Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a323032353a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a323032353a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          scidgquuaBG4+cPWQFWxD8jz7aLJyX9FenhJHSer8aI=
Subject key identifier:   90:3F:BB:61:E4:C2:7C:88:3C:CF:95:E9:37:5C:54:93:20:A1:16:F2
Certificate issuer:       /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial:       64001C039B78774CE2D89C83E0D0E0AE3D4D5498
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a323032353a3a2f34382d313238203d3e203532303235.roa
Signing time:             Thu 04 Jun 2026 16:33:04 +0000
ROA not before:           Thu 04 Jun 2026 16:28:04 +0000
ROA not after:            Thu 03 Jun 2027 16:33:04 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:2025::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:00:1c:03:9b:78:77:4c:e2:d8:9c:83:e0:d0:e0:ae:3d:4d:54:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
        Validity
            Not Before: Jun  4 16:28:04 2026 GMT
            Not After : Jun  3 16:33:04 2027 GMT
        Subject: CN=903FBB61E4C27C883CCF95E9375C549320A116F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:61:c7:0f:fc:33:26:29:0d:70:73:5f:31:01:
                    e8:dd:91:71:fb:e0:d1:e1:72:2a:32:f5:97:1d:6f:
                    21:b9:42:c6:2f:34:b1:63:7d:5d:14:0b:f0:e6:04:
                    cf:d1:eb:19:c4:fc:85:50:72:d0:2c:e9:a3:fc:4f:
                    79:0d:30:2e:d7:e6:94:b9:05:e5:ee:13:eb:40:89:
                    87:0d:69:c1:49:bf:7b:7f:65:23:3c:b6:95:99:27:
                    69:2a:ba:ae:56:2f:69:4a:32:c5:94:c7:f9:72:76:
                    5a:4d:5c:18:36:b4:ea:cb:b1:65:52:3b:7f:16:99:
                    c3:ed:82:18:a4:62:12:78:0c:f0:d2:6a:d1:fa:f8:
                    5b:97:a1:f5:eb:ec:73:da:ee:86:c4:29:c7:6d:3e:
                    75:50:37:a1:a2:be:cb:13:e4:8f:2f:db:07:b7:76:
                    63:0f:73:22:c0:79:99:bc:ae:6a:50:ee:52:aa:3a:
                    55:91:e5:bd:e7:be:2f:77:7e:a5:17:17:b0:42:ed:
                    1c:9a:92:18:5e:f2:54:1b:6c:d8:3b:d0:df:10:d8:
                    af:68:e5:40:ee:85:85:76:50:66:0b:08:78:ba:84:
                    0d:72:e8:37:60:4c:9c:63:ae:ac:e3:c6:6b:4e:76:
                    31:32:a2:3b:87:1f:91:01:74:4c:86:c7:b1:8f:5f:
                    34:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:3F:BB:61:E4:C2:7C:88:3C:CF:95:E9:37:5C:54:93:20:A1:16:F2
            X509v3 Authority Key Identifier:
                keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a323032353a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:2025::/48

    Signature Algorithm: sha256WithRSAEncryption
         83:b1:0c:7b:2c:79:b6:c0:f7:07:e0:4c:5d:42:af:ad:0d:3c:
         81:a0:4f:af:3e:fa:ea:93:73:07:f0:fa:bc:59:17:59:a9:18:
         a5:a0:e1:cc:86:63:57:fe:34:0c:a2:1e:a5:5e:2f:a8:50:90:
         63:55:3e:85:ed:9b:58:8f:59:87:30:f8:f9:53:4b:58:ec:49:
         57:e2:57:61:aa:9e:b5:5a:53:cf:98:40:29:b1:d2:54:1e:63:
         bd:5c:25:29:bc:16:b5:f4:82:7e:a2:03:50:8c:6f:3a:10:bb:
         a9:b2:5f:12:d1:ab:33:02:76:15:2b:c5:dd:69:78:b3:4e:29:
         26:4b:7a:80:7b:11:89:a2:d8:aa:28:94:24:2c:fd:a9:f9:4f:
         d1:be:3f:c3:f8:66:51:c2:15:48:78:66:4d:93:cb:e1:01:d7:
         eb:80:1b:fe:f6:f5:c0:90:05:b1:b5:c6:10:c0:cb:f5:47:97:
         5f:02:53:10:0e:70:e5:46:f3:31:70:c2:3f:eb:8e:84:c4:65:
         76:30:2a:b6:a3:ac:38:ba:0c:15:2b:4a:3c:db:a0:df:df:08:
         3b:63:b3:a0:e4:1a:4b:33:32:90:45:e6:4a:2b:0d:f9:69:71:
         f8:49:66:29:68:21:ba:23:b1:67:ca:c7:83:46:5c:f0:d0:4e:
         c8:60:93:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 21:58:29 2026 by rpki-client