Route Origin Authorization

$ rpki-client -vvvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a3533343a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a3533343a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          vHAC4N7dUosrvNWu3jsQLW/55LU4SU7erlRtGTWVS0c=
Subject key identifier:   AA:A1:59:2F:30:24:05:B2:F4:96:A7:54:9B:0D:09:81:C7:FD:BF:04
Certificate issuer:       /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial:       26B66C6FF36D048EE0BA426844FC1C6E5D24E636
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a3533343a3a2f34382d313238203d3e203532303235.roa
Signing time:             Sat 15 Aug 2026 23:17:41 +0000
ROA not before:           Sat 15 Aug 2026 23:12:41 +0000
ROA not after:            Sat 14 Aug 2027 23:17:41 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:534::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Aug 2026 22:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:b6:6c:6f:f3:6d:04:8e:e0:ba:42:68:44:fc:1c:6e:5d:24:e6:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
        Validity
            Not Before: Aug 15 23:12:41 2026 GMT
            Not After : Aug 14 23:17:41 2027 GMT
        Subject: CN=AAA1592F302405B2F496A7549B0D0981C7FDBF04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:81:05:72:e7:c7:66:97:00:5d:64:d5:5c:0d:
                    16:fb:fe:b0:69:8b:49:3c:ae:74:b6:d3:38:83:9d:
                    f9:58:1d:11:5b:f6:8b:15:9b:8b:39:2b:26:86:32:
                    f2:1a:70:33:58:b1:b4:24:74:ac:95:4a:de:80:f9:
                    a9:1b:c7:31:e4:61:2c:ff:20:97:ad:48:30:35:17:
                    43:1a:8d:c5:63:6a:f9:07:5e:42:bf:14:fb:89:10:
                    b5:d3:76:6e:14:d9:fc:38:7b:3f:5e:c5:9f:b1:6d:
                    76:f8:93:04:7d:55:8e:29:6c:ab:97:cb:bc:f3:d5:
                    90:b9:93:b3:f8:68:d8:9b:cf:7a:e6:98:5f:94:bd:
                    a2:72:93:36:a7:d8:69:30:87:a6:e9:31:6e:f8:f0:
                    54:ca:51:ef:f6:50:1c:7f:e0:19:48:d7:10:bc:c5:
                    b5:1e:4c:0e:8e:f2:44:75:f7:bc:ee:ec:3e:37:fc:
                    87:82:58:72:34:ad:cc:fc:8a:24:53:1d:56:6b:0c:
                    d9:a7:07:a4:52:87:ab:20:1f:3e:49:e9:f9:d7:14:
                    b5:e0:73:69:fa:25:5e:2b:fb:75:89:9f:5e:e8:32:
                    a0:75:bb:69:ba:bf:b4:57:23:b9:3b:1b:3f:38:08:
                    fe:c6:b9:5c:ec:f5:ae:79:e7:93:e0:83:d2:14:d4:
                    d4:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:A1:59:2F:30:24:05:B2:F4:96:A7:54:9B:0D:09:81:C7:FD:BF:04
            X509v3 Authority Key Identifier:
                keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a3533343a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:534::/48

    Signature Algorithm: sha256WithRSAEncryption
         45:83:1d:c7:c2:ff:85:40:75:d7:70:bb:ad:24:a7:5b:1f:dc:
         e2:87:9d:17:46:c1:22:e8:61:57:b0:f3:24:1b:1c:a6:13:f8:
         ec:5b:8b:e8:1c:db:6a:95:e2:b4:b4:44:be:47:48:49:f5:8e:
         73:44:a8:a9:30:66:e3:cf:d9:a9:2a:b1:eb:d3:ce:6f:16:e0:
         74:e3:a6:de:09:57:cb:e6:28:ef:df:9c:e7:e2:70:72:2a:c2:
         87:d5:af:7d:2c:5d:9e:6b:fb:56:84:ce:5b:dd:3c:53:18:80:
         a6:10:40:5e:f8:7f:2d:fa:87:5a:b8:48:15:eb:9b:ee:ce:74:
         ec:52:c0:3a:46:38:4d:06:73:d6:50:40:53:3e:2a:17:73:eb:
         1f:78:b6:0e:9d:1f:98:a8:56:68:f0:39:65:2d:a1:d6:39:08:
         86:10:78:11:bc:c1:f8:41:77:fc:1b:66:01:37:9e:bb:bf:d6:
         e4:22:0b:76:96:f1:2d:41:f2:2f:b5:70:a1:ff:7a:c5:70:af:
         56:d8:f3:3f:65:4b:2c:75:79:27:06:31:80:65:99:52:95:c8:
         9c:31:fd:23:83:08:c1:36:62:18:25:00:c4:c5:25:64:da:ee:
         34:d8:69:21:00:a7:d5:52:36:83:02:a7:18:4b:69:26:10:4c:
         eb:ba:1b:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 07:33:13 2026 by rpki-client