Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a323132363a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a323132363a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          PGh15NL1xSYwm2ONYv1IKtK6hMG69uBVE022M2F/F4w=
Subject key identifier:   1A:BB:2C:3C:98:98:D1:DA:D2:BD:C7:F7:0B:0E:EF:FD:84:C5:16:B9
Certificate issuer:       /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial:       6C896F290E997E5D5DA8AF1CFE6ABA4EDE3F4689
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a323132363a3a2f34382d313238203d3e203532303235.roa
Signing time:             Thu 04 Jun 2026 16:32:58 +0000
ROA not before:           Thu 04 Jun 2026 16:27:58 +0000
ROA not after:            Thu 03 Jun 2027 16:32:58 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:2126::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:89:6f:29:0e:99:7e:5d:5d:a8:af:1c:fe:6a:ba:4e:de:3f:46:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
        Validity
            Not Before: Jun  4 16:27:58 2026 GMT
            Not After : Jun  3 16:32:58 2027 GMT
        Subject: CN=1ABB2C3C9898D1DAD2BDC7F70B0EEFFD84C516B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e2:ea:e6:2f:c8:07:fa:d2:b8:75:08:41:c3:
                    1a:f8:6c:b6:cf:87:8d:51:08:69:ea:30:fe:4e:82:
                    00:24:70:03:e5:d5:3b:aa:6a:d2:16:f4:50:68:ef:
                    3b:0b:58:f3:20:af:3f:e9:e8:1a:b7:78:20:bb:66:
                    94:c0:17:b3:17:e8:d6:db:d5:55:8d:9b:4c:e6:67:
                    01:35:e3:8f:5f:10:ea:69:3a:92:07:08:7e:e3:31:
                    5c:53:96:85:2b:f3:ec:76:14:86:94:99:60:2a:5d:
                    5a:ed:65:e6:f0:aa:49:88:d4:2e:dd:b4:f1:cd:15:
                    fd:91:e2:00:35:ed:50:84:8f:60:c0:7f:4d:08:2a:
                    64:56:b8:d1:ed:64:2e:fe:09:9d:1c:fd:b1:4f:6e:
                    fc:da:7b:a7:7c:76:26:39:3f:47:ad:28:50:9c:3b:
                    75:87:7a:82:4e:b1:db:33:66:99:7e:2c:5d:00:37:
                    05:f7:33:93:45:cb:85:86:7b:d0:da:e1:7b:1d:e9:
                    39:e9:59:f9:e0:13:35:e0:e0:46:77:9d:f4:9f:a2:
                    cb:cd:9b:7f:c4:0e:83:80:ec:60:60:48:f2:3f:79:
                    38:4c:20:76:e8:2b:21:20:c8:e4:b9:e1:0a:ac:a9:
                    4b:d7:6c:19:ed:04:81:80:b5:d6:91:20:e7:83:a6:
                    c2:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:BB:2C:3C:98:98:D1:DA:D2:BD:C7:F7:0B:0E:EF:FD:84:C5:16:B9
            X509v3 Authority Key Identifier:
                keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a323132363a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:2126::/48

    Signature Algorithm: sha256WithRSAEncryption
         6a:31:10:1c:72:1d:3c:ec:94:36:c8:24:fa:42:ae:2c:41:f4:
         35:37:6a:74:82:69:cc:58:43:7c:7f:84:2a:a7:1a:3b:69:8e:
         cc:c8:1e:3f:50:95:65:6b:5c:1f:fe:36:51:fb:f7:6b:33:ac:
         68:ce:91:27:b6:e2:24:8e:b5:7f:aa:e8:29:13:8e:83:ca:ce:
         0e:a1:5a:3e:ec:19:22:df:a0:67:65:7f:7e:09:03:99:18:7e:
         af:80:4a:12:a0:65:37:af:e2:6e:b8:d4:0b:09:b6:d4:c9:44:
         bb:b4:cc:28:0f:04:24:e1:b8:fc:61:92:ca:a9:a7:86:d4:10:
         d7:f5:65:d5:72:1d:a1:bf:06:24:d2:15:d9:cd:e2:c0:9c:29:
         89:83:98:62:e7:24:a6:41:54:8f:d8:0b:8b:d6:9e:9d:46:ed:
         4e:3f:fa:67:63:2e:31:1a:f3:bb:20:15:6f:ff:a1:cf:ac:30:
         05:3d:4e:b4:0a:71:1b:9b:04:51:7c:ff:a2:a3:b9:39:ac:10:
         2f:99:ff:6e:f7:79:42:a7:1f:d0:d1:11:50:c0:e0:49:a6:19:
         92:27:68:af:24:32:18:35:05:2e:31:4b:c7:d1:a6:1f:89:46:
         92:6a:e0:78:a8:56:de:33:28:4f:89:f7:44:15:3d:cf:f6:ef:
         01:18:6a:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 21:57:15 2026 by rpki-client