Route Origin Authorization

$ rpki-client -vvvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a3731323a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a3731323a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          ZCMc1KdFsvKvlefKTAiZPsMn2EY/j8A5nMLlWmPtONA=
Subject key identifier:   8D:2C:9F:6D:41:8A:9E:10:17:09:CE:14:F7:22:26:D5:34:B0:49:C0
Certificate issuer:       /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial:       335ED0ACE56A6E3E293DC850574324F2D97826DD
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a3731323a3a2f34382d313238203d3e203532303235.roa
Signing time:             Sat 15 Aug 2026 23:19:22 +0000
ROA not before:           Sat 15 Aug 2026 23:14:22 +0000
ROA not after:            Sat 14 Aug 2027 23:19:22 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:712::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Aug 2026 23:30:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:5e:d0:ac:e5:6a:6e:3e:29:3d:c8:50:57:43:24:f2:d9:78:26:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
        Validity
            Not Before: Aug 15 23:14:22 2026 GMT
            Not After : Aug 14 23:19:22 2027 GMT
        Subject: CN=8D2C9F6D418A9E101709CE14F72226D534B049C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:c6:98:54:15:50:d8:bd:30:27:73:5c:77:9c:
                    f5:3b:3c:c5:d7:25:26:7b:71:37:28:33:36:d0:65:
                    46:c5:b4:da:c0:d8:5f:cb:58:27:47:10:16:52:13:
                    7d:4a:1b:32:91:b5:c8:f1:43:af:00:9e:75:47:29:
                    6c:14:d8:4b:ec:44:e8:0a:53:ce:20:93:e7:2d:b9:
                    a4:d2:65:f3:f7:85:8a:81:df:5c:aa:08:8e:39:17:
                    65:eb:a2:f2:85:c0:15:a1:ab:3c:58:50:3f:83:43:
                    2c:e5:ff:2c:d5:28:b9:5a:b8:31:6b:66:bf:3a:91:
                    98:05:53:4d:f6:f5:1a:fd:f9:da:3a:06:30:c0:11:
                    f1:54:2a:42:c0:28:59:43:00:5f:c6:6b:e8:b0:af:
                    ce:c5:45:7b:d1:14:64:7c:db:5a:79:12:ad:9c:01:
                    8d:ee:b1:a3:7c:f1:57:90:bc:a7:f9:1e:cc:f0:c0:
                    c1:75:67:da:d2:32:90:a9:cd:8e:55:02:c8:4e:86:
                    94:df:53:0c:31:54:59:bb:64:1a:b2:d9:38:54:29:
                    23:e9:43:8d:c7:83:f7:5e:e9:df:34:9f:91:f1:1c:
                    69:68:bf:de:bd:f9:f1:2b:a5:43:69:ce:a8:6a:b6:
                    17:78:1c:78:f2:ad:14:b2:8e:e1:5c:28:b7:ee:92:
                    63:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:2C:9F:6D:41:8A:9E:10:17:09:CE:14:F7:22:26:D5:34:B0:49:C0
            X509v3 Authority Key Identifier:
                keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a3731323a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:712::/48

    Signature Algorithm: sha256WithRSAEncryption
