Route Origin Authorization

$ rpki-client -vvvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a3732313a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a3732313a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          i0WdLc/eVgpuQWsXE6CF4skjOazG7U4W9wMUpeYNvgk=
Subject key identifier:   FE:50:92:07:02:FA:D4:49:26:7A:EC:27:CB:87:F9:2B:FC:76:29:46
Certificate issuer:       /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial:       7172FD0DFDCA9FC45C2E71BF207505FBF3F5BE20
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a3732313a3a2f34382d313238203d3e203532303235.roa
Signing time:             Sat 15 Aug 2026 23:19:14 +0000
ROA not before:           Sat 15 Aug 2026 23:14:14 +0000
ROA not after:            Sat 14 Aug 2027 23:19:14 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:721::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Aug 2026 23:30:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:72:fd:0d:fd:ca:9f:c4:5c:2e:71:bf:20:75:05:fb:f3:f5:be:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
        Validity
            Not Before: Aug 15 23:14:14 2026 GMT
            Not After : Aug 14 23:19:14 2027 GMT
        Subject: CN=FE50920702FAD449267AEC27CB87F92BFC762946
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:57:42:64:69:7b:7a:4b:d2:5b:d5:81:24:3d:
                    06:f4:73:38:17:bf:38:0c:16:bf:6a:06:a4:bd:8d:
                    c3:7b:7d:af:a3:2d:29:5c:34:55:58:fa:e7:7d:a4:
                    0d:96:3c:63:0d:84:7b:73:b0:17:a4:72:5a:c0:02:
                    e4:4a:2d:95:4d:0f:33:3b:8c:2a:a0:d3:6b:d2:2a:
                    f0:dc:19:ba:5d:7d:f7:ce:38:3c:4a:34:97:b3:b3:
                    a7:da:a1:b0:8c:a8:94:04:e9:d7:82:a5:98:fc:4f:
                    04:41:b9:7e:37:e5:02:a0:c5:7e:e8:0a:04:79:e0:
                    d9:3d:04:5d:af:7a:81:af:77:32:83:84:21:d4:99:
                    01:07:69:e2:89:dd:b3:4d:01:03:c0:bb:b4:51:ff:
                    43:48:15:b3:2f:80:ce:d2:2d:ff:b9:05:f4:a3:a5:
                    50:0e:a5:7c:29:ac:bb:f9:2d:6a:ee:93:b3:08:45:
                    5b:3f:7a:b8:97:01:60:35:ff:97:eb:6c:bd:30:43:
                    72:d3:d7:4a:8e:b5:85:89:18:8e:ef:c3:bb:e5:e0:
                    41:da:50:71:7b:be:b0:77:59:87:0f:10:39:10:d5:
                    b6:db:39:2b:23:bb:bb:b1:f2:fa:a5:21:79:60:d1:
                    3f:3a:81:06:8e:77:c6:2a:8d:bb:ec:eb:b3:2e:c8:
                    a9:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:50:92:07:02:FA:D4:49:26:7A:EC:27:CB:87:F9:2B:FC:76:29:46
            X509v3 Authority Key Identifier:
                keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a3732313a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:721::/48

    Signature Algorithm: sha256WithRSAEncryption
