Route Origin Authorization

$ rpki-client -vvvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a323032343a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a323032343a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          n/ANAOCuSbgLN9gkCQ77qM7FgQU7RT766Jwpo2wNdGw=
Subject key identifier:   33:BA:DC:36:B0:66:99:38:1C:F5:40:86:8E:D2:34:17:0D:7A:DC:7E
Certificate issuer:       /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial:       5EA6D96FB9616182211CFD8A21A2CB4EE44697B5
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a323032343a3a2f34382d313238203d3e203532303235.roa
Signing time:             Sat 15 Aug 2026 23:20:04 +0000
ROA not before:           Sat 15 Aug 2026 23:15:04 +0000
ROA not after:            Sat 14 Aug 2027 23:20:04 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:2024::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Aug 2026 22:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:a6:d9:6f:b9:61:61:82:21:1c:fd:8a:21:a2:cb:4e:e4:46:97:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
        Validity
            Not Before: Aug 15 23:15:04 2026 GMT
            Not After : Aug 14 23:20:04 2027 GMT
        Subject: CN=33BADC36B06699381CF540868ED234170D7ADC7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:5e:dd:ac:9b:7d:fa:09:80:a7:0d:24:ab:82:
                    59:19:ab:f2:47:ea:40:14:5e:68:1b:1f:2d:5f:df:
                    cf:46:2b:69:dd:c2:c2:05:3c:ae:ed:4e:3c:31:3b:
                    b8:9d:3a:c9:38:25:4e:e8:4c:61:61:8e:fa:09:0c:
                    c2:6f:47:2c:72:55:60:ff:e9:b1:fa:f2:dc:e6:62:
                    58:be:ab:be:94:d9:8a:87:49:aa:f5:a0:15:21:b5:
                    16:88:19:96:a8:80:55:6a:a0:c0:7d:09:fd:ae:80:
                    c7:a7:3d:fa:8c:db:03:a4:c9:96:fd:85:70:39:bf:
                    cf:a7:7a:00:29:73:f2:7d:f7:29:17:a0:85:f0:a7:
                    e7:d8:76:fc:73:0c:fc:c6:91:8b:a6:9d:7d:f5:96:
                    63:78:ab:27:30:80:10:50:69:db:42:be:af:49:ff:
                    9c:a2:fb:f4:9b:0f:0a:0d:04:b4:f8:09:24:76:db:
                    82:c4:f3:da:88:be:d8:40:d1:28:f9:10:16:55:94:
                    1d:3c:dc:5d:db:2a:d9:b4:16:2e:24:73:40:2d:0d:
                    b9:bf:86:20:3d:5d:16:cf:ae:b6:b8:fa:20:b4:c5:
                    52:45:7b:02:f3:70:0a:f6:43:b2:0b:a2:8e:2b:95:
                    e8:0a:b1:07:02:68:78:bc:a9:7f:91:1f:fb:68:e8:
                    ae:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:BA:DC:36:B0:66:99:38:1C:F5:40:86:8E:D2:34:17:0D:7A:DC:7E
            X509v3 Authority Key Identifier:
                keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a323032343a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:2024::/48

    Signature Algorithm: sha256WithRSAEncryption
         29:a3:01:dd:4f:d3:d6:b1:f7:b8:a8:1f:47:bc:ac:9b:51:59:
         fd:e4:ea:0d:41:66:28:69:71:ac:95:0a:b8:a6:7e:95:d4:1a:
         cd:fc:03:48:38:23:3b:47:2f:9c:e4:44:d8:4d:cb:f1:ab:ba:
         2f:0f:c3:7e:f0:b1:42:8c:b6:30:cc:da:2a:bd:89:b9:e7:3c:
         61:77:3e:47:ff:a8:ce:d8:a0:fb:49:b8:01:0d:a3:ed:95:70:
         ae:a4:60:c8:89:82:cc:f2:f4:8b:67:af:94:52:b1:51:8a:3d:
         e0:24:81:63:2e:4f:7d:59:d9:85:68:21:8e:3c:66:23:7f:b0:
         cf:d5:28:25:66:71:80:fd:41:4b:66:60:3a:ea:22:fb:41:9b:
         63:dd:03:51:fc:de:10:9e:08:03:d7:30:89:4e:0c:bf:36:20:
         10:84:06:29:4a:5d:3c:58:38:87:7d:06:1b:9f:e6:e8:f6:a1:
         95:b6:a7:18:0f:85:b1:a1:ab:05:58:4e:26:6f:d9:fa:d6:e2:
         a1:9e:35:db:84:33:5a:e0:e0:69:cb:ca:6c:b2:22:e4:76:6b:
         cc:2a:76:4f:83:e9:35:96:73:c5:df:c4:d6:d0:ec:62:61:e0:
         e5:36:4d:df:09:7d:b8:5a:21:ff:a1:51:dd:0a:c6:07:be:e7:
         df:c7:5e:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 08:22:24 2026 by rpki-client