         75:e0:bc:79:8f:21:84:f1:ed:f7:2b:bf:3c:94:6b:38:7d:c3:
         c2:fd:40:17:ca:23:bd:54:43:2b:9a:55:0a:01:aa:21:68:56:
         4c:f8:2b:1c:a9:14:ae:7b:82:25:a2:c6:28:1e:7c:3d:86:7b:
         60:e5:5b:ed:a9:d7:14:b4:ac:1b:21:a5:bf:4e:a1:f0:2e:e2:
         ac:d4:7a:b1:c6:20:fe:83:84:bc:a7:aa:14:99:bd:fa:22:d2:
         dd:c7:6a:98:7b:43:9c:e2:d7:40:57:2d:10:ab:66:60:b6:8c:
         f4:1b:09:1b:74:7f:f8:d5:08:1d:1f:af:6a:20:d5:dc:78:96:
         21:78:8a:f2:73:57:83:bd:fc:95:80:28:58:3a:10:fd:3b:21:
         f5:9d:e9:1a:c8:24:0a:76:c1:72:61:b3:51:06:a6:7c:8f:96:
         d3:c3:56:b8:ef:9a:79:5d:e2:d7:35:ec:6d:3c:f1:23:c4:45:
         ca:05:17:4b:4c:29:2b:2d:9f:2e:22:fa:b2:5b:04:74:09:72:
         a1:a5:c6:45:97:e6:bd:5f:4a:b0:fd:93:f7:d1:f1:77:a0:7c:
         3c:dc:aa:a5:bf:f7:f0:61:a1:d0:c0:2f:5b:c8:7b:08:1a:44:
         ab:77:1c:3f:a4:8d:3c:a6:e7:78:b5:92:70:e0:a9:f4:63:b7:
         0d:db:c0:ec
-----BEGIN CERTIFICATE-----
MIIFIjCCBAqgAwIBAgIUM17QrOVqbj4pPchQV0Mk8tl4Jt0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjYzODZGQUJFQTM5MjEwQjY2NUE2QTU1QUU1REE2NkJF
Njc0MTU5NzAeFw0yNjA4MTUyMzE0MjJaFw0yNzA4MTQyMzE5MjJaMDMxMTAvBgNV
BAMTKDhEMkM5RjZENDE4QTlFMTAxNzA5Q0UxNEY3MjIyNkQ1MzRCMDQ5QzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTxphUFVDYvTAnc1x3nPU7PMXX
JSZ7cTcoMzbQZUbFtNrA2F/LWCdHEBZSE31KGzKRtcjxQ68AnnVHKWwU2EvsROgK
U84gk+ctuaTSZfP3hYqB31yqCI45F2XrovKFwBWhqzxYUD+DQyzl/yzVKLlauDFr
Zr86kZgFU0329Rr9+do6BjDAEfFUKkLAKFlDAF/Ga+iwr87FRXvRFGR821p5Eq2c
AY3usaN88VeQvKf5HszwwMF1Z9rSMpCpzY5VAshOhpTfUwwxVFm7ZBqy2ThUKSPp
Q43Hg/de6d80n5HxHGlov969+fErpUNpzqhqthd4HHjyrRSyjuFcKLfukmPpAgMB
AAGjggIsMIICKDAdBgNVHQ4EFgQUjSyfbUGKnhAXCc4U9yIm1TSwScAwHwYDVR0j
BBgwFoAU9jhvq+o5IQtmWmpVrl2ma+Z0FZcwDgYDVR0PAQH/BAQDAgeAMG4GA1Ud
HwRnMGUwY6BhoF+GXXJzeW5jOi8vcnBraS0wMS5wZHhuZXQudWsvcmVwby9wYXJh
ZG94bmV0d29ya3MvOC9GNjM4NkZBQkVBMzkyMTBCNjY1QTZBNTVBRTVEQTY2QkU2
NzQxNTk3LmNybDCBkwYIKwYBBQUHAQEEgYYwgYMwgYAGCCsGAQUFBzAChnRyc3lu
YzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYz
ZTAxODU3NTVjOTFiZTNmOWQvNy9GNjM4NkZBQkVBMzkyMTBCNjY1QTZBNTVBRTVE
QTY2QkU2NzQxNTk3LmNlcjCBkQYIKwYBBQUHAQsEgYQwgYEwfwYIKwYBBQUHMAuG
c3JzeW5jOi8vcnBraS0wMS5wZHhuZXQudWsvcmVwby9wYXJhZG94bmV0d29ya3Mv
OC8zMjYxMzAzNTNhNjQ2NjYzMzQzYTM3MzEzMjNhM2EyZjM0MzgyZDMxMzIzODIw
M2QzZTIwMzUzMjMwMzIzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF38QHEjANBgkqhkiG9w0BAQsF
AAOCAQEAdeC8eY8hhPHt9yu/PJRrOH3Dwv1AF8ojvVRDK5pVCgGqIWhWTPgrHKkU
rnuCJaLGKB58PYZ7YOVb7anXFLSsGyGlv06h8C7irNR6scYg/oOEvKeqFJm9+iLS
3cdqmHtDnOLXQFctEKtmYLaM9BsJG3R/+NUIHR+vaiDV3HiWIXiK8nNXg738lYAo
WDoQ/Tsh9Z3pGsgkCnbBcmGzUQamfI+W08NWuO+aeV3i1zXsbTzxI8RFygUXS0wp
Ky2fLiL6slsEdAlyoaXGRZfmvV9KsP2T99Hxd6B8PNyqpb/38GGh0MAvW8h7CBpE
q3ccP6SNPKbneLWScOCp9GO3DdvA7A==
-----END CERTIFICATE-----
Generated at Mon Aug 24 10:36:58 2026 by rpki-client