Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a316331653a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a316331653a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          DyJ2kxRNdck/ZTo3FlYrToRlrZce9sd1dvYKTaNN9Zw=
Subject key identifier:   C9:0D:C2:62:A5:78:11:A6:32:C2:F0:CE:F6:AD:93:49:46:3E:B0:2B
Certificate issuer:       /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial:       2ADD7F7718E0E22B910BF45B85A950DA95AFE128
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a316331653a3a2f34382d313238203d3e203532303235.roa
Signing time:             Thu 04 Jun 2026 16:32:50 +0000
ROA not before:           Thu 04 Jun 2026 16:27:50 +0000
ROA not after:            Thu 03 Jun 2027 16:32:50 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:1c1e::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:dd:7f:77:18:e0:e2:2b:91:0b:f4:5b:85:a9:50:da:95:af:e1:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
        Validity
            Not Before: Jun  4 16:27:50 2026 GMT
            Not After : Jun  3 16:32:50 2027 GMT
        Subject: CN=C90DC262A57811A632C2F0CEF6AD9349463EB02B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:2a:e1:3e:b9:2d:e8:12:0a:31:63:ab:27:59:
                    e4:74:6f:2a:c8:37:87:45:63:34:5a:dd:8a:a7:b1:
                    c0:a8:81:26:38:52:bb:62:99:01:22:7b:2b:fe:db:
                    4a:08:68:93:e1:45:76:9c:4a:aa:de:94:9e:72:53:
                    f3:b9:4e:46:7e:ef:df:39:b9:80:c5:14:df:15:b9:
                    33:52:d5:82:a2:8e:c9:3a:27:8c:e9:7f:85:5f:31:
                    1e:05:ff:8e:db:cb:a8:d0:56:ab:65:32:6d:5b:da:
                    29:66:d3:b7:a7:6c:4f:b0:10:c8:21:17:75:cf:9f:
                    f5:02:a2:cb:41:ad:86:2a:2a:22:cb:a7:9f:4f:d1:
                    ea:8f:a8:e2:38:9e:0c:2a:32:16:3c:a2:d3:45:d5:
                    e6:49:ba:14:f1:58:01:31:52:ca:5f:85:13:4f:c6:
                    ce:c4:af:bb:ab:38:e1:8f:b7:48:fe:f9:fe:94:fb:
                    9d:53:83:ad:dd:04:f7:7a:5a:30:cc:b0:5e:c7:cf:
                    d6:81:f7:7e:64:34:4c:e5:e4:0e:3c:ff:03:4e:91:
                    99:e7:a8:d1:44:b0:f4:1e:a6:91:1d:28:89:81:54:
                    e0:13:c3:99:19:8d:f6:8f:14:0c:87:cf:7a:3d:eb:
                    64:07:26:cc:d3:13:3c:fe:85:e1:5a:03:7c:3e:2b:
                    16:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:0D:C2:62:A5:78:11:A6:32:C2:F0:CE:F6:AD:93:49:46:3E:B0:2B
            X509v3 Authority Key Identifier:
                keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a316331653a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:1c1e::/48

    Signature Algorithm: sha256WithRSAEncryption
         39:ad:7a:c5:1c:29:ed:e6:1b:6d:6a:5d:3b:da:65:78:86:3d:
         68:ed:e7:8d:d1:76:66:61:0a:d6:34:18:2d:05:bc:75:e1:75:
         f5:5b:5d:9c:8e:08:90:ae:be:92:4e:8b:25:ec:9f:1c:ca:03:
         46:a1:1e:5b:13:cd:70:0a:be:8e:2c:20:8e:5d:a2:92:45:c4:
         c5:21:42:11:09:49:0c:7d:b4:35:d0:20:f6:68:06:cc:cd:5f:
         9e:35:6e:ba:37:69:e9:13:ba:d5:58:7f:c1:3e:61:c4:a4:fa:
         88:39:f9:47:52:f4:8e:ff:89:e4:24:68:d1:a7:de:3e:a6:71:
         12:b0:d1:85:3a:5b:ed:1b:e8:cf:53:92:fc:13:a0:4b:13:24:
         7b:b0:11:22:4a:76:e5:db:83:76:7a:6f:af:df:3b:ba:05:be:
         f3:1e:76:45:b9:72:9a:48:c4:d1:ec:fe:d1:e3:f4:5a:06:f9:
         51:af:fe:d9:dc:c6:c6:70:02:59:ac:de:a5:06:1c:e5:e9:02:
         24:4a:22:45:f9:21:76:a7:a4:37:84:66:e6:7a:45:0a:b1:6c:
         2c:85:bc:ed:bb:c0:a5:28:ba:13:8c:b0:9f:7b:00:83:ca:5c:
         4a:fa:b1:f7:85:c2:2a:b5:14:12:a4:2d:58:20:26:0f:86:5e:
         1a:20:f0:02
-----BEGIN CERTIFICATE-----
MIIFJTCCBA2gAwIBAgIUKt1/dxjg4iuRC/RbhalQ2pWv4SgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjYzODZGQUJFQTM5MjEwQjY2NUE2QTU1QUU1REE2NkJF
Njc0MTU5NzAeFw0yNjA2MDQxNjI3NTBaFw0yNzA2MDMxNjMyNTBaMDMxMTAvBgNV
BAMTKEM5MERDMjYyQTU3ODExQTYzMkMyRjBDRUY2QUQ5MzQ5NDYzRUIwMkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/KuE+uS3oEgoxY6snWeR0byrI
N4dFYzRa3YqnscCogSY4UrtimQEieyv+20oIaJPhRXacSqrelJ5yU/O5TkZ+7985
uYDFFN8VuTNS1YKijsk6J4zpf4VfMR4F/47by6jQVqtlMm1b2ilm07enbE+wEMgh
F3XPn/UCostBrYYqKiLLp59P0eqPqOI4ngwqMhY8otNF1eZJuhTxWAExUspfhRNP
xs7Er7urOOGPt0j++f6U+51Tg63dBPd6WjDMsF7Hz9aB935kNEzl5A48/wNOkZnn
qNFEsPQeppEdKImBVOATw5kZjfaPFAyHz3o962QHJszTEzz+heFaA3w+KxbTAgMB
AAGjggIvMIICKzAdBgNVHQ4EFgQUyQ3CYqV4EaYywvDO9q2TSUY+sCswHwYDVR0j
BBgwFoAU9jhvq+o5IQtmWmpVrl2ma+Z0FZcwDgYDVR0PAQH/BAQDAgeAMG4GA1Ud
HwRnMGUwY6BhoF+GXXJzeW5jOi8vcnBraS0wMS5wZHhuZXQudWsvcmVwby9wYXJh
ZG94bmV0d29ya3MvOC9GNjM4NkZBQkVBMzkyMTBCNjY1QTZBNTVBRTVEQTY2QkU2
NzQxNTk3LmNybDCBkwYIKwYBBQUHAQEEgYYwgYMwgYAGCCsGAQUFBzAChnRyc3lu
YzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYz
ZTAxODU3NTVjOTFiZTNmOWQvNy9GNjM4NkZBQkVBMzkyMTBCNjY1QTZBNTVBRTVE
QTY2QkU2NzQxNTk3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzAL
hnVyc3luYzovL3Jwa2ktMDEucGR4bmV0LnVrL3JlcG8vcGFyYWRveG5ldHdvcmtz
LzgvMzI2MTMwMzUzYTY0NjY2MzM0M2EzMTYzMzE2NTNhM2EyZjM0MzgyZDMxMzIz
ODIwM2QzZTIwMzUzMjMwMzIzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF38QcHjANBgkqhkiG9w0B
AQsFAAOCAQEAOa16xRwp7eYbbWpdO9pleIY9aO3njdF2ZmEK1jQYLQW8deF19Vtd
nI4IkK6+kk6LJeyfHMoDRqEeWxPNcAq+jiwgjl2ikkXExSFCEQlJDH20NdAg9mgG
zM1fnjVuujdp6RO61Vh/wT5hxKT6iDn5R1L0jv+J5CRo0afePqZxErDRhTpb7Rvo
z1OS/BOgSxMke7ARIkp25duDdnpvr987ugW+8x52RblymkjE0ez+0eP0Wgb5Ua/+
2dzGxnACWazepQYc5ekCJEoiRfkhdqekN4Rm5npFCrFsLIW87bvApSi6E4ywn3sA
g8pcSvqx94XCKrUUEqQtWCAmD4ZeGiDwAg==
-----END CERTIFICATE-----
Generated at Thu Jun 11 21:58:29 2026 by rpki-client