Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a323332623a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a323332623a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          58h5bGEWiP2JI56Btzw+pSTKUW/8Y2pe0pz5sn0eOFA=
Subject key identifier:   1E:71:38:5B:7C:62:C4:F9:94:1E:FE:02:99:E0:CE:72:61:6F:2C:D6
Certificate issuer:       /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial:       586348E8507563283F8DE8463D574E5455D705C1
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a323332623a3a2f34382d313238203d3e203532303235.roa
Signing time:             Thu 04 Jun 2026 16:32:53 +0000
ROA not before:           Thu 04 Jun 2026 16:27:53 +0000
ROA not after:            Thu 03 Jun 2027 16:32:53 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:232b::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:63:48:e8:50:75:63:28:3f:8d:e8:46:3d:57:4e:54:55:d7:05:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
        Validity
            Not Before: Jun  4 16:27:53 2026 GMT
            Not After : Jun  3 16:32:53 2027 GMT
        Subject: CN=1E71385B7C62C4F9941EFE0299E0CE72616F2CD6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:1e:88:1a:b9:75:3e:8d:17:c1:83:40:72:ea:
                    19:f3:5b:bc:13:67:cc:75:fb:87:ab:b9:d3:6d:53:
                    d0:50:d2:c9:e2:a8:5a:5f:5b:88:58:ff:e9:6a:67:
                    2d:3f:95:eb:44:7d:05:07:77:00:61:fd:c7:46:9b:
                    8f:ef:26:4f:73:b7:6c:b5:b0:01:25:ff:c6:c4:12:
                    1b:81:9b:3c:56:5b:d4:2d:0d:bc:d4:91:8b:78:98:
                    b0:dc:d4:22:1d:34:d5:d5:11:87:a6:80:79:e7:68:
                    c5:6a:49:5f:04:8a:51:e8:10:4c:56:25:98:9b:64:
                    ce:60:61:2b:e8:18:1d:10:fe:ba:1e:1e:03:4d:59:
                    8c:40:7e:38:93:e3:53:e5:11:db:8e:11:5e:e6:be:
                    ff:f4:f7:77:1d:b6:ff:93:df:de:50:12:24:98:bb:
                    4a:32:67:45:a7:20:49:59:d9:cb:b0:09:7d:96:3d:
                    45:d8:f4:5f:23:5a:5d:70:c8:f7:f6:4a:f6:be:a8:
                    0c:4b:d9:12:71:70:81:f5:ea:0f:35:c8:8c:fe:44:
                    c6:68:3e:03:a4:a5:8f:eb:09:6c:0a:80:0d:0c:bc:
                    f6:a4:03:5b:fa:d1:3c:40:da:5f:04:ab:83:88:c6:
                    17:cd:83:17:8d:47:0c:64:aa:1e:95:68:41:28:12:
                    4a:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:71:38:5B:7C:62:C4:F9:94:1E:FE:02:99:E0:CE:72:61:6F:2C:D6
            X509v3 Authority Key Identifier:
                keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a323332623a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:232b::/48

    Signature Algorithm: sha256WithRSAEncryption
         53:54:dc:be:57:55:b2:5d:ea:20:3b:5b:a9:ba:af:57:f5:13:
