Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a323432653a3a2f34382d3438203d3e203532303235.roa
File:                     326130353a646663343a323432653a3a2f34382d3438203d3e203532303235.roa (raw, json)
Hash identifier:          0744IMn1bmhRRWWyJqCdjHEJom8DcccI9EwjrloKMyo=
Subject key identifier:   22:40:24:F7:46:98:E3:72:2F:4F:B5:6C:16:C0:A9:C7:42:A1:F5:61
Certificate issuer:       /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial:       196BE1B30D38CE2FDCDE3753F25AF9C93CD5FAC2
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a323432653a3a2f34382d3438203d3e203532303235.roa
Signing time:             Thu 04 Jun 2026 16:32:45 +0000
ROA not before:           Thu 04 Jun 2026 16:27:45 +0000
ROA not after:            Thu 03 Jun 2027 16:32:45 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:242e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:6b:e1:b3:0d:38:ce:2f:dc:de:37:53:f2:5a:f9:c9:3c:d5:fa:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
        Validity
            Not Before: Jun  4 16:27:45 2026 GMT
            Not After : Jun  3 16:32:45 2027 GMT
        Subject: CN=224024F74698E3722F4FB56C16C0A9C742A1F561
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:10:ff:38:55:a6:de:dc:e9:17:70:37:ae:17:
                    27:a4:f5:60:4a:f9:2e:23:6c:81:82:13:35:e7:17:
                    0c:a9:ce:d3:97:05:40:88:5b:7d:4a:22:e6:82:3b:
                    a2:84:64:3e:27:56:e0:c2:75:a4:b7:a5:06:03:ce:
                    c8:32:29:7a:7c:c6:a3:59:1b:c1:2a:95:54:4e:ad:
                    0f:7f:31:bf:7b:a1:83:a0:0b:2a:3e:d9:42:06:1a:
                    0f:f1:92:a1:f2:9b:5b:cd:12:27:a1:b8:f4:e1:7d:
                    c8:ab:20:72:a0:40:d1:93:b2:d7:1e:ad:64:15:28:
                    e5:6e:b8:a9:78:0e:e7:a0:69:a6:26:a9:51:4f:34:
                    e0:c3:6d:cd:f4:8b:19:cd:66:1c:8c:d1:ff:3e:34:
                    c5:4c:1c:87:2a:6a:f3:32:47:cf:67:ce:4c:78:82:
                    0c:06:f8:0e:28:d3:10:08:8b:88:c0:92:73:e9:e4:
                    14:12:41:a7:45:3b:cf:b3:e9:7e:6a:2f:f1:43:78:
                    38:8c:72:a9:5f:ba:1b:ea:cc:22:c8:99:82:2e:85:
                    ec:fd:af:4c:6e:86:ac:3b:ad:42:6d:8d:a2:3b:28:
                    ea:5a:2a:c1:15:ad:74:1b:ec:04:5c:39:fb:6f:09:
                    26:9d:74:59:60:a4:68:2a:ca:50:39:db:62:54:de:
                    7d:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:40:24:F7:46:98:E3:72:2F:4F:B5:6C:16:C0:A9:C7:42:A1:F5:61
            X509v3 Authority Key Identifier:
                keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a323432653a3a2f34382d3438203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:242e::/48

    Signature Algorithm: sha256WithRSAEncryption
         6d:0e:96:0f:6b:c3:a0:a6:1e:08:5c:ef:07:01:ea:e2:ac:d9:
         88:91:7c:af:98:4a:81:09:a8:d1:3b:5a:78:ad:1e:0d:91:1f:
         65:d2:50:66:ae:f5:f0:ee:1f:d2:78:78:cd:67:dd:a2:ba:91:
         9f:64:5d:80:63:32:57:e1:40:9a:6e:c3:3c:f5:f7:4d:7f:6c:
         d8:8a:56:a8:22:b8:5f:a7:24:2c:95:ce:53:7b:08:37:3b:8b:
         98:bf:5c:4c:7c:c8:91:0f:58:c8:71:19:8a:93:ad:c4:00:0a:
         41:2c:c2:29:ac:ad:fc:ad:bc:12:b6:f8:09:c4:6a:95:6a:27:
         8f:f8:7b:08:45:5d:0d:fe:55:54:23:ad:2d:8b:c4:c0:bb:3b:
         58:5f:ed:66:42:94:5e:d6:99:4b:2d:1b:7c:50:e9:f8:82:e5:
         18:9b:50:60:87:a9:bc:28:c0:c2:68:d4:87:2b:09:06:a3:e0:
         61:57:22:9d:16:1a:f9:6b:26:0b:f4:34:56:8f:d7:84:60:76:
         5b:92:46:0e:57:74:3c:a5:60:5d:0c:d8:ad:74:a9:a7:0b:da:
         1d:be:34:c1:35:8f:8c:b5:36:12:d7:6c:a6:b3:7c:e2:20:f1:
         54:3c:56:1d:4b:02:d2:83:a0:7c:5e:56:d7:21:7a:c5:9c:fc:
         ff:f2:c7:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 21:57:14 2026 by rpki-client