Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a326333373a3a2f34382d3438203d3e203532303235.roa
File:                     326130353a646663343a326333373a3a2f34382d3438203d3e203532303235.roa (raw, json)
Hash identifier:          hYzvTLUywIslbOfyrGe3Z3RsVTI0BVeZZSrD+X4jBis=
Subject key identifier:   27:88:C9:52:E4:0F:3A:C3:CA:80:7A:7D:6F:0A:1E:0A:9F:C8:93:6E
Certificate issuer:       /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial:       189C807CD96D046BCEA94C880F294C2AC3DB7222
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a326333373a3a2f34382d3438203d3e203532303235.roa
Signing time:             Thu 04 Jun 2026 16:32:43 +0000
ROA not before:           Thu 04 Jun 2026 16:27:43 +0000
ROA not after:            Thu 03 Jun 2027 16:32:43 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:2c37::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:9c:80:7c:d9:6d:04:6b:ce:a9:4c:88:0f:29:4c:2a:c3:db:72:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
        Validity
            Not Before: Jun  4 16:27:43 2026 GMT
            Not After : Jun  3 16:32:43 2027 GMT
        Subject: CN=2788C952E40F3AC3CA807A7D6F0A1E0A9FC8936E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:fd:18:9f:b1:0e:23:d8:9f:f1:55:9d:8e:80:
                    f8:b1:d0:30:d7:c3:db:d0:e4:31:22:7c:40:7f:8d:
                    af:91:99:a9:68:84:2e:bb:fc:7d:13:9d:72:dd:6c:
                    25:b0:d0:06:57:df:8f:fd:34:29:bf:25:e3:6c:ad:
                    b8:fe:5b:40:34:18:0a:ff:6a:05:dd:5f:d0:05:e1:
                    bd:04:69:14:ad:ac:2c:e3:82:e2:08:d8:1a:ca:16:
                    ca:6e:60:72:f1:da:7f:44:43:ed:98:e9:6e:a3:81:
                    0b:61:c2:ff:c5:10:d8:9d:cf:c2:25:a1:bb:76:0c:
                    8c:3b:b5:c2:bf:7a:c3:89:47:ee:b2:1d:68:af:27:
                    51:a8:c2:56:36:38:f1:7c:02:a2:b2:9d:d6:5a:eb:
                    20:0c:86:3a:cf:3f:aa:58:00:70:3e:7d:db:b9:5b:
                    13:40:62:48:a1:35:44:e7:1e:47:01:c5:22:d0:40:
                    e6:67:ea:12:a6:77:7e:66:97:37:5b:30:34:94:db:
                    a2:1c:5a:8e:5d:7e:64:ed:0f:3d:6a:ea:94:25:45:
                    8b:3f:10:19:5c:db:87:23:7e:f7:2a:43:1b:27:c9:
                    77:74:42:f9:3f:6a:be:9c:12:a8:b3:92:d0:d7:fc:
                    9d:78:4f:9b:88:80:f7:06:61:f1:9a:3b:b6:0f:69:
                    23:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:88:C9:52:E4:0F:3A:C3:CA:80:7A:7D:6F:0A:1E:0A:9F:C8:93:6E
            X509v3 Authority Key Identifier:
                keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a326333373a3a2f34382d3438203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:2c37::/48

    Signature Algorithm: sha256WithRSAEncryption
         11:4f:b7:f8:7c:1c:73:8c:03:a4:eb:f3:b2:16:b3:14:7e:6e:
         f9:f9:41:e3:62:1a:29:01:5a:61:52:47:48:80:cb:ee:ca:89:
         91:5d:32:f5:4a:31:1f:7a:c5:4c:66:31:da:e2:09:98:6d:02:
         13:c2:32:53:f5:b7:0e:12:c9:7e:0b:bb:11:cf:2f:e0:1c:bc:
         a1:ae:36:6d:c4:bb:1b:d7:fb:31:78:49:4c:bb:b6:c1:93:be:
         49:dc:09:85:4a:01:f8:95:21:03:01:23:cb:c6:75:39:fa:47:
         ca:ae:5e:d4:be:7d:5c:7c:81:6c:54:71:a2:68:86:d4:70:19:
         e8:75:ac:f4:5b:73:c4:cc:bd:fb:12:0a:8b:41:9e:b8:f5:f5:
         3a:d8:7c:79:10:aa:71:51:ac:a6:2b:fa:ed:13:57:95:2a:f3:
         9c:13:47:a3:fb:0a:fb:1b:a3:19:59:78:2f:19:f9:c4:ca:80:
         4b:0d:f4:d9:cd:d8:9d:52:d5:81:6a:46:8a:42:74:a6:cd:81:
         91:54:98:f7:f2:e0:2a:f1:7b:e3:33:9f:a4:bd:4c:db:a5:3b:
         22:b4:86:57:3a:a3:ce:00:e7:60:75:75:d6:a6:70:e5:89:32:
         05:2c:d4:14:f2:d5:f1:67:b6:6e:82:b9:91:1c:a5:be:4a:ae:
         65:57:00:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 21:58:29 2026 by rpki-client