Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a326433383a3a2f34382d3438203d3e203532303235.roa
File:                     326130353a646663343a326433383a3a2f34382d3438203d3e203532303235.roa (raw, json)
Hash identifier:          gmdwe839je6XWtnPqJkOl3h7op7O57VnfQK6x73x5BA=
Subject key identifier:   87:7F:B0:7E:BB:A3:DA:F9:4F:84:A0:8E:83:20:99:CA:0F:39:03:2F
Certificate issuer:       /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial:       6A4F4B78D0C551485732327D91CD2ABB3895C1BE
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a326433383a3a2f34382d3438203d3e203532303235.roa
Signing time:             Thu 04 Jun 2026 16:33:01 +0000
ROA not before:           Thu 04 Jun 2026 16:28:01 +0000
ROA not after:            Thu 03 Jun 2027 16:33:01 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:2d38::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:4f:4b:78:d0:c5:51:48:57:32:32:7d:91:cd:2a:bb:38:95:c1:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
        Validity
            Not Before: Jun  4 16:28:01 2026 GMT
            Not After : Jun  3 16:33:01 2027 GMT
        Subject: CN=877FB07EBBA3DAF94F84A08E832099CA0F39032F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:c4:cb:54:9b:af:77:e9:f1:27:d0:80:bd:65:
                    59:6f:f0:ac:41:d1:96:94:f6:9d:9c:d5:ab:38:71:
                    9f:56:33:b1:23:2c:51:1f:f4:df:91:07:4d:2b:5e:
                    6f:d5:d6:d9:1b:d4:d2:3d:c3:d1:bc:d9:c0:7b:9b:
                    b3:8b:9c:bf:b0:b3:b5:49:a6:95:1a:e5:94:38:c2:
                    f3:1d:7a:4f:93:e1:e3:d6:d1:3c:79:82:40:46:2b:
                    a2:46:5a:66:85:71:85:e7:a4:14:5d:93:c2:47:80:
                    c7:33:d7:4f:e0:03:53:92:10:ef:78:d5:6f:26:3a:
                    91:61:a1:98:8b:e6:a6:d3:c6:c7:d7:c1:61:eb:d3:
                    19:f8:fe:b0:6c:c7:c9:d6:7f:a3:c0:20:13:ab:4b:
                    b0:b4:a2:44:af:cb:9d:46:c2:1c:45:28:76:5c:1f:
                    3e:4e:18:32:4c:e5:6f:07:0f:73:c1:16:dc:2b:77:
                    0e:a7:8f:06:8a:2f:83:6d:51:77:41:00:36:5e:8d:
                    84:fd:72:f0:8a:23:66:13:c6:5e:1c:1a:ce:ef:a0:
                    91:2e:ad:7c:67:06:73:8a:2d:48:19:66:cd:1d:5e:
                    c5:7d:fb:c6:27:d2:89:0b:6d:f2:8b:ec:a9:a3:76:
                    95:e0:6a:91:e9:e0:4e:26:ff:b3:15:75:44:11:93:
                    46:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:7F:B0:7E:BB:A3:DA:F9:4F:84:A0:8E:83:20:99:CA:0F:39:03:2F
            X509v3 Authority Key Identifier:
                keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a326433383a3a2f34382d3438203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:2d38::/48

    Signature Algorithm: sha256WithRSAEncryption
         42:c2:13:e8:1c:6d:f9:8a:6b:21:30:95:a7:27:e8:20:85:16:
         5d:87:90:e7:39:66:44:09:81:11:73:74:f1:d9:07:74:03:fe:
         7b:be:7e:d8:2e:31:e3:69:6c:b7:c6:33:b6:b7:44:97:f8:58:
         6c:a7:16:c6:8a:52:81:cf:71:4c:fc:ff:34:99:20:21:70:dc:
         47:9a:da:9b:35:40:b5:24:5d:e3:31:e9:43:16:f9:f2:6a:ed:
         36:93:e6:35:30:b2:4a:66:7e:aa:91:f9:ef:9e:93:9a:4a:cb:
         21:45:e7:8f:be:d8:39:7e:4c:93:91:0e:50:57:f2:5b:90:28:
         a7:20:98:22:a8:34:f7:b1:9d:e6:78:48:a1:fc:4a:93:c7:04:
         ee:d8:c3:9c:e9:ad:7e:05:97:89:b7:3f:71:79:8f:24:32:2c:
         24:a7:22:ea:46:f0:c2:5c:b2:5f:cc:f9:45:c1:e0:39:37:d4:
         a8:be:4e:39:17:28:ad:34:75:4e:c7:0d:8f:33:ba:5a:f1:9f:
         d1:b7:31:fa:f1:08:18:a8:e8:86:17:13:d5:63:06:90:2c:2c:
         3c:ce:1a:9f:19:28:22:4e:90:7c:f7:b7:e5:a4:8c:d9:4d:e3:
         39:4f:36:c3:b1:e1:0f:cb:3e:8b:2d:0b:f6:df:1b:65:9c:ea:
         2d:72:cd:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 21:56:34 2026 by rpki-client