Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a33343a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a33343a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          3d751J7Tl4MiUIwFsBpy2agbLse1PV2dJZwGG4eDeEI=
Subject key identifier:   E2:98:16:21:2B:D5:43:3C:82:22:55:F9:F2:98:C7:2D:EF:6B:AC:73
Certificate issuer:       /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial:       436974F3D239D486821D62C5481B90298CF9A652
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a33343a3a2f34382d313238203d3e203532303235.roa
Signing time:             Thu 04 Jun 2026 16:32:47 +0000
ROA not before:           Thu 04 Jun 2026 16:27:47 +0000
ROA not after:            Thu 03 Jun 2027 16:32:47 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:34::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:69:74:f3:d2:39:d4:86:82:1d:62:c5:48:1b:90:29:8c:f9:a6:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
        Validity
            Not Before: Jun  4 16:27:47 2026 GMT
            Not After : Jun  3 16:32:47 2027 GMT
        Subject: CN=E29816212BD5433C822255F9F298C72DEF6BAC73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:2a:c9:4a:af:6a:e3:82:a7:6c:ae:80:0b:c7:
                    d4:1d:5f:b3:ba:ce:7e:49:dc:40:10:a0:8e:c6:d1:
                    53:a6:30:e2:eb:9e:35:d9:8f:c2:51:b0:f1:be:92:
                    d6:fb:9e:1e:c9:4f:ec:f7:fa:79:55:90:41:90:11:
                    d9:90:d3:a8:18:64:04:8a:23:03:be:8e:8e:fe:f1:
                    10:84:eb:4d:8a:82:b9:61:b0:aa:01:02:f8:bc:1d:
                    f1:de:a3:48:0b:b5:14:2f:d2:81:68:d6:f4:35:d7:
                    bc:19:60:19:47:f8:75:97:12:68:49:68:ac:79:a1:
                    c7:6b:ec:9b:24:19:6c:22:3a:e1:3a:e7:f7:1d:6d:
                    21:7a:f8:31:0e:d0:d3:04:a5:94:5e:ea:c9:6c:e9:
                    da:91:94:d2:54:31:b7:ac:9e:f5:ca:28:bd:dc:a6:
                    3e:f7:2e:9b:e2:21:38:42:7d:3a:b3:e2:7b:4c:56:
                    bf:46:58:19:eb:84:64:5d:31:b5:a2:2d:c0:70:c7:
                    b6:be:be:01:19:f5:bd:f6:92:b8:25:db:ac:3f:f6:
                    18:1b:d6:ad:c6:39:da:6a:c5:cf:ad:a2:56:58:93:
                    74:45:d0:38:0c:ff:28:23:b2:41:57:3d:50:c7:86:
                    a1:d8:11:cd:7e:b3:5d:8c:de:5c:a9:b1:25:8a:d3:
                    56:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:98:16:21:2B:D5:43:3C:82:22:55:F9:F2:98:C7:2D:EF:6B:AC:73
            X509v3 Authority Key Identifier:
                keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a33343a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:34::/48

    Signature Algorithm: sha256WithRSAEncryption
         28:5c:6a:cc:3d:2c:53:6d:14:4b:6e:65:1a:01:57:fa:1e:28:
         95:a8:05:b6:c3:09:d1:ef:92:db:ea:7e:32:ee:d0:6e:0d:31:
         50:2f:e1:9d:ad:52:a5:98:92:06:06:b3:1f:06:18:d9:8f:72:
         40:77:f0:99:33:f9:ba:9b:cd:ca:1b:7f:c6:6c:9c:25:ed:34:
         04:af:c8:ed:89:8a:1d:3c:11:53:ae:9d:c2:2f:0b:ae:d9:24:
         37:23:01:3f:84:32:40:74:19:ba:ae:4b:b3:6c:2a:8f:81:80:
         53:90:39:62:4c:77:fe:61:37:d6:d1:a7:7c:93:79:54:14:c0:
         97:24:9a:e1:d9:f5:66:d4:e5:9e:e1:1e:b7:94:d1:29:1c:fc:
         2c:53:36:9d:5d:5a:33:e6:1f:08:0f:87:3b:b8:ae:a6:ff:43:
         7e:09:99:d2:15:51:45:fc:5d:aa:8b:e2:ee:1d:d1:f5:13:27:
         5a:c3:55:93:d9:8c:78:57:ef:68:5a:f1:b0:1c:84:7b:ac:76:
         17:4d:ce:f9:fe:de:30:97:33:8a:55:9d:c7:a2:6a:4d:0b:3f:
         a5:dd:80:79:d3:5b:cf:ae:34:1e:17:c4:3c:16:c2:a2:75:1d:
         94:8d:42:64:dd:76:0d:ac:10:a8:77:9e:66:15:d8:66:11:d4:
         46:47:66:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 21:56:14 2026 by rpki-client