Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a323633353a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a323633353a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          zT8O3VsiHR4p5fiPqS71AAVprXQ/wcPgq64Qao+RJsk=
Subject key identifier:   2B:01:AA:54:BE:89:92:8A:BB:0C:3E:E7:F1:5C:02:91:57:6B:20:4C
Certificate issuer:       /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial:       3548C8994D6EA6ECEDB18D8D6122A61AEB933690
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a323633353a3a2f34382d313238203d3e203532303235.roa
Signing time:             Sun 28 Jun 2026 14:17:53 +0000
ROA not before:           Sun 28 Jun 2026 14:12:53 +0000
ROA not after:            Sun 27 Jun 2027 14:17:53 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:2635::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 23 Jul 2026 12:23:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:48:c8:99:4d:6e:a6:ec:ed:b1:8d:8d:61:22:a6:1a:eb:93:36:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
        Validity
            Not Before: Jun 28 14:12:53 2026 GMT
            Not After : Jun 27 14:17:53 2027 GMT
        Subject: CN=2B01AA54BE89928ABB0C3EE7F15C0291576B204C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:84:a4:bb:d6:7b:d7:8e:63:a6:43:01:ab:92:
                    a8:a0:75:1b:e6:6a:31:18:a9:97:54:fa:57:47:7b:
                    e4:49:de:57:f4:a6:b1:a1:2d:20:c0:23:46:a7:be:
                    ec:7a:88:3a:85:a1:4b:77:6d:d5:42:db:80:20:c7:
                    d5:ce:e2:d6:26:92:8d:4c:01:29:75:6c:ad:91:55:
                    b4:67:56:b5:ab:62:d9:a1:f4:6c:30:1e:12:ab:14:
                    34:56:39:88:9c:ba:97:3d:b9:6b:99:1b:94:68:33:
                    93:7d:93:f6:c7:f1:36:88:8a:aa:a2:b8:9c:59:58:
                    b5:88:91:ed:f0:80:23:74:89:39:58:91:90:01:5d:
                    01:50:30:2b:1b:69:c2:0a:44:27:08:4c:6e:7d:2c:
                    2e:bd:ca:5a:ba:4a:9a:a0:9c:ae:f1:bb:c9:fa:5e:
                    72:50:c5:9d:7b:e6:03:71:51:6d:3b:b7:eb:92:e0:
                    61:f9:72:17:ab:5e:74:d9:0b:99:8b:a7:e7:9b:6d:
                    20:81:c2:35:fa:9d:16:7e:3e:ab:96:bd:04:54:5e:
                    69:4f:c2:e9:7a:50:7b:b8:db:1f:b2:9f:91:31:c1:
                    33:69:63:e8:5c:18:84:02:eb:fa:ac:1a:22:2f:ca:
                    a8:e8:b5:b6:aa:d7:bc:1d:d5:17:5b:44:2e:bd:b0:
                    66:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:01:AA:54:BE:89:92:8A:BB:0C:3E:E7:F1:5C:02:91:57:6B:20:4C
            X509v3 Authority Key Identifier:
                keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a323633353a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:2635::/48

    Signature Algorithm: sha256WithRSAEncryption
         38:27:fc:89:21:05:56:5b:5e:c6:4f:3a:49:50:9b:fb:84:97:
         e6:51:88:f8:c9:3f:ba:cb:e7:84:88:f2:c5:b6:5f:76:32:6a:
         42:22:4f:65:0c:ae:8b:6b:5d:bb:4f:fb:b7:41:df:31:a9:ec:
         81:41:cf:e9:b4:1c:9c:df:2e:48:18:49:ea:79:78:36:76:5a:
         a8:49:f7:9c:c0:06:51:eb:2e:b3:53:78:8f:64:e0:a6:cc:2b:
         57:17:4c:30:2e:d6:d4:77:98:bd:21:b8:bd:da:32:75:ff:7a:
         3d:16:d7:de:be:1a:ca:30:78:35:3e:e9:38:62:25:bf:ac:3b:
         32:aa:ac:7c:4f:5e:db:0f:1a:e5:e5:4e:5a:6a:ae:55:d8:5d:
         15:84:5c:75:33:0a:32:30:e6:18:54:b0:fb:d7:18:6f:5a:1a:
         8b:d0:70:6d:e3:4e:d1:a5:49:d5:2d:e7:d4:b4:87:47:ad:d4:
         77:7f:7a:55:03:10:0c:bf:06:a0:de:2e:46:39:fc:a4:0b:9d:
         a8:3e:56:b7:38:a5:ad:b1:f1:9d:40:3d:70:d3:48:62:3d:74:
         da:ac:95:ae:db:47:1c:3e:3c:38:30:b8:84:e4:a7:18:9f:5c:
         a7:b1:7f:3a:dc:c8:1f:db:e5:af:d2:c9:54:a6:42:a9:f9:3f:
         72:d6:1b:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 21:41:50 2026 by rpki-client