Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a323232613a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a323232613a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          uR4iYdtZ+aqLFCus3PX0/CgZJup5NReoh/KTIeFGHzI=
Subject key identifier:   EF:70:49:B6:91:74:5D:56:11:17:64:73:59:2F:24:AE:73:C0:8E:62
Certificate issuer:       /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial:       6B104CB0484FDF762C450DEC37D10CA75A0BA150
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a323232613a3a2f34382d313238203d3e203532303235.roa
Signing time:             Thu 04 Jun 2026 16:33:09 +0000
ROA not before:           Thu 04 Jun 2026 16:28:09 +0000
ROA not after:            Thu 03 Jun 2027 16:33:09 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:222a::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:10:4c:b0:48:4f:df:76:2c:45:0d:ec:37:d1:0c:a7:5a:0b:a1:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
        Validity
            Not Before: Jun  4 16:28:09 2026 GMT
            Not After : Jun  3 16:33:09 2027 GMT
        Subject: CN=EF7049B691745D5611176473592F24AE73C08E62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:0f:88:03:95:bd:df:8f:06:aa:a9:a2:9d:23:
                    c2:23:85:79:ba:63:59:40:fc:f7:96:79:ea:20:83:
                    e9:12:7c:94:78:49:e9:25:24:4f:bd:e7:d4:ba:1d:
                    0a:34:af:d6:c7:c1:44:73:00:ea:2d:9c:46:af:ab:
                    27:7e:8a:5d:18:31:4b:0c:fa:94:68:86:68:86:e4:
                    29:c4:ea:64:01:25:21:81:62:8e:d9:d4:48:59:44:
                    7a:83:5a:5e:ef:16:ed:6d:13:e9:59:44:1d:c7:27:
                    81:fb:2c:d7:f2:75:3b:6f:6b:e8:4d:3e:ac:ad:9d:
                    a4:85:ab:63:98:d5:bb:85:72:90:38:02:0c:c6:c3:
                    c9:1a:ef:1e:7a:36:3a:18:a9:53:bf:49:0b:f3:49:
                    50:72:a4:ce:ad:a6:5d:bc:ff:11:61:4b:f3:be:b4:
                    f6:6e:97:74:76:9f:72:62:1a:9e:68:a1:d6:6b:0c:
                    2a:d2:3c:90:ac:e0:db:40:dc:6e:0d:cc:a7:5f:20:
                    1a:8a:c4:60:b8:77:5c:ff:7d:aa:1d:0b:cd:1e:0b:
                    dc:67:99:ff:6e:2e:36:4a:57:ef:83:f7:e8:97:fa:
                    6a:17:2b:dc:fb:a6:fd:0c:1c:89:a8:88:47:f3:3d:
                    a3:4b:91:66:0c:28:31:79:36:31:ae:a7:85:69:a6:
                    89:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:70:49:B6:91:74:5D:56:11:17:64:73:59:2F:24:AE:73:C0:8E:62
            X509v3 Authority Key Identifier:
                keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a323232613a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:222a::/48

    Signature Algorithm: sha256WithRSAEncryption
         54:8a:3b:8c:6e:ab:7d:1d:1d:7f:d2:f6:69:16:a6:7d:b2:7a:
         ba:94:86:01:12:36:22:32:76:bf:8e:08:47:a5:5a:cb:51:77:
         64:56:b6:51:58:ff:5c:eb:ce:b4:64:0b:46:19:11:70:a8:c7:
         28:57:b5:4b:3c:d9:a8:e0:8e:c7:ea:ba:3b:b6:be:02:3f:57:
         1f:8e:b1:a1:c3:3d:7d:f0:dc:3d:f3:50:02:9a:87:d7:44:01:
         4a:80:3a:a2:4f:ab:5e:2e:b8:76:63:15:d9:c3:e0:36:e5:7b:
         3c:a6:65:7f:9a:c2:9e:4d:da:19:5c:66:6b:01:0a:7f:22:76:
         f9:0a:d7:78:1b:e2:ff:38:30:6b:42:e4:02:33:59:6f:57:4b:
         5e:c9:d5:0d:84:37:a4:d3:59:20:ad:ff:68:12:c1:99:1d:86:
         1f:6f:ae:7a:b2:04:23:67:c1:01:fd:53:14:57:da:30:4a:fb:
         31:6a:90:61:15:89:e3:0d:9a:57:b1:0b:06:a6:16:b2:57:56:
         96:90:a3:d5:5e:52:ed:46:ba:ad:c7:ae:79:1c:ff:0e:d0:44:
         25:bd:b4:2a:d8:f8:97:3e:92:46:87:5b:08:1e:0e:7d:ed:4a:
         24:4b:c0:e3:77:e2:26:4f:49:c2:86:6d:87:3b:cd:21:37:fb:
         43:d0:2b:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 21:58:07 2026 by rpki-client