Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a323032343a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a323032343a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          hRVm3KGpoqlKGgLAXmokxak+wJkLLKYyBTulC4cz4BU=
Subject key identifier:   32:53:C2:B0:5E:AB:DD:73:E6:5E:D5:4E:D8:C8:CC:C6:A0:8A:53:CB
Certificate issuer:       /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial:       0CD1BB91DAFFD4ACE0DA843829E67827F301F495
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a323032343a3a2f34382d313238203d3e203532303235.roa
Signing time:             Thu 04 Jun 2026 16:32:46 +0000
ROA not before:           Thu 04 Jun 2026 16:27:46 +0000
ROA not after:            Thu 03 Jun 2027 16:32:46 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:2024::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:d1:bb:91:da:ff:d4:ac:e0:da:84:38:29:e6:78:27:f3:01:f4:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
        Validity
            Not Before: Jun  4 16:27:46 2026 GMT
            Not After : Jun  3 16:32:46 2027 GMT
        Subject: CN=3253C2B05EABDD73E65ED54ED8C8CCC6A08A53CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:70:8b:30:69:69:bc:0d:4b:26:e4:c4:bb:b9:
                    c1:00:a8:7a:6f:b6:5b:60:cb:47:b2:4b:c0:04:9a:
                    66:bc:df:1b:64:f9:8c:b8:93:da:60:4e:78:bf:9d:
                    1e:80:b9:7b:9e:af:54:94:6a:cd:ae:2d:ae:83:19:
                    1c:00:7b:91:af:e3:3c:ba:9f:e1:5e:53:c4:fc:3b:
                    84:da:f0:f1:d4:e2:86:4f:bc:53:b5:be:fb:21:33:
                    55:dc:95:ff:48:47:9b:db:62:81:31:c8:29:ac:72:
                    8f:3b:fe:3d:87:f2:6c:89:cd:af:cf:35:ab:72:c2:
                    3a:cb:ae:0b:71:01:a9:bb:65:b7:6c:85:cc:97:33:
                    0d:0e:35:5b:f3:ca:4d:6d:77:a8:33:f7:6d:a5:ad:
                    a3:77:fa:97:ee:60:e5:64:ea:f3:a1:e6:be:4c:48:
                    01:61:ea:15:26:a7:49:52:91:78:9b:f2:9c:6c:20:
                    0b:98:5d:96:31:62:6a:60:64:51:51:d0:90:b0:a6:
                    3d:e1:d7:92:22:d4:dd:6d:a3:cc:77:8c:08:07:d0:
                    f1:e7:9b:d0:6d:7c:c5:7d:7e:58:88:8b:15:16:2e:
                    f6:a9:f0:59:ed:34:21:2b:e7:af:d5:b3:95:8d:7e:
                    39:57:e1:7e:f1:39:db:49:25:d5:b3:5f:c3:9b:d1:
                    64:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:53:C2:B0:5E:AB:DD:73:E6:5E:D5:4E:D8:C8:CC:C6:A0:8A:53:CB
            X509v3 Authority Key Identifier:
                keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a323032343a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:2024::/48

    Signature Algorithm: sha256WithRSAEncryption
         03:25:1e:21:34:69:74:d2:cd:07:af:0c:26:61:39:6a:2d:46:
