Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a316532303a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a316532303a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          YKhXKU7fWlyCW13qfWSl3UeWbMPqaJGIA9RMeQiyusY=
Subject key identifier:   36:DD:52:D6:8C:7B:EC:11:C6:D6:01:E0:9F:24:5E:26:3A:18:62:7E
Certificate issuer:       /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial:       69997BE0FDDBC0D17DC952089F766A79C74EB3C5
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a316532303a3a2f34382d313238203d3e203532303235.roa
Signing time:             Thu 04 Jun 2026 16:32:59 +0000
ROA not before:           Thu 04 Jun 2026 16:27:59 +0000
ROA not after:            Thu 03 Jun 2027 16:32:59 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:1e20::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:99:7b:e0:fd:db:c0:d1:7d:c9:52:08:9f:76:6a:79:c7:4e:b3:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
        Validity
            Not Before: Jun  4 16:27:59 2026 GMT
            Not After : Jun  3 16:32:59 2027 GMT
        Subject: CN=36DD52D68C7BEC11C6D601E09F245E263A18627E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:47:0f:ac:32:6e:d4:36:1a:42:a3:28:be:08:
                    e0:79:24:d8:4a:09:04:bb:c6:5b:84:38:dc:ef:84:
                    49:d3:d0:46:6e:d3:ed:c9:2d:46:00:e6:e3:9c:08:
                    37:e1:ad:f3:18:00:bc:97:93:46:58:be:2a:10:68:
                    75:fa:d4:b4:41:78:fd:ac:d6:2e:87:a3:9a:b1:a7:
                    d3:2c:2c:aa:65:3e:e1:61:90:12:ba:ae:75:79:c9:
                    08:92:94:b8:a8:a1:d2:5b:7f:b8:46:d4:6b:c3:e9:
                    81:30:5b:c9:e5:70:4c:58:b8:80:61:11:c6:fd:6d:
                    47:04:e9:93:66:70:7f:28:f6:bf:5c:64:74:60:b9:
                    04:f6:c7:e4:65:97:b1:cc:bf:f8:2e:a9:b3:f1:18:
                    49:e2:5e:33:52:48:03:81:62:cc:02:1d:2c:e1:1e:
                    9d:7b:5a:83:fc:a6:b9:da:d2:63:e5:dc:e6:93:1b:
                    fa:4f:d5:10:de:e2:33:04:f8:68:0c:40:88:c2:7c:
                    9a:41:f3:03:34:74:b7:d7:42:55:73:e0:e7:23:bf:
                    27:c6:4c:93:bc:e8:12:50:49:8f:ea:59:24:f6:89:
                    2d:ce:8b:b7:40:46:1f:d6:15:18:8a:d7:05:dd:9f:
                    2b:13:9d:b2:17:b2:a9:ce:68:9e:45:2d:a4:28:a1:
                    89:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:DD:52:D6:8C:7B:EC:11:C6:D6:01:E0:9F:24:5E:26:3A:18:62:7E
            X509v3 Authority Key Identifier:
                keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a316532303a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:1e20::/48

    Signature Algorithm: sha256WithRSAEncryption
         29:c9:40:36:0f:6e:a2:0c:b1:49:e0:4e:7d:54:d3:ed:12:b9:
         b0:b3:6f:57:4e:d0:ab:4c:32:87:dd:a0:d6:81:c3:32:ec:ff:
         6b:69:1d:80:ca:62:81:25:7d:18:f8:f1:e8:78:a0:33:87:32:
         4f:bd:75:85:6c:c3:13:b9:85:fa:51:bd:54:f0:b2:d5:e4:c9:
         93:91:b0:cb:80:d5:29:7f:01:c7:fb:61:a2:18:6b:1f:fc:68:
         d7:3e:6c:e9:9d:dc:14:4b:4a:40:03:66:45:60:1b:15:b0:ce:
         f7:31:4f:f8:c9:bd:bd:26:c4:8c:d9:af:a0:7e:05:90:22:86:
         c8:44:de:ed:ba:2b:d0:e2:26:d7:2d:08:1c:c6:92:1f:28:f7:
         49:5b:4f:60:21:17:46:e2:f2:87:fc:23:ea:71:81:2f:4a:e1:
         a0:fa:fd:24:8c:0e:12:4a:48:e2:b8:cb:62:00:1f:b5:03:f2:
         07:80:73:66:5a:06:80:52:76:a5:23:57:7d:87:5f:94:9b:ab:
         12:e1:5f:a2:c4:7a:b4:40:34:ae:e3:34:2b:52:d0:9e:6d:eb:
         3d:d5:0b:54:0e:e8:f4:d8:4e:7d:e8:0e:a2:03:54:36:52:62:
         d7:e7:ee:5c:0e:c5:b0:67:9a:17:0a:c6:20:1c:17:cb:3b:fa:
         65:04:52:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 21:57:17 2026 by rpki-client