AC9317C8A0E729CB02F9A562CE890EFA595
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b3:c1:e7:25:04:3b:57:a9:b6:8b:0d:41:51:
                    d5:da:75:63:21:aa:2d:ff:53:8b:61:aa:99:0e:e7:
                    44:d1:62:5f:24:2c:5a:ca:ae:c8:3a:c9:cb:40:d3:
                    ad:cb:89:e9:97:e1:3c:89:02:d9:b3:30:5b:82:06:
                    81:f1:6a:10:1c:b4:68:e6:bd:b8:8d:9a:ff:21:15:
                    73:81:46:ad:e0:a4:89:e2:b9:9c:14:55:26:70:e5:
                    78:08:cb:d9:85:de:4a:c3:92:4f:64:1d:9a:48:df:
                    9f:44:d5:73:4e:98:91:fb:e2:5d:b7:18:98:c2:82:
                    82:80:5a:f3:6f:c6:eb:07:8b:ae:c4:4c:f0:04:a2:
                    f7:f5:be:40:e1:e6:5d:fc:b8:79:1a:e3:b1:a0:0b:
                    78:c4:5a:5b:4f:7f:e3:88:96:cc:cb:23:70:2a:a8:
                    e9:6a:f9:ac:e8:9c:87:9b:7c:16:41:c5:c2:2d:4c:
                    4c:e3:f5:37:18:4e:43:1b:09:b2:dd:68:c8:fb:51:
                    9a:f5:25:2a:01:2d:a5:8a:46:97:03:3a:9b:ce:29:
                    e2:d3:cf:60:c7:b8:35:15:f0:0a:a7:1e:e3:22:78:
                    74:4d:e6:ea:5f:11:dd:55:bd:b1:8e:f3:9b:9e:09:
                    e1:c8:68:3d:35:8f:44:de:f9:6e:03:fe:e0:11:14:
                    47:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:C2:5A:C9:31:7C:8A:0E:72:9C:B0:2F:9A:56:2C:E8:90:EF:A5:95
            X509v3 Authority Key Identifier:
                keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a316231663a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:1b1f::/48

    Signature Algorithm: sha256WithRSAEncryption
         87:fd:91:2d:98:9a:09:3b:82:18:77:bd:19:72:81:75:11:55:
         71:fc:60:48:db:48:54:1e:2d:1c:be:b1:33:fd:6d:bf:b7:8a:
         ae:48:e6:9d:19:be:3c:77:14:97:e0:d1:1f:af:08:53:97:e1:
         ea:c6:60:e8:33:c9:b7:98:c0:9c:ce:31:ee:11:de:2e:31:1c:
         68:1a:28:4c:30:99:7b:b4:48:c7:e5:f3:4b:b5:2a:a9:f3:2f:
         43:0d:d3:c4:06:ef:4f:ca:7f:87:57:77:d0:98:ff:55:d5:b7:
         fc:e5:21:66:08:24:aa:b6:a7:49:34:c3:d9:7f:3d:b4:da:67:
         82:7a:54:16:a6:d6:63:b3:be:e2:82:fa:08:05:3b:34:65:f7:
         76:79:c4:c6:d7:34:60:0b:38:bc:a8:f5:d8:3f:57:eb:a2:39:
         39:af:a8:9f:a9:3c:fe:f7:66:a5:ca:8c:98:17:fb:8f:56:67:
         c1:0b:d2:ab:60:b1:25:c5:73:df:bb:3f:eb:02:b9:61:6d:b5:
         46:3d:39:fa:25:02:e9:72:83:04:48:1b:aa:e1:5e:28:0a:64:
         7a:90:97:50:3e:0d:23:0d:48:24:73:b7:dc:23:98:2d:26:2c:
         7d:74:34:a8:30:11:86:b7:5b:4e:24:9b:d5:43:e5:85:6e:fc:
         da:9a:30:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 07:32:50 2026 by rpki-client