         54:b3:0b:96:7d:be:88:ae:aa:37:12:f0:b5:78:6e:8f:24:29:
         4e:fb:1c:93:4e:dc:31:0b:0d:43:e1:34:fc:8a:4d:80:a5:77:
         bb:7e:b8:33:9e:21:e5:fc:3d:9f:66:70:01:2f:5f:89:21:88:
         3c:be:db:ed:55:f3:b7:dc:10:4b:cb:c0:3a:3c:b0:b9:43:71:
         a1:fb:04:ae:51:6a:4d:55:83:b4:0d:92:7d:9e:39:7f:4d:5e:
         36:04:78:5e:9f:c0:b3:93:48:9c:80:94:d7:d4:81:6d:10:4b:
         17:d6:3a:6e:f0:8b:bc:62:b0:d3:3b:e3:4d:90:98:d3:00:36:
         40:9a:90:43:0e:8a:b7:d7:07:9e:e4:33:94:b5:9d:58:92:4f:
         4e:78:4f:40:bc:31:00:d5:d2:2d:f0:7f:3a:73:e4:3d:13:32:
         43:b4:76:3b:cf:17:12:41:a0:1e:6e:da:5b:8b:77:5b:5b:2f:
         10:af:28:e9:50:a5:dc:11:48:91:03:ab:25:b1:25:7d:57:e9:
         bc:9e:36:55:91:3e:f0:31:b6:28:14:7f:20:22:23:1a:01:83:
         34:80:9b:e1:a0:9d:c8:f7:a5:a3:65:3c:26:67:7d:b2:a2:b8:
         eb:f2:e9:72
-----BEGIN CERTIFICATE-----
MIIFJTCCBA2gAwIBAgIUWGNI6FB1Yyg/jehGPVdOVFXXBcEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjYzODZGQUJFQTM5MjEwQjY2NUE2QTU1QUU1REE2NkJF
Njc0MTU5NzAeFw0yNjA2MDQxNjI3NTNaFw0yNzA2MDMxNjMyNTNaMDMxMTAvBgNV
BAMTKDFFNzEzODVCN0M2MkM0Rjk5NDFFRkUwMjk5RTBDRTcyNjE2RjJDRDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWHogauXU+jRfBg0By6hnzW7wT
Z8x1+4erudNtU9BQ0sniqFpfW4hY/+lqZy0/letEfQUHdwBh/cdGm4/vJk9zt2y1
sAEl/8bEEhuBmzxWW9QtDbzUkYt4mLDc1CIdNNXVEYemgHnnaMVqSV8EilHoEExW
JZibZM5gYSvoGB0Q/roeHgNNWYxAfjiT41PlEduOEV7mvv/093cdtv+T395QEiSY
u0oyZ0WnIElZ2cuwCX2WPUXY9F8jWl1wyPf2Sva+qAxL2RJxcIH16g81yIz+RMZo
PgOkpY/rCWwKgA0MvPakA1v60TxA2l8Eq4OIxhfNgxeNRwxkqh6VaEEoEkpnAgMB
AAGjggIvMIICKzAdBgNVHQ4EFgQUHnE4W3xixPmUHv4CmeDOcmFvLNYwHwYDVR0j
BBgwFoAU9jhvq+o5IQtmWmpVrl2ma+Z0FZcwDgYDVR0PAQH/BAQDAgeAMG4GA1Ud
HwRnMGUwY6BhoF+GXXJzeW5jOi8vcnBraS0wMS5wZHhuZXQudWsvcmVwby9wYXJh
ZG94bmV0d29ya3MvOC9GNjM4NkZBQkVBMzkyMTBCNjY1QTZBNTVBRTVEQTY2QkU2
NzQxNTk3LmNybDCBkwYIKwYBBQUHAQEEgYYwgYMwgYAGCCsGAQUFBzAChnRyc3lu
YzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYz
ZTAxODU3NTVjOTFiZTNmOWQvNy9GNjM4NkZBQkVBMzkyMTBCNjY1QTZBNTVBRTVE
QTY2QkU2NzQxNTk3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzAL
hnVyc3luYzovL3Jwa2ktMDEucGR4bmV0LnVrL3JlcG8vcGFyYWRveG5ldHdvcmtz
LzgvMzI2MTMwMzUzYTY0NjY2MzM0M2EzMjMzMzI2MjNhM2EyZjM0MzgyZDMxMzIz
ODIwM2QzZTIwMzUzMjMwMzIzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF38QjKzANBgkqhkiG9w0B
AQsFAAOCAQEAU1TcvldVsl3qIDtbqbqvV/UTVLMLln2+iK6qNxLwtXhujyQpTvsc
k07cMQsNQ+E0/IpNgKV3u364M54h5fw9n2ZwAS9fiSGIPL7b7VXzt9wQS8vAOjyw
uUNxofsErlFqTVWDtA2SfZ45f01eNgR4Xp/As5NInICU19SBbRBLF9Y6bvCLvGKw
0zvjTZCY0wA2QJqQQw6Kt9cHnuQzlLWdWJJPTnhPQLwxANXSLfB/OnPkPRMyQ7R2
O88XEkGgHm7aW4t3W1svEK8o6VCl3BFIkQOrJbElfVfpvJ42VZE+8DG2KBR/ICIj
GgGDNICb4aCdyPelo2U8Jmd9sqK46/Lpcg==
-----END CERTIFICATE-----
Generated at Thu Jun 11 21:56:34 2026 by rpki-client