Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a323532663a3a2f34382d3438203d3e203532303235.roa
File:                     326130353a646663343a323532663a3a2f34382d3438203d3e203532303235.roa (raw, json)
Hash identifier:          UaEE4jbz3DnPN76b4M9CEvcUAMy8R2NkY/CwO/aMuCc=
Subject key identifier:   1F:CC:E0:6B:17:2F:53:6C:EC:00:DB:EC:3A:23:36:77:1C:02:9F:32
Certificate issuer:       /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial:       0203D27CF6EDBFAA7F11556989D6F5A4CDC06511
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a323532663a3a2f34382d3438203d3e203532303235.roa
Signing time:             Thu 04 Jun 2026 16:32:44 +0000
ROA not before:           Thu 04 Jun 2026 16:27:44 +0000
ROA not after:            Thu 03 Jun 2027 16:32:44 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:252f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:03:d2:7c:f6:ed:bf:aa:7f:11:55:69:89:d6:f5:a4:cd:c0:65:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
        Validity
            Not Before: Jun  4 16:27:44 2026 GMT
            Not After : Jun  3 16:32:44 2027 GMT
        Subject: CN=1FCCE06B172F536CEC00DBEC3A2336771C029F32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:1a:af:95:e6:99:07:a9:2e:90:95:02:84:f6:
                    b1:a0:8e:ca:2d:a5:57:bf:e8:fc:9a:59:c2:85:38:
                    ff:cf:a7:7e:56:41:21:86:ad:13:a0:26:a2:de:01:
                    f2:55:1c:c8:fa:93:26:f4:00:96:fe:ff:2a:a2:54:
                    4b:58:45:32:e6:3e:9d:02:e1:73:5b:62:cd:36:d6:
                    a8:16:6b:75:8d:f8:5e:5c:a3:65:3c:9f:1f:f5:42:
                    f3:23:3f:fc:c3:53:75:6b:8c:f4:59:fc:9a:c6:6b:
                    25:37:af:a3:8f:c2:99:df:7b:3a:0f:4f:93:82:97:
                    58:e1:69:c8:af:11:5e:d3:9d:1c:9b:ed:39:9c:68:
                    ea:52:b1:9e:32:d3:f2:a6:7f:7d:8b:07:94:fe:11:
                    b9:13:7e:45:2f:c9:23:f0:24:1d:7d:73:cc:c4:dc:
                    73:f9:39:35:2e:2e:4f:da:ab:de:8f:f1:7d:cb:dc:
                    a4:af:93:d1:f3:00:9f:ab:ec:ed:8d:4e:7d:34:52:
                    1e:9e:bb:c1:10:4e:90:a1:d3:10:1d:df:0e:26:c4:
                    24:67:a3:69:3a:57:dc:5e:f7:fa:67:8b:b4:83:48:
                    26:48:39:8c:0c:50:e0:6e:41:fc:eb:2e:d9:14:ec:
                    d8:d5:5d:93:91:22:32:ce:2c:4e:43:d7:a5:89:ee:
                    7c:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:CC:E0:6B:17:2F:53:6C:EC:00:DB:EC:3A:23:36:77:1C:02:9F:32
            X509v3 Authority Key Identifier:
                keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a323532663a3a2f34382d3438203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:252f::/48

    Signature Algorithm: sha256WithRSAEncryption
         66:a7:76:f8:a9:60:9e:05:5b:6b:61:27:f4:be:0c:76:31:52:
         63:de:d5:da:4b:f9:c4:01:48:33:5c:3a:f6:fc:70:71:0d:58:
         96:4d:f5:39:42:93:e0:ec:23:78:79:15:c6:24:83:87:00:f6:
         84:30:a8:37:c8:e9:86:8b:5f:c3:54:9d:be:5f:1c:af:07:80:
         de:8d:0d:4d:2b:cd:4f:a4:9b:81:b4:63:aa:16:9b:1f:35:c2:
         49:02:68:c2:43:c5:d8:e8:db:dd:c6:41:ff:1c:80:8e:47:bd:
         e6:38:0d:73:0c:f6:9c:5e:e8:5a:ba:6e:af:30:78:e1:55:f8:
         94:30:3e:90:11:fc:5c:f2:0e:d3:04:ed:7a:0f:bd:3c:92:bc:
         e8:b7:6f:d2:ea:8c:47:d0:b2:42:c0:74:18:0b:8e:bf:18:cf:
         8d:c2:72:00:e1:4a:bc:f6:e1:ac:b0:06:78:de:6e:94:ed:e5:
         83:77:f2:ce:42:0c:ff:59:c8:75:d3:24:11:9e:1f:ba:eb:4f:
         11:c8:30:f4:1b:4f:fd:b0:77:cd:b2:b1:a3:86:ab:66:00:f3:
         c1:a8:3a:63:c7:25:3f:57:90:d5:95:be:da:da:e2:d6:d1:73:
         b5:33:d4:d3:73:c1:57:6f:6e:69:b7:22:f6:2d:d4:e5:34:a9:
         20:e7:46:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 21:57:14 2026 by rpki-client