Route Origin Authorization

$ rpki-client -vvvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a323833373a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a323833373a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          t5MEoTdcZM6XuRWBWDGQIMb8HMUgQ0cV7HxScAXPafo=
Subject key identifier:   88:B6:24:55:C7:DB:7C:F7:6D:27:F6:7F:FF:03:FF:58:34:E7:FD:20
Certificate issuer:       /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial:       3008FF85DAC7491942E0412DFF1962F47995F01E
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a323833373a3a2f34382d313238203d3e203532303235.roa
Signing time:             Sun 23 Aug 2026 20:01:57 +0000
ROA not before:           Sun 23 Aug 2026 19:56:57 +0000
ROA not after:            Sun 22 Aug 2027 20:01:57 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:2837::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Aug 2026 22:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:08:ff:85:da:c7:49:19:42:e0:41:2d:ff:19:62:f4:79:95:f0:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
        Validity
            Not Before: Aug 23 19:56:57 2026 GMT
            Not After : Aug 22 20:01:57 2027 GMT
        Subject: CN=88B62455C7DB7CF76D27F67FFF03FF5834E7FD20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:a3:ec:ea:26:5b:05:8e:fb:37:fd:03:0f:b8:
                    8f:12:b8:44:c7:48:95:48:1e:a8:24:ba:c1:b8:bc:
                    60:f3:bf:b4:0e:4a:59:09:48:77:4e:c4:4b:40:8b:
                    91:1b:53:a8:ea:96:b0:2e:d0:03:42:a8:dc:11:94:
                    a8:61:f2:03:98:64:17:62:14:e2:82:b5:bf:a0:c6:
                    91:58:0e:34:43:4e:4e:e4:35:13:09:66:78:48:8c:
                    bd:54:b8:a5:f8:28:73:fd:3f:e8:3a:48:65:b6:dd:
                    8b:36:9c:08:7f:a4:78:38:d4:b7:b8:d8:b3:56:c4:
                    62:c6:1e:08:b4:5d:dd:27:a8:ba:46:98:00:50:c4:
                    f9:f6:4e:35:70:d5:9e:fe:37:c1:7e:67:87:cf:2b:
                    e9:b6:1f:56:38:00:b0:08:f1:f4:c0:1b:a1:be:d1:
                    e1:d4:b8:ae:0a:59:c6:2e:8b:ce:d2:2d:1e:9a:aa:
                    46:27:49:13:aa:a8:e5:fc:e7:33:eb:4b:79:0f:1c:
                    fe:3b:51:e3:51:0d:16:e0:75:68:16:23:b0:e6:88:
                    99:f8:c0:18:5f:e5:69:41:0f:a5:ed:42:e2:a4:85:
                    f9:01:3a:b6:6e:cc:be:2a:05:e6:39:ad:53:43:0b:
                    ad:0a:a5:93:33:e9:52:74:88:37:17:34:ab:8a:4d:
                    02:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:B6:24:55:C7:DB:7C:F7:6D:27:F6:7F:FF:03:FF:58:34:E7:FD:20
            X509v3 Authority Key Identifier:
                keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a323833373a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:2837::/48

    Signature Algorithm: sha256WithRSAEncryption
         31:54:ca:e4:0b:26:f9:9a:00:e8:c3:fd:cd:9c:fa:dc:fc:86:
         00:e5:04:61:93:7e:b1:88:72:58:f6:e6:9a:25:37:e8:aa:cd:
         84:51:b7:5f:0c:4a:42:f2:0a:21:29:55:39:69:9d:7c:f5:c3:
         4f:86:a1:05:e9:0b:94:99:19:6a:7c:f3:50:c8:c8:39:ab:2c:
         5e:b0:74:de:80:73:fe:dc:fa:54:9b:7f:90:22:a5:7b:e5:c5:
         4c:b4:1f:41:42:85:16:9f:2a:d2:89:94:52:c3:bf:17:c8:5c:
         00:9c:59:91:a0:4b:7d:e3:18:d1:59:e9:cd:4a:71:19:67:2d:
         bb:de:99:7c:3a:7d:9a:67:77:be:9a:29:bf:b9:88:e2:a6:d3:
         79:8d:ed:7b:1b:82:46:57:4a:79:1d:d1:49:6d:57:65:6b:e9:
         2d:74:4a:cc:4e:1d:38:56:aa:06:72:2a:16:a1:c1:da:0e:94:
         7d:f1:90:65:70:b8:66:52:f1:e9:7b:26:04:bf:23:e6:50:a4:
         7e:16:7b:d5:96:ea:13:78:65:a0:4f:81:b3:32:9c:30:20:16:
         ec:9b:e7:39:b7:9c:81:8b:4f:5b:fe:c9:a8:7b:48:59:5c:20:
         78:9a:70:c4:0a:c3:0f:58:ac:ec:f7:5f:c9:5f:c8:69:00:ba:
         50:ec:da:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 08:23:08 2026 by rpki-client