Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a35373a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a35373a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          I3O65+hWOUHzo2CH/Wrz6GfqaxJUMxEiiakYV0tWjgA=
Subject key identifier:   96:CD:77:C2:E1:6C:3E:18:C6:39:D1:41:97:F0:E5:33:3B:4C:41:28
Certificate issuer:       /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial:       45B1105CA5DC1B7DF143A85968F3E4FF4C55902B
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a35373a3a2f34382d313238203d3e203532303235.roa
Signing time:             Thu 04 Jun 2026 16:32:59 +0000
ROA not before:           Thu 04 Jun 2026 16:27:59 +0000
ROA not after:            Thu 03 Jun 2027 16:32:59 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:57::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:b1:10:5c:a5:dc:1b:7d:f1:43:a8:59:68:f3:e4:ff:4c:55:90:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
        Validity
            Not Before: Jun  4 16:27:59 2026 GMT
            Not After : Jun  3 16:32:59 2027 GMT
        Subject: CN=96CD77C2E16C3E18C639D14197F0E5333B4C4128
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:92:fa:72:ac:6b:da:f5:f5:4e:63:79:aa:73:
                    3b:ae:37:f8:bb:ab:3e:05:19:d9:f5:db:e3:e4:67:
                    c8:2c:fb:fb:ca:cd:0d:79:a2:6a:2a:91:99:bf:4c:
                    9b:73:ef:3b:c1:08:3b:68:70:1a:6a:3e:59:69:db:
                    b9:bb:0e:f2:56:27:4e:10:ee:dd:40:06:a1:9f:9e:
                    db:0d:de:08:e7:76:89:a1:db:72:6a:84:fd:45:f3:
                    07:02:6e:65:47:7e:01:e0:25:dd:4d:73:76:ed:e1:
                    76:ba:76:32:96:fd:92:e8:4c:4a:03:56:f5:c9:ee:
                    22:49:28:34:06:6d:1d:68:81:bd:d9:79:85:a4:ab:
                    c3:ea:32:aa:9d:39:32:ee:71:83:b1:75:59:4c:6d:
                    1b:29:8e:76:04:8c:d1:48:9d:48:15:8f:9b:72:ee:
                    6b:32:5c:4e:b0:b0:0c:15:68:2b:e6:dc:58:a9:90:
                    c8:21:2a:05:4f:11:33:d7:c5:dc:a8:87:78:2c:9f:
                    7b:35:2e:e3:3d:d3:c4:85:18:54:a3:cb:be:66:6e:
                    34:7f:63:97:19:5d:9b:35:ab:8b:0a:f6:85:ba:88:
                    8e:f1:76:e9:4b:67:23:ac:70:35:b7:43:6d:b0:4d:
                    9b:72:28:8f:d8:da:5c:32:b1:db:dd:f9:de:4a:29:
                    45:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:CD:77:C2:E1:6C:3E:18:C6:39:D1:41:97:F0:E5:33:3B:4C:41:28
            X509v3 Authority Key Identifier:
                keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a35373a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:57::/48

    Signature Algorithm: sha256WithRSAEncryption
         23:9b:13:e9:a6:9b:72:af:29:92:dd:18:b2:03:86:15:5c:fb:
         7d:5f:fa:66:af:6a:7c:7a:c1:ab:8d:ee:d6:87:65:b1:c8:8f:
         3e:8e:d3:84:cd:dd:92:85:bd:07:31:7e:94:c3:22:b9:0e:37:
         95:22:51:a1:0f:0b:d2:ec:ff:d8:60:d8:4e:53:89:a8:d0:1e:
         ec:47:02:02:72:5f:20:dd:a7:15:77:a7:47:1d:6f:33:53:d0:
         f9:00:9a:8e:3d:69:26:56:51:3a:d3:e3:7f:6a:30:ab:06:87:
         61:b8:46:6a:85:c3:17:c6:8a:86:c1:e7:18:56:77:6b:00:d8:
         05:00:15:65:71:02:bd:40:55:52:61:13:02:72:ab:17:9f:ab:
         62:a0:18:40:8f:b5:12:7a:73:58:d7:a0:c5:55:93:d8:c3:45:
         61:fb:e5:22:1b:c5:ae:e4:d4:cc:ce:cb:29:a9:b8:29:f9:d5:
         ca:62:ee:08:cf:8c:e7:af:53:8b:df:69:28:fa:30:47:9d:4e:
         b1:ff:a5:bd:97:cf:f7:b3:6a:bb:44:9b:a6:81:f3:f1:55:37:
         91:16:0c:e7:55:63:9d:27:17:f0:4a:ba:82:d0:c9:55:69:62:
         27:e1:51:95:68:bc:d5:50:2b:39:30:ea:05:06:ff:0a:70:77:
         bf:9d:8c:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 21:55:01 2026 by rpki-client