Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a33363a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a33363a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          qvMlsmkdBn0JmGYOHcen4hn4TvPn6KoZeU52mNbobSc=
Subject key identifier:   36:CE:9A:77:E3:65:A3:E7:CF:97:28:67:B5:9C:F1:8C:F1:E2:4B:04
Certificate issuer:       /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial:       1E1DED0182DE0704125AD7DBADB4D73E2AABDD8D
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a33363a3a2f34382d313238203d3e203532303235.roa
Signing time:             Thu 04 Jun 2026 16:32:39 +0000
ROA not before:           Thu 04 Jun 2026 16:27:39 +0000
ROA not after:            Thu 03 Jun 2027 16:32:39 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:36::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:1d:ed:01:82:de:07:04:12:5a:d7:db:ad:b4:d7:3e:2a:ab:dd:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
        Validity
            Not Before: Jun  4 16:27:39 2026 GMT
            Not After : Jun  3 16:32:39 2027 GMT
        Subject: CN=36CE9A77E365A3E7CF972867B59CF18CF1E24B04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:1f:22:ae:1a:d7:d7:6c:bc:81:6e:f1:9c:66:
                    05:85:ec:46:02:3e:1f:78:6e:fc:62:40:75:38:f9:
                    0e:18:99:53:ed:9f:ef:a0:6b:23:16:e1:8e:4a:95:
                    a8:e5:58:08:71:0e:56:43:96:31:5e:00:b3:42:af:
                    69:b6:18:a4:06:f9:35:c3:18:93:9f:49:be:cb:91:
                    9c:ab:10:1a:ea:69:e8:53:06:71:87:17:ec:b4:fa:
                    af:81:ba:c3:96:55:28:bc:4e:d2:74:9f:ff:87:4e:
                    13:8a:8d:a3:46:19:b4:88:2c:5f:19:3c:b7:62:6c:
                    2e:28:90:19:1b:4f:04:30:35:cb:33:fb:ba:c6:a3:
                    b0:be:25:c5:3e:29:e7:08:a0:4e:91:01:af:22:e3:
                    0c:83:0b:7f:8a:45:88:1f:b3:cb:aa:ca:6d:93:f0:
                    22:b8:ac:21:1b:44:3a:7d:48:27:e3:6e:3a:f8:69:
                    34:d4:b0:a8:ea:ee:9d:95:f4:d4:10:30:fb:1a:0e:
                    8b:f9:09:45:0d:f7:10:97:7d:21:dc:e9:64:bc:63:
                    7c:ce:8d:1e:c2:07:2b:c2:f0:be:d6:3e:68:90:47:
                    83:a7:8c:69:d7:7f:bd:00:c3:ab:0a:fb:0b:28:da:
                    a1:2e:86:c0:ce:58:02:17:68:73:f0:27:ac:22:c2:
                    2b:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:CE:9A:77:E3:65:A3:E7:CF:97:28:67:B5:9C:F1:8C:F1:E2:4B:04
            X509v3 Authority Key Identifier:
                keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a33363a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:36::/48

    Signature Algorithm: sha256WithRSAEncryption
         68:4e:48:d8:4f:83:e4:07:ed:63:3d:68:41:40:c5:9d:c6:be:
         ac:93:7e:8b:e2:80:80:09:f8:c1:7e:1d:b3:b7:f1:4e:0a:50:
         04:f7:08:21:0e:e1:fa:77:5c:4e:25:24:b7:85:af:f7:d2:1c:
         4c:76:43:3f:0f:42:b1:83:40:dd:39:b8:df:6b:e0:a3:68:0b:
         1d:14:ef:8f:72:dc:7a:74:a6:40:46:01:f3:b9:7b:ad:76:6b:
         77:8c:0c:b9:73:ff:57:89:93:61:5e:9b:74:80:a5:9d:cc:3e:
         68:20:0f:82:ba:db:7c:96:d8:32:d6:02:9a:9b:d7:c5:60:02:
         a8:69:a4:1b:19:b2:ed:9e:7c:f8:b5:26:56:fb:a9:6d:42:7f:
         4e:f4:4f:30:84:15:90:da:b1:23:00:8e:7e:e5:70:94:28:f0:
         7a:90:9e:f9:7e:6c:20:fb:d4:0b:1a:57:c2:b5:90:a7:68:4f:
         78:e2:14:53:32:22:07:8f:4b:f1:62:bf:40:59:ef:ee:a9:34:
         4d:c3:a4:9f:b5:0e:ab:71:6d:10:43:c8:b1:f0:30:f0:73:ee:
         25:60:c7:b8:9c:19:ba:9b:39:7d:9f:50:cf:90:6b:30:00:c3:
         10:12:02:f4:01:06:f9:55:af:2a:c6:27:3a:8d:68:22:5a:74:
         33:02:f7:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 21:54:27 2026 by rpki-client