Route Origin Authorization

$ rpki-client -vvvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a316432663a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a316432663a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          7YP6SrskcyQACpPGjO0E63Jc3KEJjKbYdbSE0ytlOj8=
Subject key identifier:   4C:D6:82:85:B2:91:8B:35:A3:3C:54:80:4D:91:F1:DC:3B:FD:6B:92
Certificate issuer:       /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial:       182B61DE3683182FF6E2656E0F4BB6098C03B8AA
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a316432663a3a2f34382d313238203d3e203532303235.roa
Signing time:             Wed 19 Aug 2026 20:00:51 +0000
ROA not before:           Wed 19 Aug 2026 19:55:51 +0000
ROA not after:            Wed 18 Aug 2027 20:00:51 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:1d2f::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Aug 2026 22:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:2b:61:de:36:83:18:2f:f6:e2:65:6e:0f:4b:b6:09:8c:03:b8:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
        Validity
            Not Before: Aug 19 19:55:51 2026 GMT
            Not After : Aug 18 20:00:51 2027 GMT
        Subject: CN=4CD68285B2918B35A33C54804D91F1DC3BFD6B92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:41:2d:7e:84:8c:58:47:0e:79:9f:bb:e3:2e:
                    fc:9a:74:76:9e:88:13:08:33:78:6f:03:ba:13:d9:
                    bb:2f:aa:0b:60:76:f5:3d:a3:e7:8a:13:3b:b3:56:
                    83:81:d8:18:c7:f8:b0:49:1e:c2:5e:23:55:6e:ba:
                    12:24:dd:c3:17:d1:a0:07:ab:8a:6e:64:10:f5:a7:
                    e7:0d:90:7c:39:52:9b:3b:a0:b6:c6:a6:b5:4f:a0:
                    09:cb:c5:0c:b4:db:07:30:99:5e:4b:e1:4f:69:46:
                    94:c5:82:a0:4f:d5:e1:c4:f8:95:86:50:f4:b5:73:
                    84:1e:3c:4b:d4:2b:46:34:4e:57:aa:35:a8:56:87:
                    cb:2b:e7:2c:56:2f:e7:1f:31:bc:4c:df:c9:f6:67:
                    30:2a:47:ea:72:68:1a:cb:b8:96:e6:ad:68:ed:0f:
                    b5:35:1c:9a:ab:65:61:13:c2:39:4b:1b:0f:e7:72:
                    cd:75:01:8e:6a:c7:fe:11:1c:c5:36:3d:38:7b:05:
                    f0:58:65:40:37:37:d1:39:6d:05:d8:35:cd:59:52:
                    23:05:dd:da:f2:c6:f5:cf:d9:aa:33:64:5b:de:54:
                    85:2d:d1:f5:bf:e1:fd:4c:e8:3d:73:13:28:84:b4:
                    0d:38:ee:98:b5:b0:91:b1:ca:04:0a:95:23:0e:50:
                    a3:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:D6:82:85:B2:91:8B:35:A3:3C:54:80:4D:91:F1:DC:3B:FD:6B:92
            X509v3 Authority Key Identifier:
                keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a316432663a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:1d2f::/48

    Signature Algorithm: sha256WithRSAEncryption
         59:47:5b:7a:48:1a:0c:31:1b:7f:08:c3:d4:4c:de:3c:45:9e:
         7d:a3:82:64:3e:8f:73:b8:a6:08:ab:cf:df:c7:bd:7a:b3:ec:
         0e:6c:6e:3b:e4:14:cb:3f:d9:d8:bb:cf:40:d6:a1:f8:2e:38:
         74:3c:30:9b:a6:56:8d:5c:bc:b6:19:97:52:b6:9f:34:49:08:
         41:0e:d9:77:20:65:e8:33:70:10:e4:09:8f:1d:7a:8f:d8:26:
         d9:2f:ff:b4:ff:84:0c:df:7a:ed:67:8d:9a:af:b3:2f:5e:15:
         b8:f5:61:ff:ae:c4:2a:88:a6:b2:34:0d:f5:d1:99:68:ec:88:
         93:cd:2d:07:c4:ac:5e:16:f8:78:85:f7:28:9b:9f:47:dc:6b:
         0d:e8:ab:66:69:45:db:28:74:25:f7:ed:80:b5:d0:1d:73:13:
         14:3e:18:c5:03:f7:50:61:cb:c8:32:12:78:96:4b:bc:28:1d:
         04:67:3a:95:f3:ac:32:d9:42:bc:f2:09:87:5f:02:af:4c:9f:
         b9:38:27:a3:d7:ec:c4:f1:76:54:f9:4d:8a:40:fe:10:eb:c6:
         bd:ac:b0:53:86:f4:98:47:8a:bf:e3:f7:16:49:b0:99:f8:20:
         82:37:0c:b8:ef:7b:bd:e6:28:3e:80:fa:de:4e:65:81:47:0d:
         d0:f6:e8:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 08:22:21 2026 by rpki-client