Route Origin Authorization

$ rpki-client -vvvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a326133393a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a326133393a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          0fQovOJ94u3RuJz9uC3+8VJ97qu+qMutvQNOlnGhnS0=
Subject key identifier:   D7:96:F3:C7:73:9F:AE:01:D5:5D:82:DE:AB:0A:8D:76:7F:BB:D6:8C
Certificate issuer:       /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial:       422B8AA7B83E44536D175632A06BBF0CEF1B2976
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a326133393a3a2f34382d313238203d3e203532303235.roa
Signing time:             Sat 15 Aug 2026 23:19:40 +0000
ROA not before:           Sat 15 Aug 2026 23:14:40 +0000
ROA not after:            Sat 14 Aug 2027 23:19:40 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:2a39::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Aug 2026 22:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:2b:8a:a7:b8:3e:44:53:6d:17:56:32:a0:6b:bf:0c:ef:1b:29:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
        Validity
            Not Before: Aug 15 23:14:40 2026 GMT
            Not After : Aug 14 23:19:40 2027 GMT
        Subject: CN=D796F3C7739FAE01D55D82DEAB0A8D767FBBD68C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:56:ec:bd:ab:1f:11:76:9d:27:a5:31:ae:7f:
                    6e:8c:04:67:37:96:d3:e1:5a:77:23:3b:4f:df:0d:
                    d4:2a:03:9d:0b:cd:bb:d2:7a:c3:44:27:2d:43:6f:
                    6f:f1:68:db:14:95:e4:77:ba:77:61:f3:f5:44:dc:
                    19:85:09:0d:7d:ba:33:ed:48:ef:fd:73:4a:76:6e:
                    d4:3b:3d:76:5c:98:59:60:ce:c7:c8:74:a8:72:98:
                    7a:36:2d:02:58:25:98:d5:ce:c7:78:a8:2e:6f:90:
                    6f:34:1a:18:f2:b7:a3:09:be:e5:e6:ae:4c:d6:0e:
                    8f:95:46:fa:8a:1c:3f:ab:38:fc:fe:e4:92:50:39:
                    7e:09:64:57:7b:36:dd:8d:60:31:bf:25:98:44:64:
                    1e:aa:b8:83:90:ea:e3:78:aa:70:53:cc:26:4e:89:
                    f7:ab:33:41:30:8f:84:12:68:b4:78:66:b0:0c:52:
                    bf:97:e0:6f:23:71:e3:e5:56:08:02:9b:4b:d8:35:
                    ff:10:e2:d4:f3:2f:f0:f8:ec:c8:21:24:8f:d4:b7:
                    37:d3:bd:7b:4e:1b:7b:ac:95:f1:03:f3:bc:0f:58:
                    ed:1b:d6:c4:86:a4:df:c8:62:2f:a7:dc:8f:88:ac:
                    25:61:ca:e5:b6:f5:ba:ca:1e:59:e5:7b:50:db:ac:
                    1e:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:96:F3:C7:73:9F:AE:01:D5:5D:82:DE:AB:0A:8D:76:7F:BB:D6:8C
            X509v3 Authority Key Identifier:
                keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a326133393a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:2a39::/48

    Signature Algorithm: sha256WithRSAEncryption
         6e:61:58:7c:99:93:77:b7:3b:a1:3a:fb:39:ee:0a:29:5a:4a:
         4c:cb:6e:02:d9:58:c8:33:90:b9:86:28:fd:cf:3b:c5:e6:be:
         7f:20:7e:dd:a5:d3:bf:d1:85:70:d0:05:67:82:6e:fc:eb:20:
         76:a3:40:e1:5a:c9:b0:c4:e5:de:c8:42:e6:31:64:a3:71:10:
         f0:32:6c:eb:cc:0e:71:f0:6d:38:dc:9c:33:03:e2:2f:b6:6c:
         5f:41:9e:0a:fe:34:64:60:b9:da:73:fe:3d:e2:c7:66:5b:df:
         f4:17:36:ee:3b:c9:42:61:f3:7c:24:e2:5a:0b:2b:c8:4d:1a:
         55:1c:89:20:dd:7b:5b:62:ab:cd:99:46:9a:b1:e3:06:45:f7:
         ea:97:02:ab:4d:86:b6:a0:28:ae:90:b3:b7:df:a1:df:ae:4f:
         4a:ef:5e:96:ec:95:96:3a:ac:3f:05:b3:36:d0:87:d0:41:eb:
         99:34:87:ae:14:42:74:29:5e:6b:1b:44:61:ef:ec:b5:7a:01:
         5c:e0:ad:a8:4c:f3:fb:4c:27:af:03:3c:cf:5d:93:46:78:f4:
         ca:79:04:92:70:67:79:e4:45:e7:bf:ff:d8:b7:67:e9:ba:a9:
         bf:43:45:da:62:c1:75:6d:08:a3:69:d5:e4:c9:f3:aa:ce:00:
         06:d6:24:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 07:33:55 2026 by rpki-client