Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a3331313a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a3331313a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          Ll/3W5mPUHw1Sj6wMT7eVuZZbzmKbO96v013F6sVrSc=
Subject key identifier:   DA:94:C1:4F:DB:80:D1:68:20:A7:AD:39:D0:F4:3E:77:09:07:6F:0A
Certificate issuer:       /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial:       2A0E83585D976946D4098BC1337EE8C6D97F2803
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a3331313a3a2f34382d313238203d3e203532303235.roa
Signing time:             Thu 04 Jun 2026 16:33:03 +0000
ROA not before:           Thu 04 Jun 2026 16:28:03 +0000
ROA not after:            Thu 03 Jun 2027 16:33:03 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:311::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:0e:83:58:5d:97:69:46:d4:09:8b:c1:33:7e:e8:c6:d9:7f:28:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
        Validity
            Not Before: Jun  4 16:28:03 2026 GMT
            Not After : Jun  3 16:33:03 2027 GMT
        Subject: CN=DA94C14FDB80D16820A7AD39D0F43E7709076F0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:5f:fc:6c:ba:a3:c3:fe:98:5d:9e:0a:c9:78:
                    99:b0:9e:31:95:c6:dc:ac:d6:81:12:af:01:8f:4c:
                    8b:7c:58:53:8f:cb:48:6f:0b:31:31:6e:cb:84:17:
                    5e:74:f0:4c:85:ee:e7:68:51:ec:c5:d0:82:ca:51:
                    bb:64:f5:50:bf:f2:2a:21:f0:f5:03:c5:3a:4d:e0:
                    f0:63:e8:9f:fc:12:4b:3a:83:a9:40:f7:f9:6c:2c:
                    81:60:a5:df:03:86:d7:be:5e:86:eb:53:6a:ac:87:
                    f5:3e:65:85:22:3e:7c:41:a6:8e:ee:4a:d2:5e:37:
                    bc:75:31:80:16:89:63:fe:52:c1:03:83:56:cb:9c:
                    d1:07:18:3f:4a:85:df:5f:d1:b8:97:2a:51:e3:37:
                    2a:62:e2:d8:b4:81:06:ee:3f:1c:cf:34:77:77:44:
                    9b:17:f0:b1:08:3c:0d:52:e7:89:5d:ec:fe:10:45:
                    31:5a:5b:7e:b3:7a:8a:08:cd:4e:98:02:d7:9d:ab:
                    ea:24:5d:a5:3b:fa:7b:7e:b8:bd:90:8a:28:9b:51:
                    c9:79:2f:7c:f0:b2:57:af:ee:50:1e:85:46:b1:c3:
                    64:96:94:5f:98:8f:55:7e:aa:d4:a5:6d:c6:75:aa:
                    0e:fa:10:64:df:ac:80:39:99:e8:48:3a:a6:42:0f:
                    61:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:94:C1:4F:DB:80:D1:68:20:A7:AD:39:D0:F4:3E:77:09:07:6F:0A
            X509v3 Authority Key Identifier:
                keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a3331313a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:311::/48

    Signature Algorithm: sha256WithRSAEncryption
         31:f0:a8:b9:51:a1:e7:92:59:1a:29:51:99:b6:93:45:a7:15:
         46:cb:d8:08:18:95:ec:b6:02:0a:50:91:9d:53:d4:1c:24:89:
         33:ff:47:fd:6e:19:ce:cc:1e:a6:fc:47:f5:2f:86:62:80:29:
         57:74:24:33:5b:67:b7:a9:c8:07:ca:7f:59:f5:19:a0:d8:09:
         79:31:1f:08:ad:a0:d8:1c:59:1a:28:1c:f3:31:65:a3:f8:48:
         f8:90:c2:2b:fd:93:81:de:ce:60:37:be:c4:d2:4a:0a:df:29:
         ba:e5:45:d9:92:61:37:95:01:11:05:ae:33:22:33:70:2a:1f:
         a4:4f:32:d7:21:cc:5a:46:0b:c7:d8:35:04:8d:f0:a5:73:31:
         87:8e:80:6b:ba:1a:fd:87:8c:c5:3a:91:8a:77:ca:cd:91:6e:
         60:80:68:ca:a3:7b:7d:6d:14:56:1a:77:0c:c9:89:fd:90:82:
         02:f1:4f:d8:14:b0:ed:0d:da:d6:a8:f9:fc:4c:e7:bf:51:12:
         e1:d2:ea:9e:d4:70:e0:ef:53:cf:4c:21:a3:54:27:f4:97:f9:
         95:07:1f:eb:6d:6c:d5:b0:57:7a:c2:d5:1b:7c:51:55:9c:8c:
         66:2d:c2:a6:09:4e:b1:cb:64:7e:f2:44:a5:c6:2d:f8:5b:0b:
         83:38:28:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 21:56:33 2026 by rpki-client