         06:27:9a:2f:ba:b7:28:0f:1a:1f:96:ef:37:d5:1b:c5:a5:67:
         7f:c3:c4:b2:d0:b2:31:d6:a1:bc:dd:f8:93:f1:49:6f:b3:0f:
         6a:5e:dd:96:4a:f0:46:ef:48:9b:5d:0a:ae:84:9f:48:0f:ec:
         de:e1:ae:00:20:8c:d9:0b:c5:d5:5f:19:05:dd:d2:bf:0b:16:
         42:2c:64:48:c5:cb:9e:a5:e9:48:b9:55:66:54:cb:c9:29:16:
         3a:db:a3:c9:10:aa:68:bc:09:33:ba:e5:4c:e5:67:a5:09:ae:
         ef:1b:bd:9c:b0:ff:56:15:b4:a6:e1:e6:ce:3d:50:92:16:ca:
         b8:51:71:e3:67:ab:67:dd:05:e9:cd:49:b2:57:71:f4:06:aa:
         a5:3d:a2:b4:af:64:64:4c:e7:1f:b8:b3:d3:a9:3d:8d:e0:6d:
         c4:37:61:1b:bb:5c:d0:a8:53:39:0e:b7:59:b7:4a:09:f1:cc:
         05:1f:8f:c3:9a:06:f8:72:b2:0c:6b:50:85:7e:7a:3a:a5:d7:
         75:f7:5d:0b:c8:26:5a:d6:39:2f:d2:2a:75:30:08:4b:17:dc:
         da:38:02:b0:f5:ef:a4:c1:8d:3c:2f:e6:6b:e6:fb:05:2e:69:
         a7:a0:6b:a5:3b:47:75:75:9a:21:a5:00:c7:bc:e5:26:5f:96:
         32:9f:61:8f
-----BEGIN CERTIFICATE-----
MIIFIjCCBAqgAwIBAgIUcXL9Df3Kn8RcLnG/IHUF+/P1viAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjYzODZGQUJFQTM5MjEwQjY2NUE2QTU1QUU1REE2NkJF
Njc0MTU5NzAeFw0yNjA4MTUyMzE0MTRaFw0yNzA4MTQyMzE5MTRaMDMxMTAvBgNV
BAMTKEZFNTA5MjA3MDJGQUQ0NDkyNjdBRUMyN0NCODdGOTJCRkM3NjI5NDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVV0JkaXt6S9Jb1YEkPQb0czgX
vzgMFr9qBqS9jcN7fa+jLSlcNFVY+ud9pA2WPGMNhHtzsBekclrAAuRKLZVNDzM7
jCqg02vSKvDcGbpdfffOODxKNJezs6faobCMqJQE6deCpZj8TwRBuX435QKgxX7o
CgR54Nk9BF2veoGvdzKDhCHUmQEHaeKJ3bNNAQPAu7RR/0NIFbMvgM7SLf+5BfSj
pVAOpXwprLv5LWruk7MIRVs/eriXAWA1/5frbL0wQ3LT10qOtYWJGI7vw7vl4EHa
UHF7vrB3WYcPEDkQ1bbbOSsju7ux8vqlIXlg0T86gQaOd8Yqjbvs67MuyKlbAgMB
AAGjggIsMIICKDAdBgNVHQ4EFgQU/lCSBwL61Ekmeuwny4f5K/x2KUYwHwYDVR0j
BBgwFoAU9jhvq+o5IQtmWmpVrl2ma+Z0FZcwDgYDVR0PAQH/BAQDAgeAMG4GA1Ud
HwRnMGUwY6BhoF+GXXJzeW5jOi8vcnBraS0wMS5wZHhuZXQudWsvcmVwby9wYXJh
ZG94bmV0d29ya3MvOC9GNjM4NkZBQkVBMzkyMTBCNjY1QTZBNTVBRTVEQTY2QkU2
NzQxNTk3LmNybDCBkwYIKwYBBQUHAQEEgYYwgYMwgYAGCCsGAQUFBzAChnRyc3lu
YzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYz
ZTAxODU3NTVjOTFiZTNmOWQvNy9GNjM4NkZBQkVBMzkyMTBCNjY1QTZBNTVBRTVE
QTY2QkU2NzQxNTk3LmNlcjCBkQYIKwYBBQUHAQsEgYQwgYEwfwYIKwYBBQUHMAuG
c3JzeW5jOi8vcnBraS0wMS5wZHhuZXQudWsvcmVwby9wYXJhZG94bmV0d29ya3Mv
OC8zMjYxMzAzNTNhNjQ2NjYzMzQzYTM3MzIzMTNhM2EyZjM0MzgyZDMxMzIzODIw
M2QzZTIwMzUzMjMwMzIzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF38QHITANBgkqhkiG9w0BAQsF
AAOCAQEABieaL7q3KA8aH5bvN9UbxaVnf8PEstCyMdahvN34k/FJb7MPal7dlkrw
Ru9Im10KroSfSA/s3uGuACCM2QvF1V8ZBd3SvwsWQixkSMXLnqXpSLlVZlTLySkW
OtujyRCqaLwJM7rlTOVnpQmu7xu9nLD/VhW0puHmzj1QkhbKuFFx42erZ90F6c1J
sldx9AaqpT2itK9kZEznH7iz06k9jeBtxDdhG7tc0KhTOQ63WbdKCfHMBR+Pw5oG
+HKyDGtQhX56OqXXdfddC8gmWtY5L9IqdTAISxfc2jgCsPXvpMGNPC/ma+b7BS5p
p6BrpTtHdXWaIaUAx7zlJl+WMp9hjw==
-----END CERTIFICATE-----
Generated at Mon Aug 24 10:37:10 2026 by rpki-client