Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a323733313a3a2f34382d3438203d3e203532303235.roa
File:                     326130353a646663343a323733313a3a2f34382d3438203d3e203532303235.roa (raw, json)
Hash identifier:          fx/bw++RAqI507XWN/bN+s3bIXspqmX9MEvwfhGKU7A=
Subject key identifier:   EC:0D:73:E5:27:16:01:5E:38:57:A1:DF:43:FB:4D:E6:5F:C3:29:5A
Certificate issuer:       /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial:       5C802F6385A290553733E7360B9E3643F8BFDFC6
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a323733313a3a2f34382d3438203d3e203532303235.roa
Signing time:             Thu 04 Jun 2026 16:32:51 +0000
ROA not before:           Thu 04 Jun 2026 16:27:51 +0000
ROA not after:            Thu 03 Jun 2027 16:32:51 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:2731::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:80:2f:63:85:a2:90:55:37:33:e7:36:0b:9e:36:43:f8:bf:df:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
        Validity
            Not Before: Jun  4 16:27:51 2026 GMT
            Not After : Jun  3 16:32:51 2027 GMT
        Subject: CN=EC0D73E52716015E3857A1DF43FB4DE65FC3295A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:57:ef:6f:6f:fa:20:7e:9d:ad:83:63:7e:61:
                    b7:fe:fc:10:e2:b3:bb:55:e1:66:61:e7:dc:6c:de:
                    d1:41:92:99:d0:3d:53:37:6b:62:29:39:f2:18:0e:
                    83:ad:71:eb:56:00:52:2e:0e:7a:10:9b:42:01:ae:
                    e8:2e:b8:84:25:b3:bd:5e:3a:54:5f:61:4f:a1:7e:
                    04:e1:8a:d4:16:30:c6:67:c2:fc:24:cc:43:d1:56:
                    a8:a5:82:e4:6d:46:82:cd:3c:2d:92:c3:6f:07:ae:
                    b8:21:fd:01:1f:2d:40:7f:fa:55:bd:1d:54:69:1d:
                    2b:50:cd:ed:65:8b:33:91:37:71:fb:b0:e9:9a:56:
                    15:57:b3:1d:4f:a6:a4:13:66:a4:42:46:85:3a:52:
                    14:c6:b9:13:14:45:d1:93:59:e0:48:4e:d6:83:f9:
                    dd:67:58:6f:90:1d:9e:25:dd:1c:2c:e4:8e:a9:f3:
                    da:47:07:1c:b7:51:71:60:79:58:b8:2f:b4:37:b4:
                    20:71:68:20:9b:84:5c:0f:6f:8f:33:ed:77:61:d3:
                    43:65:e5:72:16:6b:92:82:e9:d9:b0:60:b3:c4:6a:
                    65:ea:a9:de:1e:ab:64:09:d4:aa:b0:df:f2:65:c6:
                    49:08:89:35:44:52:c7:42:04:7b:70:1b:86:d0:4f:
                    a6:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:0D:73:E5:27:16:01:5E:38:57:A1:DF:43:FB:4D:E6:5F:C3:29:5A
            X509v3 Authority Key Identifier:
                keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a323733313a3a2f34382d3438203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:2731::/48

    Signature Algorithm: sha256WithRSAEncryption
         10:e8:76:69:b2:f4:ca:9a:ad:08:5a:be:f3:e3:66:fa:cf:b8:
