Route Origin Authorization

$ rpki-client -vvvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a323332623a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a323332623a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          pqmLdldBLTTPUfOr8iAHCZy9U13pUkhpJw5kPy4Iu/w=
Subject key identifier:   12:8D:EE:0E:82:EB:14:8C:6D:50:23:EB:3D:F9:1B:1F:06:75:5A:54
Certificate issuer:       /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial:       0D75316B21889864C7794986AF9730196413A563
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a323332623a3a2f34382d313238203d3e203532303235.roa
Signing time:             Sat 15 Aug 2026 23:21:49 +0000
ROA not before:           Sat 15 Aug 2026 23:16:49 +0000
ROA not after:            Sat 14 Aug 2027 23:21:49 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:232b::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Aug 2026 23:30:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:75:31:6b:21:88:98:64:c7:79:49:86:af:97:30:19:64:13:a5:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
        Validity
            Not Before: Aug 15 23:16:49 2026 GMT
            Not After : Aug 14 23:21:49 2027 GMT
        Subject: CN=128DEE0E82EB148C6D5023EB3DF91B1F06755A54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:bd:d5:a1:44:e6:be:d1:ec:e3:a2:84:7a:f2:
                    d0:d7:fc:a0:7b:2f:f7:bf:e7:27:51:c7:05:0f:da:
                    3d:f8:37:3c:b0:04:43:0c:fa:c1:e7:eb:03:c1:d5:
                    bc:49:8e:cf:fe:8b:07:9b:d3:e9:c2:dc:a2:d8:7c:
                    81:c7:12:6a:5b:28:0d:94:6f:8b:8e:20:58:21:37:
                    c8:7c:e9:a4:85:b3:25:f2:b1:8f:f7:2e:e5:3e:d0:
                    68:16:85:4e:c5:ef:ae:8a:70:58:45:df:d8:ef:33:
                    f8:57:29:ca:26:15:e9:ff:fb:7b:52:ea:44:5f:b9:
                    79:7d:94:bf:99:66:82:54:27:1d:99:40:8e:2a:c9:
                    f4:11:1b:95:a4:37:30:a5:38:85:86:46:f2:c4:e7:
                    46:af:84:3a:60:c7:f2:a9:f4:e5:e4:e0:fe:54:63:
                    cb:b9:e0:49:4a:f0:e9:07:6b:51:5f:a1:ca:18:f9:
                    5b:f4:de:07:b7:83:ce:a0:ae:d6:ac:8d:19:8f:0e:
                    e5:b5:2c:bd:ed:5a:54:eb:3e:ea:2d:82:a1:40:51:
                    e6:ae:1c:6d:d6:65:7e:41:a5:00:2f:ed:80:97:a4:
                    5e:e2:bd:ba:1f:ca:8b:f9:f1:99:48:fa:0d:71:3f:
                    49:e9:b9:13:e5:09:d6:65:4a:70:a5:0d:71:31:7e:
                    96:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:8D:EE:0E:82:EB:14:8C:6D:50:23:EB:3D:F9:1B:1F:06:75:5A:54
            X509v3 Authority Key Identifier:
                keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a323332623a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:232b::/48

    Signature Algorithm: sha256WithRSAEncryption
         7b:c5:ab:03:f1:89:b3:59:7e:87:22:f6:aa:51:5d:f1:cf:b1:
         c3:eb:b7:2a:50:41:48:1b:4b:d2:70:2c:bb:bb:16:dd:66:21:
         0b:61:68:9f:0c:cb:39:84:b2:a5:03:59:6b:65:97:1d:34:e8:
         7f:1d:ad:7e:d6:5c:01:2e:da:d1:50:5e:c0:1f:4d:39:04:db:
         38:68:0b:eb:3e:01:48:fc:ca:64:aa:65:c1:ec:fd:37:be:63:
         d9:a9:2e:5e:2d:32:16:f1:a9:ec:48:e8:d5:5e:cc:6e:31:2b:
         99:8d:e3:9d:5d:0f:79:06:ce:59:dd:ce:e2:ae:59:82:1d:77:
         5c:a4:e9:83:00:24:ce:78:67:2d:dc:57:09:bf:06:8a:8e:02:
         62:aa:2b:44:b6:30:aa:28:3e:40:6f:97:38:37:5c:1d:78:bc:
         48:86:4a:a2:4e:08:38:44:a2:59:1f:d0:ca:a6:49:46:bf:99:
         8e:bb:55:c6:58:d5:9f:a7:8b:b1:71:83:90:b6:47:d9:0c:8d:
         b3:91:a0:67:40:53:bf:ba:c7:b8:94:90:08:cc:64:17:2b:82:
         2b:33:ab:d8:82:69:61:55:2e:0d:a6:2e:f9:98:0c:4c:bd:de:
         c0:55:e5:3f:fb:0a:13:3d:1e:c7:81:e8:8f:97:b5:bf:59:23:
         11:49:da:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 10:37:23 2026 by rpki-client