Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a34353a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a34353a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          IF2hVBuuNwsmlBWrMK8Hd1LKt+YWbMr/kLW1V3hLkaw=
Subject key identifier:   FD:D6:0F:3E:1A:5E:7B:D3:C8:ED:10:04:96:34:8C:77:BC:8B:16:FB
Certificate issuer:       /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial:       15F831E792E5A13C35C1709D9F6C7AB0433F9EF4
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a34353a3a2f34382d313238203d3e203532303235.roa
Signing time:             Thu 04 Jun 2026 16:32:46 +0000
ROA not before:           Thu 04 Jun 2026 16:27:46 +0000
ROA not after:            Thu 03 Jun 2027 16:32:46 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:45::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:f8:31:e7:92:e5:a1:3c:35:c1:70:9d:9f:6c:7a:b0:43:3f:9e:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
        Validity
            Not Before: Jun  4 16:27:46 2026 GMT
            Not After : Jun  3 16:32:46 2027 GMT
        Subject: CN=FDD60F3E1A5E7BD3C8ED100496348C77BC8B16FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:55:cc:2e:00:09:f8:05:42:b4:25:8e:3d:99:
                    25:62:cc:84:90:77:09:eb:f3:91:13:f6:89:78:20:
                    41:3e:a4:d6:1c:c0:15:f0:9d:51:d9:a0:4e:3a:59:
                    7d:f9:38:f6:96:ba:ce:59:6d:14:91:60:54:97:2f:
                    de:af:1c:0a:7f:6b:aa:98:54:64:eb:78:16:19:6d:
                    24:e5:34:73:a8:59:d3:a3:fd:bc:65:ad:26:93:f1:
                    83:63:4c:d0:c8:91:88:09:d3:61:7f:3b:36:ee:5f:
                    44:97:eb:d0:5a:56:ac:e2:fe:fb:09:ec:74:d8:83:
                    23:9a:de:51:5b:88:c6:84:dd:da:ec:32:65:5c:b5:
                    65:a1:cc:e5:c0:bd:36:9c:0f:af:dd:0c:a6:b5:1c:
                    ee:b7:48:30:70:b9:77:98:8b:00:17:d5:dc:43:43:
                    2a:97:8e:9c:54:10:9d:22:72:5f:58:e7:d8:be:5f:
                    b7:16:0b:0d:b0:68:3d:8d:5c:e3:af:a9:23:1a:f1:
                    4e:5a:4d:2c:3b:2b:ee:e2:94:be:bd:59:8c:02:ce:
                    bf:64:01:b7:ac:92:11:89:2a:b0:e4:bb:cf:9b:c3:
                    98:6b:75:73:6a:2d:52:38:d3:68:52:cd:f7:a1:a5:
                    ad:b8:b3:89:72:bc:d9:70:65:e0:1b:25:95:7d:4d:
                    97:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:D6:0F:3E:1A:5E:7B:D3:C8:ED:10:04:96:34:8C:77:BC:8B:16:FB
            X509v3 Authority Key Identifier:
                keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a34353a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:45::/48

    Signature Algorithm: sha256WithRSAEncryption
         48:bb:e9:cb:af:1d:f0:f3:fe:1e:e1:e4:27:16:73:c9:ba:0f:
         30:f0:84:4b:36:87:fb:8b:53:7f:77:37:28:e8:2a:de:01:a5:
         d0:34:d7:e9:a2:2f:64:13:28:cb:0a:42:7b:7b:98:89:a3:c3:
         8b:a8:fe:ee:53:b7:f9:72:d4:b1:c6:43:ac:48:e0:96:be:40:
         13:9d:5b:29:de:9c:03:f6:85:40:d7:ee:09:e0:aa:da:13:5c:
         5c:ff:e3:71:df:d5:b0:78:8f:06:11:c8:ef:c2:2f:c7:16:52:
         8a:10:ad:16:af:42:5e:b7:ac:08:9f:ee:a2:f6:c3:8e:f2:fa:
         5c:20:4c:08:91:01:f1:7a:34:e4:44:a7:60:d8:7c:09:d2:6b:
         a0:95:5a:24:b0:5f:6b:41:d1:c0:8e:23:fd:83:e9:99:61:3e:
         24:83:56:cf:64:3b:6c:ef:fc:0c:2b:53:57:d2:da:28:45:dc:
         71:07:f0:b6:4b:8d:68:b5:9d:b9:8d:5d:71:c3:7a:5a:1a:5f:
         5b:08:0d:df:bb:ac:d8:09:86:9f:8c:2a:7f:16:da:a5:d3:a6:
         3f:d1:a6:ad:bc:33:6a:08:4e:b2:0d:f4:b2:85:8f:02:e8:be:
         c7:29:b8:d6:ba:dd:9f:9c:d3:ab:e7:93:94:99:70:b7:0b:eb:
         7a:0a:4e:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 21:55:03 2026 by rpki-client