Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a323833333a3a2f34382d3438203d3e203532303235.roa
File:                     326130353a646663343a323833333a3a2f34382d3438203d3e203532303235.roa (raw, json)
Hash identifier:          2N9Fk5TfRtSGqc/8zpE3UB0cm6wYfzJVPqCmUD2HZOY=
Subject key identifier:   85:28:AF:4E:A7:C5:32:13:2B:31:BC:3A:26:EE:83:8E:A1:91:AB:B2
Certificate issuer:       /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial:       0C30696E14E4171174AEB24152A47D8997C0D0CF
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a323833333a3a2f34382d3438203d3e203532303235.roa
Signing time:             Thu 04 Jun 2026 16:32:52 +0000
ROA not before:           Thu 04 Jun 2026 16:27:52 +0000
ROA not after:            Thu 03 Jun 2027 16:32:52 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:2833::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:30:69:6e:14:e4:17:11:74:ae:b2:41:52:a4:7d:89:97:c0:d0:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
        Validity
            Not Before: Jun  4 16:27:52 2026 GMT
            Not After : Jun  3 16:32:52 2027 GMT
        Subject: CN=8528AF4EA7C532132B31BC3A26EE838EA191ABB2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:25:6b:02:43:b9:5d:6d:cc:56:ff:48:f0:00:
                    f3:64:94:33:19:63:dc:13:a5:f4:e9:2d:fc:e9:a0:
                    21:5a:33:4d:db:80:56:ed:e1:45:e9:64:2a:b7:ac:
                    87:d3:de:d0:c0:e9:25:ad:f0:60:46:79:ba:5a:41:
                    fd:7b:0e:26:87:1e:37:62:b7:1d:f7:65:9e:47:fb:
                    cc:a6:64:4a:f2:aa:fa:07:8a:b7:17:33:4a:8b:a9:
                    e3:2b:9e:ee:08:93:51:ec:21:b3:87:b3:51:8d:13:
                    6d:ed:2a:20:49:5b:48:f2:a9:60:77:91:da:3b:66:
                    50:5c:f8:6f:78:03:eb:98:01:31:17:30:23:93:d9:
                    c5:4b:2e:9e:60:2e:40:7b:69:0e:ef:ea:41:22:2b:
                    d3:80:ca:ec:d9:b7:6b:4f:1b:7c:15:19:d9:7e:46:
                    9b:3b:95:ba:24:d3:f2:29:19:c3:03:6d:26:ed:2a:
                    50:0f:d6:28:a4:50:bc:12:39:d7:1f:12:42:b3:1f:
                    04:f3:36:71:5a:26:7c:fa:49:4e:73:dd:e4:79:81:
                    c7:9c:13:0b:49:3e:85:f0:b0:25:49:4e:5e:5e:50:
                    bf:be:f2:2f:5a:ce:38:78:f6:69:f5:6e:32:c3:2c:
                    7c:da:4f:48:b3:00:08:3b:ac:ea:6c:14:3d:d6:ff:
                    4c:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:28:AF:4E:A7:C5:32:13:2B:31:BC:3A:26:EE:83:8E:A1:91:AB:B2
            X509v3 Authority Key Identifier:
                keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a323833333a3a2f34382d3438203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:2833::/48

    Signature Algorithm: sha256WithRSAEncryption
         71:92:39:e7:ad:b5:b4:21:a6:0d:54:c0:d2:66:05:89:e4:ee:
         cd:2e:3c:1e:e9:63:f4:19:8a:6c:f1:79:c4:6f:8d:fb:98:65:
         2b:89:63:ba:58:34:2c:f7:68:a6:73:2b:10:78:35:8b:e3:8d:
         7e:86:31:74:eb:93:20:68:49:77:bb:69:7e:35:ee:b3:58:78:
         da:40:a0:82:ac:1d:6a:92:68:d9:ca:8f:87:df:e6:10:17:47:
         1f:53:33:43:df:bc:9d:c6:8b:cb:71:a6:29:4e:cd:12:98:4d:
         41:2b:9a:e7:7c:fd:d7:eb:25:c4:a3:b3:83:6d:ef:77:32:b4:
         35:58:6e:f4:93:e7:b0:fc:c0:d9:43:c3:be:81:a7:9f:77:2e:
         70:0b:b2:44:7a:2f:74:8d:be:9b:d4:b5:5f:bb:da:99:e2:6c:
         4b:36:7e:1a:82:4d:79:43:f9:11:b4:58:97:b2:cb:90:d3:42:
         60:ff:89:2b:65:41:c0:eb:af:2e:a6:1c:01:9a:02:1a:e6:58:
         f8:6e:7a:e0:cb:7f:e8:c4:b2:2f:a3:33:0b:3b:dd:81:31:bd:
         75:f9:2e:27:47:c7:27:4e:2b:42:de:42:03:56:3a:47:b7:81:
         78:37:dc:30:4d:72:4f:61:ae:d3:11:07:6f:72:ba:58:cd:16:
         1f:77:eb:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 21:56:33 2026 by rpki-client