Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a316632333a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a316632333a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          43N1vLGENxJZQ87f9WWMYoqbniOPT9dfXHxFn3brczc=
Subject key identifier:   3A:EA:91:74:33:A4:09:DF:A6:D8:7C:9A:A6:51:74:8B:EA:67:25:D7
Certificate issuer:       /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial:       10F99B58FF6808608D6704488DBBE4398AC46135
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a316632333a3a2f34382d313238203d3e203532303235.roa
Signing time:             Thu 04 Jun 2026 16:33:04 +0000
ROA not before:           Thu 04 Jun 2026 16:28:04 +0000
ROA not after:            Thu 03 Jun 2027 16:33:04 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:1f23::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:f9:9b:58:ff:68:08:60:8d:67:04:48:8d:bb:e4:39:8a:c4:61:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
        Validity
            Not Before: Jun  4 16:28:04 2026 GMT
            Not After : Jun  3 16:33:04 2027 GMT
        Subject: CN=3AEA917433A409DFA6D87C9AA651748BEA6725D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:5a:e4:07:f2:48:27:76:c1:72:f4:66:65:0a:
                    23:6b:41:4b:3f:2d:f2:ff:0b:1f:aa:ce:fd:f1:1f:
                    85:46:07:0a:c0:cc:e4:bf:7d:a6:dd:04:31:70:00:
                    57:59:b4:b8:69:0d:a7:76:56:6d:09:e1:49:16:ea:
                    eb:31:d5:62:d6:6e:80:31:49:b6:1e:55:93:d7:ea:
                    1b:ab:90:ff:73:49:d6:8f:0b:2d:71:1b:84:d9:29:
                    b1:8b:fa:87:b3:8f:76:fc:b5:c8:7a:a0:55:1e:dd:
                    60:15:7d:a3:dd:9c:b9:d9:59:c2:9a:52:02:f4:23:
                    6a:a2:10:67:b4:9f:ac:b2:bc:5a:93:73:47:d9:19:
                    25:69:a2:f7:91:05:bb:31:dc:28:59:85:58:5f:63:
                    4a:5e:94:e9:38:24:e1:25:53:4d:73:e3:ee:18:a5:
                    20:3f:c9:95:6c:09:09:78:33:10:21:88:7d:ca:9f:
                    d5:5f:a8:4e:7b:9c:eb:fa:6e:b5:08:9c:03:8d:c8:
                    70:01:ae:92:72:68:29:de:9f:dc:fe:75:67:3a:68:
                    f8:13:0a:fe:4f:22:78:5c:de:aa:43:7f:99:9d:24:
                    2c:0d:cd:94:11:b8:c4:ff:8d:9d:f3:fc:92:d1:1b:
                    c5:e8:5f:c9:a2:4a:aa:40:1b:e0:4f:9a:bf:9d:64:
                    5a:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:EA:91:74:33:A4:09:DF:A6:D8:7C:9A:A6:51:74:8B:EA:67:25:D7
            X509v3 Authority Key Identifier:
                keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a316632333a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:1f23::/48

    Signature Algorithm: sha256WithRSAEncryption
         6b:c5:22:ab:96:53:72:06:95:b0:a9:82:a4:38:1d:f7:97:57:
         38:37:58:0f:13:0c:cc:15:89:a4:5e:fa:86:7f:d6:c6:a7:4b:
         f0:51:ae:7f:b5:1a:70:2c:16:d8:cf:66:2f:57:78:13:02:a8:
         c1:2b:b8:8c:5e:ac:ec:1b:f5:9d:74:d0:ca:c5:70:0a:9f:08:
         c7:32:c1:cd:e3:4e:72:13:f4:d6:83:12:42:81:8e:e9:e3:b2:
         4a:d4:cb:be:34:55:a3:30:9b:de:1f:d0:a7:4e:2c:18:92:e8:
         cc:60:26:a9:c6:4d:ae:14:ee:0b:cb:a1:42:7b:31:1a:dd:ed:
         00:73:09:ef:49:d4:d8:28:64:fc:0a:d5:19:d8:b4:f0:68:dd:
         30:15:b2:cb:63:b4:d0:3d:63:0e:d1:11:65:93:98:9a:e3:70:
         62:9f:db:ba:8e:0c:e6:32:e7:cd:0d:a1:5d:9a:99:3c:f6:1b:
         45:5e:d7:c3:83:e5:30:db:d5:7c:41:59:f7:fd:6d:90:57:4b:
         74:25:31:57:2d:37:d7:09:f3:cf:79:02:ed:ad:26:ba:95:6a:
         0b:1a:58:e1:b1:1a:a4:d9:af:98:67:1c:a8:fc:ae:a5:78:19:
         21:a6:cc:28:b7:fb:d4:fc:ba:00:ca:c4:6a:a3:b2:67:e2:cb:
         18:8f:51:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 21:58:30 2026 by rpki-client