Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a326533393a3a2f34382d3438203d3e203532303235.roa
File:                     326130353a646663343a326533393a3a2f34382d3438203d3e203532303235.roa (raw, json)
Hash identifier:          bovL6VmNPizctrTvdjD63/iaDOtJ9JCU/hwUhQwgmik=
Subject key identifier:   98:5A:D8:C2:6A:70:58:09:6E:6F:62:06:11:15:EB:C3:07:D7:23:18
Certificate issuer:       /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial:       751E45D4D3F08D634B2EF4CD043FF0730119A0AC
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a326533393a3a2f34382d3438203d3e203532303235.roa
Signing time:             Thu 04 Jun 2026 16:32:58 +0000
ROA not before:           Thu 04 Jun 2026 16:27:58 +0000
ROA not after:            Thu 03 Jun 2027 16:32:58 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:2e39::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:1e:45:d4:d3:f0:8d:63:4b:2e:f4:cd:04:3f:f0:73:01:19:a0:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
        Validity
            Not Before: Jun  4 16:27:58 2026 GMT
            Not After : Jun  3 16:32:58 2027 GMT
        Subject: CN=985AD8C26A7058096E6F62061115EBC307D72318
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:22:2b:f8:1c:80:31:ba:ec:cf:4e:28:50:59:
                    4a:30:52:e8:e9:b6:fb:a9:18:a8:e2:97:75:94:03:
                    77:98:07:ad:d7:2f:29:b0:2f:35:56:14:d5:75:67:
                    f2:a8:1d:88:14:b4:5a:48:8f:02:37:52:be:64:c9:
                    66:5d:c4:e3:8e:57:29:c5:fb:67:52:1b:56:6b:78:
                    11:f7:62:af:46:b7:57:05:5b:f4:26:22:b6:f5:cb:
                    42:79:b0:7d:a2:98:19:58:d3:9d:73:c7:87:ff:37:
                    06:f8:46:0e:70:1a:ea:e9:6b:c3:6d:0f:89:e4:d8:
                    4d:aa:ac:73:4b:69:bd:6e:fb:d5:32:6b:4d:9c:db:
                    4b:b5:f2:07:f7:3e:86:ba:2e:09:cd:27:eb:93:1f:
                    cf:23:ea:e1:d2:72:3a:5d:ca:9c:93:89:0a:da:89:
                    cc:fa:64:c0:c0:c0:e3:d6:2d:55:3a:32:f6:b4:f1:
                    4b:c7:f9:4d:1d:a8:71:42:8b:4a:67:07:57:8c:5b:
                    8f:62:e5:2d:e6:44:22:f9:13:02:9a:48:1d:89:55:
                    7e:91:05:14:2b:ee:03:14:0f:a1:63:0b:c6:90:b9:
                    6e:cb:52:33:80:2c:74:d4:77:ca:82:c1:c3:63:a1:
                    c0:fa:ce:52:c6:6e:ef:e9:f0:b8:78:ee:51:1b:44:
                    f1:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:5A:D8:C2:6A:70:58:09:6E:6F:62:06:11:15:EB:C3:07:D7:23:18
            X509v3 Authority Key Identifier:
                keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a326533393a3a2f34382d3438203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:2e39::/48

    Signature Algorithm: sha256WithRSAEncryption
         7b:b9:08:1d:0a:8e:10:50:35:11:8e:f5:f5:cb:5b:1f:49:9e:
         07:2c:68:2e:ac:0d:68:b2:a1:7d:ca:a4:97:c5:9f:7a:f1:b4:
         08:5e:6d:ce:01:96:d3:f1:f2:b5:c6:6c:3f:ad:99:f0:c0:9e:
         dd:fc:f6:e2:92:26:df:87:d4:c3:44:4b:08:d9:b2:ec:ef:ca:
         84:01:05:a9:c5:b9:72:ee:2a:7f:e1:31:2c:02:2e:c7:e9:73:
         59:cd:13:bb:47:ff:43:aa:c9:50:04:e6:43:a9:7a:f2:21:1a:
         a7:72:9f:05:ed:9d:01:40:4a:e4:82:fd:24:af:8a:f6:1a:4f:
         9d:f4:c7:20:e2:37:a3:e1:18:26:15:2b:de:02:a8:8f:a8:b0:
         12:7d:33:48:03:98:d4:33:f3:85:23:a2:62:4b:89:5d:1b:eb:
         c1:a5:c3:5a:e2:02:23:2d:68:15:be:70:6b:99:ca:8e:bb:ef:
         38:9a:f6:97:c2:3b:bf:80:50:ca:5f:01:94:71:6d:de:30:38:
         48:54:e6:93:c1:d9:d8:8b:ee:6b:67:71:ca:84:03:37:6e:78:
         2e:f7:71:4b:ea:23:00:f2:a1:6a:44:16:1c:34:ca:2b:cd:79:
         78:7f:00:0c:f9:97:fc:ff:fb:a7:a5:26:d6:9f:00:0d:3d:a5:
         d7:99:e7:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 21:56:40 2026 by rpki-client