Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a326633613a3a2f34382d3438203d3e203532303235.roa
File:                     326130353a646663343a326633613a3a2f34382d3438203d3e203532303235.roa (raw, json)
Hash identifier:          zNZ2meD2zLygUPHV8AA1Z4aj4s2a+XcqRY0YSk3GO0Q=
Subject key identifier:   40:85:15:6B:9E:A1:6E:AE:BD:75:2C:08:B1:33:DA:98:B4:59:FD:04
Certificate issuer:       /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial:       05A939D2BAAA9BDCB1DD25488F56942655DBE31B
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a326633613a3a2f34382d3438203d3e203532303235.roa
Signing time:             Thu 04 Jun 2026 16:32:45 +0000
ROA not before:           Thu 04 Jun 2026 16:27:45 +0000
ROA not after:            Thu 03 Jun 2027 16:32:45 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:2f3a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:a9:39:d2:ba:aa:9b:dc:b1:dd:25:48:8f:56:94:26:55:db:e3:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
        Validity
            Not Before: Jun  4 16:27:45 2026 GMT
            Not After : Jun  3 16:32:45 2027 GMT
        Subject: CN=4085156B9EA16EAEBD752C08B133DA98B459FD04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:39:3c:73:82:d9:54:7b:f0:6a:da:99:4a:f8:
                    ef:30:86:55:2a:0e:0d:79:f4:29:4e:ce:f1:bc:07:
                    06:b0:07:54:f2:f9:61:99:9e:d1:ab:28:f4:54:3c:
                    ea:23:1f:54:7e:2f:83:7a:9b:77:5f:99:5b:82:7b:
                    ee:8f:57:6f:1c:69:00:52:78:44:41:c5:4f:62:a4:
                    b5:07:29:74:ab:5f:61:8e:17:37:ad:86:a1:be:f5:
                    83:3f:b9:95:c0:d3:be:99:5b:c4:24:e1:02:73:e2:
                    37:46:2d:c0:db:3e:c6:40:c6:41:5d:49:99:20:ce:
                    dc:33:30:0c:a7:88:e6:9c:36:8b:67:a9:3c:27:05:
                    01:c3:8d:f6:5a:c0:c6:30:22:63:78:e4:2d:cd:cc:
                    df:87:42:5f:f5:fb:a7:d2:56:27:12:2c:45:33:15:
                    66:c5:ed:52:76:2c:de:2f:3a:cb:f5:0f:27:d3:5f:
                    3b:74:e2:dd:b7:43:6e:59:49:5e:ab:5f:81:27:d8:
                    04:cf:dd:9d:6d:b2:1f:c3:32:a3:09:3c:a4:3f:ad:
                    43:2d:6b:7e:64:b2:e8:bf:3f:35:44:38:9d:3d:ad:
                    31:7e:74:3d:bb:71:29:57:ba:9d:93:e0:c7:35:a7:
                    d2:39:5f:da:4f:99:8b:6d:e4:c1:cb:01:c3:3b:91:
                    0c:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:85:15:6B:9E:A1:6E:AE:BD:75:2C:08:B1:33:DA:98:B4:59:FD:04
            X509v3 Authority Key Identifier:
                keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a326633613a3a2f34382d3438203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:2f3a::/48

    Signature Algorithm: sha256WithRSAEncryption
         6a:71:a8:b6:91:72:f2:36:70:62:c0:62:c1:b7:36:29:bf:b6:
         28:f2:06:51:2e:01:2f:be:70:74:69:d0:11:16:d3:3e:c1:9d:
         55:7c:da:70:dd:77:0d:5f:75:7f:17:50:b8:42:ba:3a:f7:80:
         a5:e1:38:03:27:03:bc:86:03:c1:5d:50:fd:f9:2c:04:ed:42:
         4d:8e:b7:dc:92:de:94:a1:52:fc:31:df:a3:79:d4:73:c1:2f:
         24:c2:54:30:45:b2:32:ad:57:69:97:b5:a4:f8:8f:a2:69:7e:
         26:d6:05:5c:fc:24:29:20:61:c9:83:b7:e0:1d:24:db:cd:cd:
         1c:fe:85:a4:14:3c:2d:03:ae:60:41:d1:e7:73:64:55:eb:b6:
         aa:dd:0b:f2:f4:61:8a:7b:f5:b0:80:cf:88:a7:86:40:a5:9a:
         bf:49:5e:9b:43:59:1f:a0:fd:92:e8:c5:9e:54:e6:24:c6:16:
         68:ab:a2:d9:f7:14:4b:3e:ed:39:9a:58:16:af:81:da:07:7b:
         2b:3b:ee:66:0d:6c:b4:05:b4:d9:10:be:15:ae:01:d7:9a:05:
         d2:12:fa:03:08:42:68:5b:71:06:2f:59:00:87:7a:7c:5e:2c:
         98:58:7b:e9:fa:d4:29:7b:4b:af:86:cf:64:06:55:5b:47:f4:
         54:4d:b9:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 21:58:08 2026 by rpki-client