Route Origin Authorization

$ rpki-client -vvvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a323132363a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a323132363a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          EHc7/5+3f14r3ok3y9+NHOsCImZ8lLhCqKpetHqzfS4=
Subject key identifier:   31:3A:90:14:E7:00:DF:32:D5:E3:B7:0B:F2:96:C5:A3:DF:46:64:B6
Certificate issuer:       /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial:       7751E3BA537F907449E6C5DABBFD43F7F6562A66
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a323132363a3a2f34382d313238203d3e203532303235.roa
Signing time:             Sat 15 Aug 2026 23:20:13 +0000
ROA not before:           Sat 15 Aug 2026 23:15:13 +0000
ROA not after:            Sat 14 Aug 2027 23:20:13 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:2126::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Aug 2026 22:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:51:e3:ba:53:7f:90:74:49:e6:c5:da:bb:fd:43:f7:f6:56:2a:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
        Validity
            Not Before: Aug 15 23:15:13 2026 GMT
            Not After : Aug 14 23:20:13 2027 GMT
        Subject: CN=313A9014E700DF32D5E3B70BF296C5A3DF4664B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:2d:d5:04:25:f5:94:da:26:dc:c4:a7:4b:30:
                    f4:46:fc:4d:3d:b2:a2:0e:84:50:6e:3d:63:55:7f:
                    88:4e:92:17:07:2d:a4:ad:52:09:8a:1f:7f:39:0a:
                    81:b3:76:cc:cf:7d:87:2f:4b:ae:1c:b4:08:e0:76:
                    67:4c:9d:5e:69:ce:41:be:4c:c3:58:29:04:2b:d7:
                    f5:8b:dd:7e:40:a7:69:b5:b6:c3:9d:11:1b:de:97:
                    0b:3b:b6:eb:fa:96:78:50:68:f5:0f:f3:35:2c:52:
                    15:1f:51:5a:91:ec:80:d0:a6:c5:d2:b6:b5:13:06:
                    f5:9e:c4:e6:14:c7:bb:61:5d:9b:94:45:5f:cc:36:
                    a8:47:d0:a0:8f:43:94:53:a9:4d:0c:54:82:c7:b0:
                    b8:74:be:2d:92:df:9a:8e:46:6b:77:73:ae:07:f5:
                    d7:2c:f1:e6:0d:36:5c:fc:b6:09:36:66:91:e6:60:
                    39:7e:c8:ad:a8:57:6b:b0:a5:aa:08:f2:b7:2c:c9:
                    ba:4a:3f:2d:e6:3a:7f:23:88:ed:36:ce:20:9c:ad:
                    92:38:c9:c4:e3:19:22:23:bb:e0:eb:d7:9f:a8:09:
                    f1:4d:e2:35:2f:d3:97:7d:3c:1a:dd:53:97:b9:b8:
                    8b:b2:0e:65:70:63:9e:20:8f:5b:1a:04:12:17:2d:
                    55:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:3A:90:14:E7:00:DF:32:D5:E3:B7:0B:F2:96:C5:A3:DF:46:64:B6
            X509v3 Authority Key Identifier:
                keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a323132363a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:2126::/48

    Signature Algorithm: sha256WithRSAEncryption
