Route Origin Authorization

$ rpki-client -vvvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a326333623a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a326333623a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          nuj7MuyAvss285/BVA/k23L2dsDjahNkv4Sofw1cPoM=
Subject key identifier:   86:96:64:6F:85:98:09:B3:AD:8F:A9:9A:E6:A3:AF:15:A5:5A:B8:BB
Certificate issuer:       /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial:       48C7108E6D532D34BF2DE2A351EE2A311618A8B5
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a326333623a3a2f34382d313238203d3e203532303235.roa
Signing time:             Wed 26 Aug 2026 21:01:33 +0000
ROA not before:           Wed 26 Aug 2026 20:56:33 +0000
ROA not after:            Wed 25 Aug 2027 21:01:33 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:2c3b::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 18:12:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:c7:10:8e:6d:53:2d:34:bf:2d:e2:a3:51:ee:2a:31:16:18:a8:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
        Validity
            Not Before: Aug 26 20:56:33 2026 GMT
            Not After : Aug 25 21:01:33 2027 GMT
        Subject: CN=8696646F859809B3AD8FA99AE6A3AF15A55AB8BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:a5:1d:59:15:41:6e:ae:09:9f:6b:e1:7c:3c:
                    b6:b5:b8:21:7d:c3:71:b2:b6:03:d4:da:51:9c:94:
                    2e:d6:22:7a:23:82:d8:ee:70:3e:ea:1e:5a:14:22:
                    a6:8c:00:14:2e:c1:93:4a:95:1d:ad:49:73:d6:d1:
                    90:11:1a:e7:53:4a:e3:85:eb:5b:5d:70:e2:c2:47:
                    20:71:dd:06:dd:cb:64:3e:11:5e:15:15:6e:32:aa:
                    c9:7d:6a:c8:53:57:f7:ff:48:76:da:56:47:04:4b:
                    ea:9a:09:0b:59:eb:cf:a0:96:cb:51:cf:a3:15:c6:
                    d0:de:78:b4:f0:ac:22:df:87:c2:02:44:09:59:a5:
                    be:ed:4e:86:e4:a5:ea:bc:a2:d9:84:ad:1d:6b:50:
                    1a:e2:7e:76:96:25:4f:4c:74:bb:b1:6c:1e:7a:ae:
                    6d:cd:c7:b0:12:0a:28:f0:dc:7f:3f:93:21:a8:f9:
                    91:4b:11:59:f3:a3:48:e7:9d:b5:a2:e5:77:c2:76:
                    a3:df:5d:63:96:04:1f:a4:0a:a2:fc:31:0b:e5:71:
                    9e:71:3a:59:ce:1f:34:1b:df:85:5f:f1:83:f8:71:
                    73:c2:67:49:d9:73:88:84:9b:55:4b:0b:ed:5a:f0:
                    87:39:d4:cf:28:1f:b9:35:e3:07:8d:4a:7d:6d:f1:
                    17:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:96:64:6F:85:98:09:B3:AD:8F:A9:9A:E6:A3:AF:15:A5:5A:B8:BB
            X509v3 Authority Key Identifier:
                keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a326333623a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:2c3b::/48

    Signature Algorithm: sha256WithRSAEncryption
         20:b2:8c:22:27:82:39:c6:0e:8c:98:b0:26:36:89:ee:90:da:
         b2:b5:24:3d:55:c2:33:06:d3:09:85:69:dc:b1:19:ab:d9:e6:
         31:78:61:2e:27:d4:f1:99:49:36:e0:bd:b1:cb:d5:50:76:a4:
         93:8a:46:9b:ee:8e:4c:78:37:06:05:4c:36:bc:22:ff:11:11:
         2e:37:eb:4a:c9:a1:50:5c:d3:e2:17:1b:ca:dd:34:18:39:fa:
         95:bc:2a:34:78:dc:80:49:51:fe:61:7e:70:65:36:c3:87:3e:
         a8:65:bb:d9:41:41:d9:22:53:55:ec:a8:25:5e:ce:a1:32:02:
         32:77:16:80:4d:e8:1b:33:64:45:81:bd:22:e3:f9:c7:47:45:
         c2:f3:3a:be:a0:52:c0:ff:cb:d8:1a:2a:f4:27:a8:59:8e:7c:
         4b:33:a2:d1:f8:70:7b:f0:bb:79:75:1c:78:19:87:0f:93:f4:
         1f:44:b0:88:4a:ef:f1:80:e6:65:da:53:78:ec:4b:3a:dd:e6:
         02:5e:29:9b:e5:5f:70:36:f3:91:64:3b:49:5f:e4:05:d7:2d:
         a9:42:b4:16:e7:97:76:05:b0:10:9b:af:67:e5:4f:88:bd:01:
         c0:20:44:6a:3f:66:c5:81:4c:4b:40:9b:c8:f7:09:1d:15:22:
         6e:54:10:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:40:42 2026 by rpki-client