         26:1f:39:3e:c9:ae:d8:2b:14:20:a3:91:3f:cd:a1:0c:ca:d3:
         18:70:3d:96:7b:89:46:64:4b:20:56:98:90:09:98:43:ee:1e:
         b6:ff:d8:89:a7:4c:88:b8:4c:fa:cd:08:a1:7a:46:07:a3:54:
         2b:b6:8e:fc:cd:31:a4:50:d4:2e:5d:08:5f:e7:b2:f6:c6:3c:
         f9:bf:7e:77:c1:e3:2c:66:cb:89:e0:73:e4:8e:14:28:f5:6e:
         41:61:bd:5a:22:c1:87:6f:14:7d:f3:2b:5c:b9:a5:86:c2:f7:
         8c:9f:96:3c:24:bc:51:2e:2a:64:a1:a3:b9:20:06:db:81:f0:
         ff:0f:f9:cc:b2:2a:7c:9d:d5:d4:31:16:44:88:db:2e:19:1e:
         0b:97:78:36:95:11:ab:3b:78:3f:33:b4:f3:89:3b:33:eb:de:
         b7:11:f5:90:95:39:b5:4e:73:b2:51:53:76:33:28:12:48:d9:
         86:30:f2:b2:2d:f5:1d:1c:c4:48:90:cd:27:d2:f2:0f:5f:bc:
         59:4c:45:15:e5:53:4f:90:9f:3f:34:85:2b:d2:ac:6a:e0:ca:
         91:5e:ea:e0:cc:dd:2e:e1:f7:83:b0:5b:8f:62:59:0a:0d:8c:
         44:fe:90:ba
-----BEGIN CERTIFICATE-----
MIIFIjCCBAqgAwIBAgIUXIAvY4WikFU3M+c2C542Q/i/38YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjYzODZGQUJFQTM5MjEwQjY2NUE2QTU1QUU1REE2NkJF
Njc0MTU5NzAeFw0yNjA2MDQxNjI3NTFaFw0yNzA2MDMxNjMyNTFaMDMxMTAvBgNV
BAMTKEVDMEQ3M0U1MjcxNjAxNUUzODU3QTFERjQzRkI0REU2NUZDMzI5NUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5V+9vb/ogfp2tg2N+Ybf+/BDi
s7tV4WZh59xs3tFBkpnQPVM3a2IpOfIYDoOtcetWAFIuDnoQm0IBruguuIQls71e
OlRfYU+hfgThitQWMMZnwvwkzEPRVqilguRtRoLNPC2Sw28Hrrgh/QEfLUB/+lW9
HVRpHStQze1lizORN3H7sOmaVhVXsx1PpqQTZqRCRoU6UhTGuRMURdGTWeBITtaD
+d1nWG+QHZ4l3Rws5I6p89pHBxy3UXFgeVi4L7Q3tCBxaCCbhFwPb48z7Xdh00Nl
5XIWa5KC6dmwYLPEamXqqd4eq2QJ1Kqw3/JlxkkIiTVEUsdCBHtwG4bQT6YhAgMB
AAGjggIsMIICKDAdBgNVHQ4EFgQU7A1z5ScWAV44V6HfQ/tN5l/DKVowHwYDVR0j
BBgwFoAU9jhvq+o5IQtmWmpVrl2ma+Z0FZcwDgYDVR0PAQH/BAQDAgeAMG4GA1Ud
HwRnMGUwY6BhoF+GXXJzeW5jOi8vcnBraS0wMS5wZHhuZXQudWsvcmVwby9wYXJh
ZG94bmV0d29ya3MvOC9GNjM4NkZBQkVBMzkyMTBCNjY1QTZBNTVBRTVEQTY2QkU2
NzQxNTk3LmNybDCBkwYIKwYBBQUHAQEEgYYwgYMwgYAGCCsGAQUFBzAChnRyc3lu
YzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYz
ZTAxODU3NTVjOTFiZTNmOWQvNy9GNjM4NkZBQkVBMzkyMTBCNjY1QTZBNTVBRTVE
QTY2QkU2NzQxNTk3LmNlcjCBkQYIKwYBBQUHAQsEgYQwgYEwfwYIKwYBBQUHMAuG
c3JzeW5jOi8vcnBraS0wMS5wZHhuZXQudWsvcmVwby9wYXJhZG94bmV0d29ya3Mv
OC8zMjYxMzAzNTNhNjQ2NjYzMzQzYTMyMzczMzMxM2EzYTJmMzQzODJkMzQzODIw
M2QzZTIwMzUzMjMwMzIzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF38QnMTANBgkqhkiG9w0BAQsF
AAOCAQEAEOh2abL0ypqtCFq+8+Nm+s+4Jh85Psmu2CsUIKORP82hDMrTGHA9lnuJ
RmRLIFaYkAmYQ+4etv/YiadMiLhM+s0IoXpGB6NUK7aO/M0xpFDULl0IX+ey9sY8
+b9+d8HjLGbLieBz5I4UKPVuQWG9WiLBh28UffMrXLmlhsL3jJ+WPCS8US4qZKGj
uSAG24Hw/w/5zLIqfJ3V1DEWRIjbLhkeC5d4NpURqzt4PzO084k7M+vetxH1kJU5
tU5zslFTdjMoEkjZhjDysi31HRzESJDNJ9LyD1+8WUxFFeVTT5CfPzSFK9KsauDK
kV7q4MzdLuH3g7Bbj2JZCg2MRP6Qug==
-----END CERTIFICATE-----
Generated at Thu Jun 11 21:56:33 2026 by rpki-client