Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a36383a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a36383a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          fZqMAJPCYjYsLHgsmlhFrg8NLYZDHMqts5LmWGnOC4c=
Subject key identifier:   E4:BE:75:FA:99:4B:B1:F6:C3:EE:4B:D9:DF:F9:18:B1:7F:C4:95:A5
Certificate issuer:       /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial:       714BCDFE235B4C4CA7C2CD09632A2942C157AF92
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a36383a3a2f34382d313238203d3e203532303235.roa
Signing time:             Thu 04 Jun 2026 16:32:49 +0000
ROA not before:           Thu 04 Jun 2026 16:27:49 +0000
ROA not after:            Thu 03 Jun 2027 16:32:49 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:68::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:4b:cd:fe:23:5b:4c:4c:a7:c2:cd:09:63:2a:29:42:c1:57:af:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
        Validity
            Not Before: Jun  4 16:27:49 2026 GMT
            Not After : Jun  3 16:32:49 2027 GMT
        Subject: CN=E4BE75FA994BB1F6C3EE4BD9DFF918B17FC495A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:01:4c:b2:90:60:15:98:c5:b0:b6:45:23:ee:
                    97:7e:d6:aa:1d:2a:44:7c:e6:e7:4c:4b:98:a5:f6:
                    4b:d9:0d:ca:ba:33:fe:8a:32:d6:1a:dc:6e:1b:3b:
                    f7:f5:3d:63:11:5a:d7:4d:27:f2:1f:82:fb:27:fe:
                    4f:98:66:e1:15:57:d3:06:28:8b:9a:6d:ed:1c:28:
                    1f:4f:45:e3:19:75:59:7e:40:18:38:14:4a:73:53:
                    dc:07:ff:05:35:58:4e:3d:dd:3a:97:ec:8e:6a:26:
                    53:bb:cd:22:71:40:bf:ef:51:44:bd:d7:a2:93:42:
                    23:2a:e6:da:cd:8a:fc:e4:36:2b:39:07:5a:ec:37:
                    b1:94:2c:33:10:1a:83:5d:49:e6:c8:de:3b:77:8f:
                    76:3a:2e:1d:57:79:7e:fa:55:ee:14:c2:76:18:f6:
                    f3:e5:76:89:1b:e2:50:52:35:03:89:40:84:ab:44:
                    79:d8:91:2b:df:8d:f4:31:44:2e:f1:9a:a1:a3:fc:
                    e9:37:98:06:04:c3:65:dd:8a:f0:8a:23:e6:11:e2:
                    63:a4:7f:07:01:51:db:db:08:7f:fa:3b:f0:04:fa:
                    87:60:9d:19:99:38:32:cc:8d:fd:22:ab:d6:d0:b7:
                    98:b4:31:9b:bc:87:98:45:9a:d0:16:c9:f4:40:3d:
                    ec:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:BE:75:FA:99:4B:B1:F6:C3:EE:4B:D9:DF:F9:18:B1:7F:C4:95:A5
            X509v3 Authority Key Identifier:
                keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a36383a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:68::/48

    Signature Algorithm: sha256WithRSAEncryption
         66:fd:25:32:0e:79:6d:82:1e:9e:31:cc:f5:77:33:b8:fd:13:
         56:b6:02:ef:68:45:3d:ee:b4:44:4d:b1:a0:d3:b5:92:e9:18:
         5f:a5:bf:7b:60:c6:6e:62:5b:37:89:5e:d2:a2:ac:e2:68:95:
         81:63:93:94:f3:b2:71:c4:4b:13:c7:1c:18:3d:a9:4d:77:08:
         3c:8d:3f:98:2f:53:bf:72:7e:8b:4e:ea:be:7b:2d:0d:3a:75:
         35:a9:e9:6c:fa:f9:c0:4e:84:65:f6:f5:25:f4:6a:ca:b6:e6:
         65:cc:8c:18:75:b0:04:97:d9:e5:9c:d6:93:d6:c8:b9:dc:10:
         d6:e2:25:82:b8:cc:6a:c5:4d:ca:49:56:a1:1a:06:15:2e:51:
         a9:80:13:dc:09:e0:63:ac:60:ee:48:a5:57:6a:76:7e:41:c1:
         8e:34:13:5d:aa:b4:7c:08:91:d0:ee:54:e8:03:ab:b1:89:63:
         c6:e9:d4:43:42:51:c1:00:c1:a8:b4:f2:55:0c:50:26:81:66:
         34:4a:1c:54:3e:03:c3:0b:95:e0:39:3f:93:11:8f:2a:2a:fc:
         8b:68:32:4a:75:6f:d9:d2:8c:11:4e:82:76:4d:64:5c:d8:52:
         dc:f2:b0:2f:b8:cf:79:fa:44:51:cd:97:d2:d4:1e:9b:39:46:
         b0:ac:77:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 21:55:02 2026 by rpki-client