Route Origin Authorization

$ rpki-client -vvvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a35373a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a35373a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          K1PN9qDhWoTyXyifCqwzoS6Z/cj6O/rZ4NqNhtjO7cU=
Subject key identifier:   E5:E5:21:52:78:90:EE:9C:AA:48:CF:3C:01:A6:80:F8:2F:2D:51:98
Certificate issuer:       /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial:       7897A53DF94862E7A190DC867111BB1A3CE4C879
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a35373a3a2f34382d313238203d3e203532303235.roa
Signing time:             Sat 15 Aug 2026 23:20:57 +0000
ROA not before:           Sat 15 Aug 2026 23:15:57 +0000
ROA not after:            Sat 14 Aug 2027 23:20:57 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:57::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Aug 2026 23:30:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:97:a5:3d:f9:48:62:e7:a1:90:dc:86:71:11:bb:1a:3c:e4:c8:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
        Validity
            Not Before: Aug 15 23:15:57 2026 GMT
            Not After : Aug 14 23:20:57 2027 GMT
        Subject: CN=E5E521527890EE9CAA48CF3C01A680F82F2D5198
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:e5:58:0f:08:ec:6e:69:46:d7:4c:11:bb:02:
                    14:d6:d4:51:7d:ff:7c:a1:c7:01:65:49:86:93:87:
                    30:db:53:13:33:89:3b:f6:d5:78:23:cd:19:52:89:
                    06:6f:0a:3b:91:f9:19:e0:ca:af:dc:87:b3:63:3b:
                    6a:a3:09:6b:6b:44:44:75:28:ff:f2:9b:d9:ef:67:
                    67:15:8d:3c:d7:78:14:8e:96:a6:f4:f1:d3:2c:c4:
                    22:d9:e0:17:3f:be:bb:56:b4:0c:80:de:fc:f2:49:
                    2b:21:b4:05:3b:46:14:df:94:cf:1d:aa:5f:76:db:
                    35:2e:5b:57:89:d2:4d:35:69:f1:89:37:72:b1:f1:
                    1e:14:de:29:52:71:e0:e9:e3:fa:fd:ff:15:93:86:
                    32:2b:d1:ca:51:57:19:16:da:67:9a:41:4f:3c:4c:
                    5a:5e:30:fc:c1:6f:2b:2c:09:7a:a8:91:d2:3e:33:
                    ce:fe:0d:3f:f3:31:2e:40:f9:4d:00:88:f5:67:e4:
                    44:87:69:d9:a4:ce:9e:b5:a5:37:7e:04:26:db:d0:
                    ef:96:86:a2:a2:9b:90:29:b6:a5:18:9d:56:c9:90:
                    28:de:0d:44:d9:36:65:37:c4:7a:69:e4:6c:6f:8f:
                    3d:8c:1a:58:e0:e7:e5:18:9f:35:2e:e0:f4:d0:1e:
                    ec:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:E5:21:52:78:90:EE:9C:AA:48:CF:3C:01:A6:80:F8:2F:2D:51:98
            X509v3 Authority Key Identifier:
                keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a35373a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:57::/48

    Signature Algorithm: sha256WithRSAEncryption
         2c:4d:97:71:11:18:ce:6a:85:ea:aa:27:1f:16:49:37:2d:36:
         04:c3:26:32:e1:18:29:a9:5f:70:30:1f:9a:73:78:13:d1:dc:
         e3:e9:eb:c7:90:fc:67:e9:41:bc:e5:37:b1:04:80:6e:97:41:
         09:b8:80:90:4d:87:2c:a9:31:73:67:2e:56:7f:06:14:70:f7:
         bc:10:19:5a:f3:bc:aa:59:60:fa:42:11:43:17:49:f9:69:e8:
         7c:6e:2e:27:02:a6:30:c3:dd:97:cd:c2:e7:f9:fc:ba:7b:94:
         3a:74:00:6b:b3:83:aa:2b:13:f7:78:d1:57:9c:31:33:23:16:
         99:75:e8:f0:e2:33:65:e7:93:44:21:94:9d:ef:a9:08:ba:cb:
         c5:78:24:50:10:e2:c3:a2:2e:9e:62:f5:4d:61:c1:6a:6a:49:
         28:25:41:32:47:d5:1e:f5:ad:59:c4:9f:53:6a:1e:e7:e4:b7:
         3a:c8:f9:79:06:34:bd:f8:53:00:29:7c:a9:e7:f6:11:66:62:
         49:23:db:b7:48:64:cf:c9:21:3f:26:36:75:2f:b1:5b:9e:c7:
         32:22:a5:75:d5:d9:ab:49:c1:49:7a:a2:aa:b1:23:9b:15:d3:
         f4:03:1f:8b:83:0c:b4:51:de:f8:a0:a6:60:61:2d:26:1d:7f:
         52:10:f2:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 10:36:39 2026 by rpki-client