         5e:93:2f:6f:29:a8:09:77:4d:de:9a:17:28:07:13:97:6f:d7:
         bf:3e:ce:cf:c9:9f:cf:0f:a2:e1:31:70:d9:c9:95:87:49:81:
         bd:c1:64:45:58:0d:f3:ac:d6:56:0b:0c:22:59:a3:bd:ab:ed:
         4a:1f:01:1a:0a:18:5f:e0:9a:77:55:e4:d0:47:0b:fd:f6:fc:
         8a:df:a4:b9:19:ad:61:26:55:03:a0:ab:76:0b:b1:96:52:1a:
         f8:db:d0:91:47:ea:3d:fb:22:67:ad:da:56:da:45:ae:e1:7f:
         fa:96:2c:6b:7f:46:e0:38:24:dc:d8:03:97:fb:2b:96:fe:18:
         3a:bb:0b:b0:bb:36:77:c5:d4:27:15:a4:20:26:69:07:e7:82:
         63:41:21:7a:1a:ce:0b:ca:97:2a:5b:49:0f:02:c7:e5:e8:b1:
         0e:b2:fa:2f:00:3b:e6:54:46:f3:97:fa:4a:6d:10:d3:7b:bf:
         f0:bb:87:34:59:70:b1:32:73:7c:7a:47:a5:f1:f9:cf:d7:d0:
         ae:70:88:c6:46:75:af:62:71:71:4e:ed:89:b8:31:6e:4b:e7:
         ee:53:67:ee:4c:6f:11:cb:18:bb:25:aa:9e:11:56:f7:08:2b:
         06:86:a8:bd:1d:04:44:bb:f7:f7:36:11:16:e5:24:c6:77:8c:
         b4:33:26:4a
-----BEGIN CERTIFICATE-----
MIIFJTCCBA2gAwIBAgIUd1HjulN/kHRJ5sXau/1D9/ZWKmYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjYzODZGQUJFQTM5MjEwQjY2NUE2QTU1QUU1REE2NkJF
Njc0MTU5NzAeFw0yNjA4MTUyMzE1MTNaFw0yNzA4MTQyMzIwMTNaMDMxMTAvBgNV
BAMTKDMxM0E5MDE0RTcwMERGMzJENUUzQjcwQkYyOTZDNUEzREY0NjY0QjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3LdUEJfWU2ibcxKdLMPRG/E09
sqIOhFBuPWNVf4hOkhcHLaStUgmKH385CoGzdszPfYcvS64ctAjgdmdMnV5pzkG+
TMNYKQQr1/WL3X5Ap2m1tsOdERvelws7tuv6lnhQaPUP8zUsUhUfUVqR7IDQpsXS
trUTBvWexOYUx7thXZuURV/MNqhH0KCPQ5RTqU0MVILHsLh0vi2S35qORmt3c64H
9dcs8eYNNlz8tgk2ZpHmYDl+yK2oV2uwpaoI8rcsybpKPy3mOn8jiO02ziCcrZI4
ycTjGSIju+Dr15+oCfFN4jUv05d9PBrdU5e5uIuyDmVwY54gj1saBBIXLVVzAgMB
AAGjggIvMIICKzAdBgNVHQ4EFgQUMTqQFOcA3zLV47cL8pbFo99GZLYwHwYDVR0j
BBgwFoAU9jhvq+o5IQtmWmpVrl2ma+Z0FZcwDgYDVR0PAQH/BAQDAgeAMG4GA1Ud
HwRnMGUwY6BhoF+GXXJzeW5jOi8vcnBraS0wMS5wZHhuZXQudWsvcmVwby9wYXJh
ZG94bmV0d29ya3MvOC9GNjM4NkZBQkVBMzkyMTBCNjY1QTZBNTVBRTVEQTY2QkU2
NzQxNTk3LmNybDCBkwYIKwYBBQUHAQEEgYYwgYMwgYAGCCsGAQUFBzAChnRyc3lu
YzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYz
ZTAxODU3NTVjOTFiZTNmOWQvNy9GNjM4NkZBQkVBMzkyMTBCNjY1QTZBNTVBRTVE
QTY2QkU2NzQxNTk3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzAL
hnVyc3luYzovL3Jwa2ktMDEucGR4bmV0LnVrL3JlcG8vcGFyYWRveG5ldHdvcmtz
LzgvMzI2MTMwMzUzYTY0NjY2MzM0M2EzMjMxMzIzNjNhM2EyZjM0MzgyZDMxMzIz
ODIwM2QzZTIwMzUzMjMwMzIzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF38QhJjANBgkqhkiG9w0B
AQsFAAOCAQEAXpMvbymoCXdN3poXKAcTl2/Xvz7Oz8mfzw+i4TFw2cmVh0mBvcFk
RVgN86zWVgsMIlmjvavtSh8BGgoYX+Cad1Xk0EcL/fb8it+kuRmtYSZVA6Crdgux
llIa+NvQkUfqPfsiZ63aVtpFruF/+pYsa39G4Dgk3NgDl/srlv4YOrsLsLs2d8XU
JxWkICZpB+eCY0EhehrOC8qXKltJDwLH5eixDrL6LwA75lRG85f6Sm0Q03u/8LuH
NFlwsTJzfHpHpfH5z9fQrnCIxkZ1r2JxcU7tibgxbkvn7lNn7kxvEcsYuyWqnhFW
9wgrBoaovR0ERLv39zYRFuUkxneMtDMmSg==
-----END CERTIFICATE-----
Generated at Mon Aug 24 08:22:07 2026 by rpki-client