Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a316432323a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a316432323a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          iVqCVzlatRa/S3q15Q7qmfFINkiZ9trWrbnuxUozevM=
Subject key identifier:   03:4C:89:96:FB:63:C7:5C:9C:74:D5:85:1E:01:7B:AC:C3:D0:65:C5
Certificate issuer:       /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial:       445ADD5677808EC0B2F9F93077D1FF28253C2551
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a316432323a3a2f34382d313238203d3e203532303235.roa
Signing time:             Thu 04 Jun 2026 16:33:10 +0000
ROA not before:           Thu 04 Jun 2026 16:28:10 +0000
ROA not after:            Thu 03 Jun 2027 16:33:10 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:1d22::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:5a:dd:56:77:80:8e:c0:b2:f9:f9:30:77:d1:ff:28:25:3c:25:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
        Validity
            Not Before: Jun  4 16:28:10 2026 GMT
            Not After : Jun  3 16:33:10 2027 GMT
        Subject: CN=034C8996FB63C75C9C74D5851E017BACC3D065C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:29:71:e9:19:9d:aa:d1:54:66:ac:84:49:3c:
                    b5:ff:89:8a:40:0d:8d:82:0d:18:9b:d8:e6:e8:0f:
                    f4:e0:c6:48:69:07:a4:a1:ad:08:ab:ca:9c:5b:dd:
                    58:68:fa:df:3f:5f:05:23:41:58:d8:87:75:34:31:
                    91:d6:68:e1:f4:9a:01:1c:29:2c:fa:70:c2:5d:d8:
                    40:e1:0b:68:52:c2:fd:27:42:2f:c3:98:7c:4a:7c:
                    e1:0b:ed:3f:13:44:0e:36:7e:52:19:d7:25:18:3e:
                    04:fe:ab:e2:d5:0a:08:36:39:c2:93:58:c9:02:ad:
                    4a:39:9d:f1:0d:72:bf:b8:36:37:90:ce:9c:1b:d3:
                    c4:22:d5:09:22:01:0e:87:86:dc:d0:89:98:3e:83:
                    02:9d:34:e6:ab:7a:79:a7:18:a0:c8:5b:68:62:a5:
                    3d:2d:1b:16:c0:af:89:3b:57:8c:cb:fe:05:30:64:
                    eb:b7:fb:d7:c2:c6:6d:01:6d:69:bc:3e:49:c5:dc:
                    50:10:02:b2:9f:82:ca:c6:bb:be:2e:96:1c:4f:0a:
                    5d:cf:2d:19:dc:e4:ef:22:52:ed:ff:4b:88:6f:9c:
                    fa:ff:54:02:75:ee:23:42:63:6c:b7:89:b8:28:7e:
                    ee:33:a1:b4:9c:6d:87:26:7c:4b:e6:e8:92:d5:4d:
                    98:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:4C:89:96:FB:63:C7:5C:9C:74:D5:85:1E:01:7B:AC:C3:D0:65:C5
            X509v3 Authority Key Identifier:
                keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a316432323a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:1d22::/48

    Signature Algorithm: sha256WithRSAEncryption
         5c:ba:03:bf:94:e0:51:af:e1:bb:fb:db:ad:40:a3:60:ab:57:
         9f:71:87:d0:8b:47:04:24:7c:eb:38:67:b3:c5:21:3a:5a:cc:
         b3:42:34:8e:28:41:c7:ad:ec:56:51:11:c4:d1:fe:e5:85:50:
         fd:c0:c5:6b:bb:f0:30:e8:7a:60:55:d0:6d:5f:66:88:4c:c7:
         77:b5:ba:19:f1:77:67:18:4e:0e:c7:89:94:3c:ed:e3:fb:d6:
         06:f4:b3:9d:b1:21:31:e8:d9:cc:90:1d:f1:0d:9c:94:ec:33:
         35:da:a2:19:6c:1e:90:ec:0a:d7:63:fe:fb:f9:03:d1:92:f9:
         2f:07:15:4e:b0:3d:af:61:9f:84:7b:cd:92:d9:61:e3:3f:b1:
         53:db:c2:f4:fc:1a:8e:21:64:7d:1d:6f:8a:20:a1:ea:c4:f8:
         60:07:fe:5e:ee:83:69:73:16:89:e7:79:f4:fd:b3:92:3f:af:
         b5:56:91:38:23:38:80:00:39:db:91:f1:9e:b0:05:e3:3d:25:
         00:85:8a:89:5f:75:ef:09:41:d0:79:f4:ec:35:75:e1:37:5b:
         44:03:c3:8e:bb:a2:21:b1:6c:d7:eb:9f:e1:25:a7:21:79:54:
         15:c2:14:a7:6a:d7:94:1c:03:35:62:2d:b5:46:68:38:16:13:
         d0:bb:17:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 21:58:36 2026 by rpki-client