Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a316532373a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a316532373a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          kZl9wd5SFXgVJboKpgiusUjcf0EllSduEUrmWVmriU0=
Subject key identifier:   26:DA:EC:3F:D5:48:3E:00:3F:ED:53:1E:41:94:EC:6B:64:B5:54:DF
Certificate issuer:       /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial:       4827E3B62998886EFA941C24764EA06F2447FEA6
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a316532373a3a2f34382d313238203d3e203532303235.roa
Signing time:             Thu 03 Jul 2025 15:53:51 +0000
ROA not before:           Thu 03 Jul 2025 15:48:51 +0000
ROA not after:            Thu 02 Jul 2026 15:53:51 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:1e27::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 02:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:27:e3:b6:29:98:88:6e:fa:94:1c:24:76:4e:a0:6f:24:47:fe:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
        Validity
            Not Before: Jul  3 15:48:51 2025 GMT
            Not After : Jul  2 15:53:51 2026 GMT
        Subject: CN=26DAEC3FD5483E003FED531E4194EC6B64B554DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:6d:ed:e9:59:f5:ce:f5:ff:8b:ca:b0:e8:a7:
                    23:e7:c6:4c:3d:85:84:76:6d:44:1c:47:ef:9a:d9:
                    53:84:90:90:7e:bf:62:1e:d7:32:35:cb:cb:07:29:
                    ac:1f:c4:25:55:8f:2a:5a:e1:2e:c2:fd:be:4c:ab:
                    af:9d:8f:0c:b3:52:9b:fa:d6:02:c6:ce:cc:4b:cc:
                    73:ed:b9:53:42:96:68:f5:0d:6f:3e:12:e1:ec:6c:
                    ba:e8:40:7f:fb:c4:47:5f:d0:ca:05:f9:3f:50:71:
                    a3:16:ca:0e:b8:73:06:c0:7c:bf:e3:26:89:e8:8c:
                    25:43:1b:df:56:67:90:e3:31:00:8d:30:e3:b9:09:
                    80:ef:20:1b:9e:d0:1c:22:81:9c:df:43:53:fb:1b:
                    06:a4:2a:b8:4e:e1:fe:ce:00:a2:b7:92:66:68:d6:
                    42:b0:5e:76:cf:99:fc:dc:61:13:99:a0:c5:e1:13:
                    12:79:ad:4e:74:19:31:91:8a:ff:82:73:5c:b4:1b:
                    f0:fa:e2:3f:9f:60:0e:be:7a:34:56:e9:80:0f:ac:
                    d0:d8:f5:59:37:cd:d0:24:cf:da:55:6b:3d:77:e3:
                    50:16:7e:84:c0:94:2d:6a:d6:06:96:c4:ab:46:0f:
                    06:b1:18:7c:dc:63:4a:9a:99:08:ad:5a:e4:d3:32:
                    23:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:DA:EC:3F:D5:48:3E:00:3F:ED:53:1E:41:94:EC:6B:64:B5:54:DF
            X509v3 Authority Key Identifier:
                keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a316532373a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:1e27::/48

    Signature Algorithm: sha256WithRSAEncryption
         73:01:4c:08:f0:96:4c:5c:6c:ae:da:29:3e:f4:63:29:92:1a:
