Route Origin Authorization

$ rpki-client -vvvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a33363a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a33363a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          swSqaFXl42pwJtbp/4DtUmEfaohI0ivtR+dC4PwYr/c=
Subject key identifier:   61:68:C1:C5:BA:A7:EA:92:32:3C:26:31:B5:F7:3A:14:CA:12:FD:D6
Certificate issuer:       /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial:       22E4777726A50F19BED5CA0BF2EB9335C69288EF
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a33363a3a2f34382d313238203d3e203532303235.roa
Signing time:             Sat 15 Aug 2026 23:18:02 +0000
ROA not before:           Sat 15 Aug 2026 23:13:02 +0000
ROA not after:            Sat 14 Aug 2027 23:18:02 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:36::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Aug 2026 23:30:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:e4:77:77:26:a5:0f:19:be:d5:ca:0b:f2:eb:93:35:c6:92:88:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
        Validity
            Not Before: Aug 15 23:13:02 2026 GMT
            Not After : Aug 14 23:18:02 2027 GMT
        Subject: CN=6168C1C5BAA7EA92323C2631B5F73A14CA12FDD6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:4a:fd:72:3c:fd:39:0b:2a:7b:f4:0f:fd:0b:
                    d1:6c:a9:b1:2d:e5:94:11:21:be:83:bd:39:ed:99:
                    32:39:b7:d5:c7:a2:92:df:ea:b9:3b:ba:e8:32:d7:
                    57:27:3b:c4:c4:23:f4:2e:29:ab:44:7b:bc:66:a9:
                    08:1f:8b:63:37:4d:ab:4e:0c:9c:f1:65:1d:63:d1:
                    cc:e9:db:47:e0:38:aa:11:d0:19:b0:04:f9:d1:c5:
                    50:f2:98:64:fb:08:b1:50:79:d4:c0:86:cb:d2:70:
                    d7:ca:07:69:48:02:a9:c3:9b:74:42:fc:25:36:c6:
                    30:1b:2a:e1:1f:40:be:f5:c3:89:6a:2b:ff:ca:d0:
                    2f:b1:38:bf:ba:4f:16:78:8a:c2:2e:7e:40:27:2b:
                    e2:c4:cd:bf:cd:89:f5:7c:3b:1b:14:7f:1a:0b:b6:
                    c0:0f:45:3f:94:84:2a:08:f0:c1:d0:6b:7f:94:3e:
                    ab:ee:cc:f6:2e:2d:3d:c3:59:e1:6b:bc:7a:6e:86:
                    c1:a9:22:71:67:5c:f3:cc:ac:1c:13:c5:b3:10:92:
                    5a:d5:0c:75:a7:87:a2:05:37:f9:8b:83:65:38:9a:
                    7d:f9:97:e7:8b:4d:80:d5:8b:13:2b:37:05:18:ba:
                    20:03:56:ca:bd:92:92:d5:c9:6f:30:e8:d2:2e:37:
                    4d:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:68:C1:C5:BA:A7:EA:92:32:3C:26:31:B5:F7:3A:14:CA:12:FD:D6
            X509v3 Authority Key Identifier:
                keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a33363a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:36::/48

    Signature Algorithm: sha256WithRSAEncryption
         03:cb:0b:56:c0:ea:bb:a6:6a:54:f7:cf:82:66:39:c5:33:82:
         66:9c:7d:e5:13:20:bd:d6:cf:03:99:e9:3f:35:4b:5c:78:df:
         6f:bb:6f:a5:fe:2b:46:e7:ec:fe:03:78:16:12:1b:90:3b:38:
         a4:cd:a8:75:51:89:f9:3f:30:3c:11:6b:7d:c0:0d:bd:2f:8b:
         60:83:ec:4a:e1:8d:8d:22:8e:cb:34:9f:c7:61:1d:03:3a:f2:
         e2:98:b0:71:fc:b4:da:95:f7:d3:9e:a3:d2:c8:eb:60:48:01:
         86:61:bd:ce:77:5c:b4:51:95:66:f9:df:5f:c8:5d:0d:03:7d:
         10:fd:10:1b:cc:52:c4:e3:42:78:59:4c:f0:4a:24:2e:7b:e9:
         76:5e:3f:2d:5b:2c:25:db:10:cd:b1:ff:a9:d9:6b:cc:3c:f0:
         84:4f:1e:50:95:b7:22:8f:b5:bd:a1:28:50:b2:3f:4b:11:de:
         4e:88:77:3a:6b:c3:07:49:11:81:b8:38:6f:c9:ac:2c:04:ec:
         4d:ee:b2:c5:01:9b:e7:e8:09:af:79:ce:b8:0a:4f:d2:a1:e3:
         4f:8e:81:78:2a:d6:d7:2d:05:50:c6:3b:0e:a3:31:ef:4b:b9:
         6d:6f:dd:e6:0f:cc:ec:47:5f:62:b0:c1:7a:02:ea:00:9f:d3:
         5b:1e:89:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 10:36:27 2026 by rpki-client