         5d:b7:56:79:df:1f:2f:cb:cc:3c:4c:27:bf:83:61:46:6e:a4:
         fa:ff:eb:08:63:30:69:32:11:28:37:b4:ae:e3:fb:14:a9:16:
         66:32:41:6a:3f:57:47:d4:2c:92:d5:18:a8:d7:1e:98:c7:09:
         58:e8:e1:cd:4a:b3:7e:16:b3:c9:66:13:bb:20:38:60:e8:71:
         a5:01:11:f3:ce:74:aa:29:85:33:32:2d:7b:a1:aa:9f:39:6d:
         cf:d7:d1:8c:e3:dd:8e:54:17:c3:79:bb:69:df:01:ac:c9:15:
         97:43:16:6e:0f:ed:c7:44:c1:18:52:8c:4e:85:87:77:a6:77:
         6f:67:17:54:bb:1d:2c:46:a4:2b:22:11:06:f9:a0:6f:a0:9c:
         64:ca:75:57:c8:c8:02:56:a3:c5:3c:fb:64:98:47:e3:8f:30:
         3e:2a:50:df:56:4e:33:1c:ec:f3:c5:c3:d1:42:40:bf:61:ab:
         16:4d:13:20:89:49:43:f4:46:6f:08:77:f2:9b:b7:a4:d3:e6:
         ab:c5:f3:93:3e:1c:42:af:02:82:4f:29:1a:0e:f2:4b:07:1b:
         5c:84:2f:07:62:3a:82:27:65:29:db:ff:07:5c:f5:df:02:67:
         df:d1:12:0f
-----BEGIN CERTIFICATE-----
MIIFJTCCBA2gAwIBAgIUDNG7kdr/1Kzg2oQ4KeZ4J/MB9JUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjYzODZGQUJFQTM5MjEwQjY2NUE2QTU1QUU1REE2NkJF
Njc0MTU5NzAeFw0yNjA2MDQxNjI3NDZaFw0yNzA2MDMxNjMyNDZaMDMxMTAvBgNV
BAMTKDMyNTNDMkIwNUVBQkRENzNFNjVFRDU0RUQ4QzhDQ0M2QTA4QTUzQ0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCLcIswaWm8DUsm5MS7ucEAqHpv
tltgy0eyS8AEmma83xtk+Yy4k9pgTni/nR6AuXuer1SUas2uLa6DGRwAe5Gv4zy6
n+FeU8T8O4Ta8PHU4oZPvFO1vvshM1Xclf9IR5vbYoExyCmsco87/j2H8myJza/P
NatywjrLrgtxAam7ZbdshcyXMw0ONVvzyk1td6gz922lraN3+pfuYOVk6vOh5r5M
SAFh6hUmp0lSkXib8pxsIAuYXZYxYmpgZFFR0JCwpj3h15Ii1N1to8x3jAgH0PHn
m9BtfMV9fliIixUWLvap8FntNCEr56/Vs5WNfjlX4X7xOdtJJdWzX8Ob0WRHAgMB
AAGjggIvMIICKzAdBgNVHQ4EFgQUMlPCsF6r3XPmXtVO2MjMxqCKU8swHwYDVR0j
BBgwFoAU9jhvq+o5IQtmWmpVrl2ma+Z0FZcwDgYDVR0PAQH/BAQDAgeAMG4GA1Ud
HwRnMGUwY6BhoF+GXXJzeW5jOi8vcnBraS0wMS5wZHhuZXQudWsvcmVwby9wYXJh
ZG94bmV0d29ya3MvOC9GNjM4NkZBQkVBMzkyMTBCNjY1QTZBNTVBRTVEQTY2QkU2
NzQxNTk3LmNybDCBkwYIKwYBBQUHAQEEgYYwgYMwgYAGCCsGAQUFBzAChnRyc3lu
YzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYz
ZTAxODU3NTVjOTFiZTNmOWQvNy9GNjM4NkZBQkVBMzkyMTBCNjY1QTZBNTVBRTVE
QTY2QkU2NzQxNTk3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzAL
hnVyc3luYzovL3Jwa2ktMDEucGR4bmV0LnVrL3JlcG8vcGFyYWRveG5ldHdvcmtz
LzgvMzI2MTMwMzUzYTY0NjY2MzM0M2EzMjMwMzIzNDNhM2EyZjM0MzgyZDMxMzIz
ODIwM2QzZTIwMzUzMjMwMzIzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF38QgJDANBgkqhkiG9w0B
AQsFAAOCAQEAAyUeITRpdNLNB68MJmE5ai1GXbdWed8fL8vMPEwnv4NhRm6k+v/r
CGMwaTIRKDe0ruP7FKkWZjJBaj9XR9QsktUYqNcemMcJWOjhzUqzfhazyWYTuyA4
YOhxpQER8850qimFMzIte6Gqnzltz9fRjOPdjlQXw3m7ad8BrMkVl0MWbg/tx0TB
GFKMToWHd6Z3b2cXVLsdLEakKyIRBvmgb6CcZMp1V8jIAlajxTz7ZJhH448wPipQ
31ZOMxzs88XD0UJAv2GrFk0TIIlJQ/RGbwh38pu3pNPmq8Xzkz4cQq8Cgk8pGg7y
SwcbXIQvB2I6gidlKdv/B1z13wJn39ESDw==
-----END CERTIFICATE-----
Generated at Thu Jun 11 21:58:30 2026 by rpki-client