Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a323132373a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a323132373a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          8Pm0rAl2zWyBbo2ZpXCfp0yiqKDFEzQzJHDe0+nnKx0=
Subject key identifier:   B7:4E:F6:4B:80:19:63:E0:58:92:EB:59:32:57:84:BE:B2:9B:37:87
Certificate issuer:       /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial:       70B4517E41CBFCB8A0FCF65C6B74F43BC882A289
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a323132373a3a2f34382d313238203d3e203532303235.roa
Signing time:             Thu 04 Jun 2026 16:33:02 +0000
ROA not before:           Thu 04 Jun 2026 16:28:02 +0000
ROA not after:            Thu 03 Jun 2027 16:33:02 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:2127::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:b4:51:7e:41:cb:fc:b8:a0:fc:f6:5c:6b:74:f4:3b:c8:82:a2:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
        Validity
            Not Before: Jun  4 16:28:02 2026 GMT
            Not After : Jun  3 16:33:02 2027 GMT
        Subject: CN=B74EF64B801963E05892EB59325784BEB29B3787
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:9e:f7:3f:91:2d:9d:fd:fe:bf:bd:e7:cb:ac:
                    2f:81:5e:d2:ee:20:60:42:95:56:f3:be:46:19:72:
                    6c:e7:2e:72:e1:89:73:8b:ab:40:2c:cd:0f:47:e5:
                    a5:75:1f:89:8c:39:d6:5d:76:0e:c3:22:2e:9e:ab:
                    e1:24:5d:80:40:8c:71:a8:1f:ad:7e:b3:96:f3:69:
                    1a:ed:db:0a:19:b7:65:b0:4e:4a:53:b5:31:98:76:
                    37:a6:c5:ca:78:34:db:6f:a5:73:a4:d6:b8:d0:24:
                    e5:73:76:cf:15:66:56:75:ad:dd:18:e0:c0:ba:b0:
                    f6:e7:4d:f9:e2:b1:b1:b1:6f:20:9d:ae:a5:fb:3e:
                    2b:19:28:3c:8a:6e:57:ad:8e:50:91:b4:70:2a:fd:
                    04:8f:15:a5:e1:0a:3d:e4:a6:10:82:83:7e:25:d2:
                    ae:49:00:56:0e:29:f4:ff:a0:cd:09:7e:82:5a:13:
                    52:d5:e4:92:31:bb:54:99:3f:96:b4:8a:78:c6:28:
                    b7:6d:c5:68:9f:ea:17:3d:6e:46:80:4b:16:e3:13:
                    1c:3e:87:70:3c:69:ee:ae:02:ee:9f:1e:9b:ae:41:
                    a9:ff:1c:66:b7:5e:88:10:77:b1:43:25:a4:a7:0c:
                    a7:60:6b:ec:14:55:2e:11:fe:7c:7f:b5:6c:7d:58:
                    1d:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:4E:F6:4B:80:19:63:E0:58:92:EB:59:32:57:84:BE:B2:9B:37:87
            X509v3 Authority Key Identifier:
                keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a323132373a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:2127::/48

    Signature Algorithm: sha256WithRSAEncryption
         76:9b:07:8c:79:04:5e:9f:c3:9b:a1:c5:aa:a7:d9:25:2f:be:
         b1:95:b5:26:3c:bc:76:83:a2:25:1b:fd:4c:79:dc:62:92:71:
         85:d2:cf:66:0c:db:0e:5f:35:82:fd:07:15:44:c8:34:b6:37:
         6a:1b:30:fd:e7:5b:83:f7:ba:d9:89:cf:09:11:f7:36:99:96:
         4c:05:de:c2:9a:84:b6:2b:8b:b1:70:69:c4:e2:35:6f:3c:74:
         d1:d3:43:58:21:69:8c:f0:97:77:6e:2c:a0:36:96:1b:f9:40:
         9f:d3:1b:f6:4a:af:6e:a6:3c:25:a6:ac:51:72:a2:c5:ca:b4:
         1f:f3:89:e1:c1:de:9c:6d:77:9f:8e:23:0a:bd:79:b5:f0:9b:
         ca:0c:95:5b:ef:09:b3:55:ec:ac:cb:6b:fc:e6:a2:ed:35:8f:
         09:b7:44:31:e6:3a:78:04:be:57:d4:8d:07:5f:e9:19:de:e6:
         89:6e:b1:ef:c3:1a:21:a7:cb:02:09:69:db:3e:b0:65:de:68:
         eb:61:33:a8:12:01:e6:d5:83:2c:ee:69:a5:a4:3a:68:d1:70:
         93:15:76:cd:cb:b9:11:ce:44:15:e7:83:ec:24:a2:dd:d3:24:
         1d:84:d5:24:b8:8a:9c:1d:20:4b:3a:36:a2:00:63:a9:2d:5e:
         0b:8e:59:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 21:56:34 2026 by rpki-client