         4f:0f:b5:1b:8d:af:cf:b0:ef:2a:dc:aa:a2:f5:14:aa:67:62:
         66:a0:c6:ec:f3:13:48:e1:ff:71:b4:7b:ed:3a:6e:b0:5a:5c:
         c1:12:84:b4:3d:f9:8f:8c:a0:51:76:c9:99:1a:f3:ab:97:86:
         39:f7:ce:2b:bf:03:21:66:a1:d8:43:50:6e:67:90:6c:86:c8:
         ef:39:bf:51:01:b2:ec:c7:b7:74:b7:fc:a1:89:67:41:64:5e:
         d6:8c:2c:6c:ec:dc:d9:38:e7:80:c6:9d:5b:fa:05:e8:58:3a:
         45:41:28:13:9d:cd:dc:44:4d:17:95:86:c6:1b:78:ea:52:f3:
         6e:84:fe:fe:5e:9f:47:82:e5:f1:78:61:e2:4a:af:b0:96:bb:
         9e:ca:02:cb:6c:17:52:d1:02:5b:2b:4e:0d:e7:c6:40:9b:58:
         72:60:a8:45:59:0a:95:4c:2e:2d:65:92:80:cb:3a:93:a4:7e:
         2d:99:7c:e0:ea:20:f6:a8:69:82:e5:fe:65:62:be:7d:08:9b:
         20:86:32:38:94:db:87:8f:e1:55:a7:d0:83:40:bf:90:ad:19:
         46:c6:ad:b7:07:74:78:72:1f:f0:a2:0f:97:46:b6:97:70:83:
         f1:5a:f3:18
-----BEGIN CERTIFICATE-----
MIIFJTCCBA2gAwIBAgIUSCfjtimYiG76lBwkdk6gbyRH/qYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjYzODZGQUJFQTM5MjEwQjY2NUE2QTU1QUU1REE2NkJF
Njc0MTU5NzAeFw0yNTA3MDMxNTQ4NTFaFw0yNjA3MDIxNTUzNTFaMDMxMTAvBgNV
BAMTKDI2REFFQzNGRDU0ODNFMDAzRkVENTMxRTQxOTRFQzZCNjRCNTU0REYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxbe3pWfXO9f+LyrDopyPnxkw9
hYR2bUQcR++a2VOEkJB+v2Ie1zI1y8sHKawfxCVVjypa4S7C/b5Mq6+djwyzUpv6
1gLGzsxLzHPtuVNClmj1DW8+EuHsbLroQH/7xEdf0MoF+T9QcaMWyg64cwbAfL/j
JonojCVDG99WZ5DjMQCNMOO5CYDvIBue0BwigZzfQ1P7GwakKrhO4f7OAKK3kmZo
1kKwXnbPmfzcYROZoMXhExJ5rU50GTGRiv+Cc1y0G/D64j+fYA6+ejRW6YAPrNDY
9Vk3zdAkz9pVaz1341AWfoTAlC1q1gaWxKtGDwaxGHzcY0qamQitWuTTMiODAgMB
AAGjggIvMIICKzAdBgNVHQ4EFgQUJtrsP9VIPgA/7VMeQZTsa2S1VN8wHwYDVR0j
BBgwFoAU9jhvq+o5IQtmWmpVrl2ma+Z0FZcwDgYDVR0PAQH/BAQDAgeAMG4GA1Ud
HwRnMGUwY6BhoF+GXXJzeW5jOi8vcnBraS0wMS5wZHhuZXQudWsvcmVwby9wYXJh
ZG94bmV0d29ya3MvOC9GNjM4NkZBQkVBMzkyMTBCNjY1QTZBNTVBRTVEQTY2QkU2
NzQxNTk3LmNybDCBkwYIKwYBBQUHAQEEgYYwgYMwgYAGCCsGAQUFBzAChnRyc3lu
YzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYz
ZTAxODU3NTVjOTFiZTNmOWQvNy9GNjM4NkZBQkVBMzkyMTBCNjY1QTZBNTVBRTVE
QTY2QkU2NzQxNTk3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzAL
hnVyc3luYzovL3Jwa2ktMDEucGR4bmV0LnVrL3JlcG8vcGFyYWRveG5ldHdvcmtz
LzgvMzI2MTMwMzUzYTY0NjY2MzM0M2EzMTY1MzIzNzNhM2EyZjM0MzgyZDMxMzIz
ODIwM2QzZTIwMzUzMjMwMzIzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF38QeJzANBgkqhkiG9w0B
AQsFAAOCAQEAcwFMCPCWTFxsrtopPvRjKZIaTw+1G42vz7DvKtyqovUUqmdiZqDG
7PMTSOH/cbR77TpusFpcwRKEtD35j4ygUXbJmRrzq5eGOffOK78DIWah2ENQbmeQ
bIbI7zm/UQGy7Me3dLf8oYlnQWRe1owsbOzc2TjngMadW/oF6Fg6RUEoE53N3ERN
F5WGxht46lLzboT+/l6fR4Ll8Xhh4kqvsJa7nsoCy2wXUtECWytODefGQJtYcmCo
RVkKlUwuLWWSgMs6k6R+LZl84Oog9qhpguX+ZWK+fQibIIYyOJTbh4/hVafQg0C/
kK0ZRsattwd0eHIf8KIPl0a2l3CD8VrzGA==
-----END CERTIFICATE-----
Generated at Sat Jul 5 11:54:00 2025 by rpki-client