Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a323633303a3a2f34382d3438203d3e203532303235.roa
File:                     326130353a646663343a323633303a3a2f34382d3438203d3e203532303235.roa (raw, json)
Hash identifier:          gBLP/idmAaIlwWpAhznvTSU+HwhwVYa/2Uuv084IVVA=
Subject key identifier:   42:77:E6:59:D6:95:DB:A5:39:DB:68:23:59:F2:0D:C9:3E:FD:4C:52
Certificate issuer:       /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial:       3517F02E9A62B57AA4AED44EAE3D8D0AE9E055A3
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a323633303a3a2f34382d3438203d3e203532303235.roa
Signing time:             Thu 04 Jun 2026 16:33:00 +0000
ROA not before:           Thu 04 Jun 2026 16:28:00 +0000
ROA not after:            Thu 03 Jun 2027 16:33:00 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:2630::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:17:f0:2e:9a:62:b5:7a:a4:ae:d4:4e:ae:3d:8d:0a:e9:e0:55:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
        Validity
            Not Before: Jun  4 16:28:00 2026 GMT
            Not After : Jun  3 16:33:00 2027 GMT
        Subject: CN=4277E659D695DBA539DB682359F20DC93EFD4C52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:21:4b:fd:70:93:79:9c:d4:57:4d:0d:6f:3e:
                    49:cc:a8:75:63:ff:f4:40:ff:b5:72:c0:a6:ff:2b:
                    d0:7a:9d:d4:71:97:f4:f2:6e:a3:4f:d0:a6:ea:16:
                    88:82:cf:e8:aa:4d:4e:1b:1b:b8:71:ae:ae:e4:47:
                    2f:c0:e9:7b:ad:21:ea:ce:84:98:db:11:5e:ac:0c:
                    03:63:2a:d2:93:8c:9b:32:9c:03:90:43:15:a6:13:
                    14:08:1d:35:90:05:99:6d:75:c1:82:a2:2c:c5:ff:
                    26:b2:e6:d4:2c:5c:00:61:69:8a:f4:11:19:c9:38:
                    c2:39:7d:3f:0f:5f:e3:6b:c4:c7:b5:ac:3a:f9:57:
                    b4:34:bd:42:e0:0a:48:a0:09:e9:09:1c:3f:d0:cc:
                    fd:f7:27:a1:6a:65:a1:49:90:b5:55:02:fd:fc:7a:
                    fd:f2:f6:6e:5f:3e:74:ca:4a:c5:c9:ab:69:07:dc:
                    1e:48:be:af:c3:6c:9f:f4:fb:f3:15:21:9d:f8:31:
                    ab:ce:26:61:a0:c0:a1:a1:1f:c0:e0:ad:2b:f0:e1:
                    c9:26:b3:18:59:71:80:6d:6c:0c:b1:a0:27:37:92:
                    5b:e3:c1:6e:3d:e8:4b:81:d9:2e:72:83:10:fb:d6:
                    d2:38:51:5f:bc:c9:be:eb:3b:37:bf:63:60:1c:ad:
                    35:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:77:E6:59:D6:95:DB:A5:39:DB:68:23:59:F2:0D:C9:3E:FD:4C:52
            X509v3 Authority Key Identifier:
                keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a323633303a3a2f34382d3438203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:2630::/48

    Signature Algorithm: sha256WithRSAEncryption
         65:bc:7b:5a:a4:94:e3:ba:82:c3:bd:f6:22:59:e4:ad:ea:ef:
         5c:73:bf:8d:8d:17:7d:2a:e5:f6:68:82:ab:0d:96:51:3c:27:
         8c:76:89:f4:c4:47:dd:03:ab:bc:fa:60:20:0e:bb:ec:67:7f:
         3b:76:1d:ca:dd:ff:19:72:4d:8e:0c:89:ed:91:ab:a8:e5:83:
         91:0d:2e:7e:b5:06:3b:f8:34:3f:ea:32:9b:1d:86:b7:7b:50:
         c1:1b:a6:d2:b5:a5:f3:56:12:13:5a:8f:16:6d:a5:61:19:06:
         5d:11:9e:26:17:ce:c0:48:e4:9a:47:57:ec:fa:5f:8e:d1:9e:
         ba:5c:f5:81:1f:5c:9b:43:ec:da:e5:6f:f9:fb:b6:d0:7b:ca:
         90:59:cf:85:e6:d4:c7:8f:bc:d5:1d:c8:dc:16:71:c3:84:c7:
         6b:cd:0a:ff:92:a8:f2:ab:7c:98:9e:42:e2:06:d9:fb:41:2d:
         3b:78:16:96:a3:ec:bb:3b:22:8b:43:c1:68:aa:f6:42:8f:41:
         72:b2:25:c1:f4:2b:3d:fc:75:d8:d0:72:70:08:f1:a0:06:42:
         44:63:a1:48:3d:f8:55:b1:77:66:31:ee:98:6c:06:6c:08:47:
         18:a1:e4:08:0b:0b:c4:b5:ac:15:79:8d:d5:5c:ec:21:f8:64:
         a5:03:7f:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 21:56:40 2026 by rpki-client