Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a316532373a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a316532373a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          cu1FPlP+pzd27YRO/dxrFsAAIYQX/tajMUO0OuUIdTE=
Subject key identifier:   AD:1D:2E:C2:BD:EA:84:B1:6B:96:FA:8D:62:DD:E1:3A:C3:8B:F1:5C
Certificate issuer:       /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial:       1EB4282C8BAB1E46522C88C87AC1126D15E7B8D8
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a316532373a3a2f34382d313238203d3e203532303235.roa
Signing time:             Thu 04 Jun 2026 16:32:52 +0000
ROA not before:           Thu 04 Jun 2026 16:27:52 +0000
ROA not after:            Thu 03 Jun 2027 16:32:52 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:1e27::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:b4:28:2c:8b:ab:1e:46:52:2c:88:c8:7a:c1:12:6d:15:e7:b8:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
        Validity
            Not Before: Jun  4 16:27:52 2026 GMT
            Not After : Jun  3 16:32:52 2027 GMT
        Subject: CN=AD1D2EC2BDEA84B16B96FA8D62DDE13AC38BF15C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d0:81:29:bc:c6:d3:5d:37:50:17:f5:0f:66:
                    59:91:b4:a9:f5:70:b2:f6:6a:b0:ff:0a:a3:a5:5d:
                    60:19:0e:97:38:41:55:72:43:42:d6:06:0a:fe:f5:
                    91:e3:ff:ba:be:8e:6a:d7:aa:87:5a:2d:93:3a:c8:
                    dd:36:57:f5:da:a8:61:b2:55:a3:7c:67:53:75:7c:
                    dd:22:1c:64:df:11:6c:39:87:b6:6b:61:47:6b:97:
                    2a:b0:74:95:0a:d6:4e:44:04:17:2a:33:a1:64:d3:
                    a0:80:57:86:4d:fa:75:f0:f8:c6:9c:3a:7f:ef:12:
                    dd:a4:44:95:23:61:99:ec:c6:88:a1:1d:55:ca:56:
                    43:e0:9e:d1:5c:17:7f:d6:eb:74:12:fd:80:ad:9e:
                    4a:ed:40:28:16:a7:60:37:fe:22:29:46:42:a3:36:
                    02:5c:e1:98:76:48:4e:25:34:a3:2f:2e:68:1f:58:
                    69:5b:53:0d:ec:02:95:1d:c2:97:7c:1d:dd:be:a8:
                    b3:9d:3d:c9:a6:15:d6:d8:ca:88:f3:c0:77:10:b4:
                    55:d5:31:30:b4:4b:f8:a5:06:4b:1f:88:c7:c3:79:
                    de:20:40:e0:86:86:95:01:45:7e:8a:f4:0e:50:6e:
                    8d:25:0f:07:c4:ba:ae:d2:a2:a3:39:d5:8f:23:e4:
                    0a:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:1D:2E:C2:BD:EA:84:B1:6B:96:FA:8D:62:DD:E1:3A:C3:8B:F1:5C
            X509v3 Authority Key Identifier:
                keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a316532373a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:1e27::/48

    Signature Algorithm: sha256WithRSAEncryption
         31:c4:d8:f2:a1:c3:3f:1e:6b:70:68:0e:9a:93:e0:3f:76:6d:
         a2:7a:62:35:0e:b1:20:1c:15:4a:83:2a:4f:dc:7e:48:6c:77:
         e8:d0:02:1c:e4:ee:88:a6:df:7e:2d:fa:59:9f:75:53:7f:1d:
         48:b8:d8:a7:6d:9f:92:d7:a0:48:8d:23:ae:ef:a0:0b:63:98:
         ed:ba:ef:61:b6:89:e2:60:4a:37:60:b4:cf:c8:7c:09:bf:a1:
         f9:66:e9:19:d2:59:ab:bf:10:14:b7:42:7f:b5:c0:f8:3c:2e:
         ab:b8:5a:8d:0e:b8:9f:c3:67:80:63:42:74:ef:ac:ae:be:4c:
         cb:30:11:3f:ff:b5:d7:2e:08:82:b5:ad:77:4c:e5:62:ad:a5:
         e3:ba:51:91:6c:9a:a1:8f:33:bf:8b:d5:c6:e7:39:b1:57:1b:
         d8:3b:d4:fd:9a:a4:fe:96:77:c6:e7:83:60:78:ef:0d:7e:c5:
         51:39:26:8a:65:85:a9:79:06:af:ed:29:60:3c:e7:29:a1:e6:
         2b:4b:eb:c0:2a:20:9d:fe:dd:5e:bd:44:a0:c0:73:04:18:b5:
         34:e3:a8:9e:4e:2b:f2:58:15:44:23:cd:60:92:0d:42:32:f8:
         df:61:89:78:36:b5:98:59:9d:3a:b6:69:04:b3:4a:70:98:aa:
         a6:34:53:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 21:58:35 2026 by rpki-client