Route Origin Authorization

$ rpki-client -vvvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a37393a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a37393a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          kh+C2veJ47kC/ot7iIx69RRIhC2Sqqgldya+1LcLNLs=
Subject key identifier:   62:92:09:D3:C4:FC:5A:C9:9D:FD:DF:C0:34:90:48:6B:F7:55:A0:32
Certificate issuer:       /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial:       7497321C092F3CC9D387F55DFDEB281404A52BE3
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a37393a3a2f34382d313238203d3e203532303235.roa
Signing time:             Sat 15 Aug 2026 23:19:04 +0000
ROA not before:           Sat 15 Aug 2026 23:14:04 +0000
ROA not after:            Sat 14 Aug 2027 23:19:04 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:79::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Aug 2026 23:30:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:97:32:1c:09:2f:3c:c9:d3:87:f5:5d:fd:eb:28:14:04:a5:2b:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
        Validity
            Not Before: Aug 15 23:14:04 2026 GMT
            Not After : Aug 14 23:19:04 2027 GMT
        Subject: CN=629209D3C4FC5AC99DFDDFC03490486BF755A032
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:5c:24:45:4e:28:51:34:5a:72:99:5a:15:f8:
                    a8:e0:3b:d3:dc:c8:ee:92:26:64:26:ed:17:ca:b8:
                    e0:26:04:12:a0:55:2e:dd:de:4f:56:ff:b5:c8:76:
                    f2:6d:29:2d:03:5f:5c:11:35:56:31:65:ae:bf:ed:
                    37:93:0e:99:a3:20:38:03:c5:f4:37:72:f0:67:86:
                    4d:5f:c6:90:08:6b:ea:b2:37:75:6f:59:33:97:4e:
                    80:70:a6:16:fd:d1:f0:63:b3:f4:4f:a7:b5:3c:88:
                    36:6b:e4:f5:1d:5d:df:16:84:52:8b:2d:cc:26:0b:
                    43:dd:1a:4b:30:4b:95:ec:a8:b0:c0:c6:63:34:57:
                    96:89:44:22:ac:cb:83:fb:33:09:a4:44:c1:52:0b:
                    6d:83:4b:0e:5b:5b:62:c8:72:08:be:dd:34:65:11:
                    b5:f2:72:da:13:27:4d:bb:6c:91:4f:05:27:4f:5c:
                    d9:20:60:a3:0a:39:dc:4d:0d:2c:70:58:04:09:71:
                    26:b3:59:c8:3f:d0:42:13:d2:66:57:5f:31:0d:b9:
                    70:6b:4e:76:5d:26:0f:96:f4:50:0a:a0:05:dc:2a:
                    94:8f:8c:b8:fc:a7:f3:6a:55:d1:a1:ab:52:17:47:
                    39:98:c7:d4:62:c8:5f:4f:12:f1:3c:99:25:72:a3:
                    65:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:92:09:D3:C4:FC:5A:C9:9D:FD:DF:C0:34:90:48:6B:F7:55:A0:32
            X509v3 Authority Key Identifier:
                keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a37393a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:79::/48

    Signature Algorithm: sha256WithRSAEncryption
         20:23:57:c3:b2:6d:7a:cf:c3:64:29:84:ab:72:82:e8:db:aa:
         1b:f4:f4:32:a6:7e:cd:03:1e:bd:8e:1f:b2:16:b6:8b:9c:e6:
         da:10:08:a6:e8:e7:d9:af:b6:87:62:ca:b1:23:52:04:e5:7c:
         4a:de:ce:cd:47:39:92:cf:48:74:ca:98:c7:24:1b:3e:b2:42:
         f4:d4:cd:1f:81:56:e5:26:25:ef:06:bd:6c:f5:e3:68:b6:85:
         fe:ff:19:fe:5a:1f:bb:5a:82:95:69:f5:17:d7:d8:be:da:79:
         b4:65:e5:63:c1:3f:f1:c4:b2:3a:a6:69:3c:87:af:23:94:73:
         8d:c5:b4:89:7f:f1:26:6c:8c:df:08:30:6f:ab:93:d1:18:cd:
         47:1e:d2:36:85:cb:4d:76:93:75:84:e8:ba:df:20:98:47:b9:
         70:43:31:2f:d7:c5:90:6e:8f:a9:cc:bf:97:d1:99:05:a3:81:
         cf:e7:d6:f3:33:e0:06:2e:43:7a:09:88:ec:08:ed:16:4d:a1:
         57:f2:73:08:7f:83:7f:82:88:dd:e4:36:ca:e0:c6:39:68:9b:
         51:a1:4f:01:92:67:ca:cf:f6:f2:4e:41:d0:0c:57:03:86:a1:
         42:f5:c9:0f:19:d7:87:8a:ff:52:15:c8:33:ba:30:19:db:ca:
         e5:9e:8d:0c
-----BEGIN CERTIFICATE-----
MIIFHzCCBAegAwIBAgIUdJcyHAkvPMnTh/Vd/esoFASlK+MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjYzODZGQUJFQTM5MjEwQjY2NUE2QTU1QUU1REE2NkJF
Njc0MTU5NzAeFw0yNjA4MTUyMzE0MDRaFw0yNzA4MTQyMzE5MDRaMDMxMTAvBgNV
BAMTKDYyOTIwOUQzQzRGQzVBQzk5REZEREZDMDM0OTA0ODZCRjc1NUEwMzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEXCRFTihRNFpymVoV+KjgO9Pc
yO6SJmQm7RfKuOAmBBKgVS7d3k9W/7XIdvJtKS0DX1wRNVYxZa6/7TeTDpmjIDgD
xfQ3cvBnhk1fxpAIa+qyN3VvWTOXToBwphb90fBjs/RPp7U8iDZr5PUdXd8WhFKL
LcwmC0PdGkswS5XsqLDAxmM0V5aJRCKsy4P7MwmkRMFSC22DSw5bW2LIcgi+3TRl
EbXyctoTJ027bJFPBSdPXNkgYKMKOdxNDSxwWAQJcSazWcg/0EIT0mZXXzENuXBr
TnZdJg+W9FAKoAXcKpSPjLj8p/NqVdGhq1IXRzmYx9RiyF9PEvE8mSVyo2UFAgMB
AAGjggIpMIICJTAdBgNVHQ4EFgQUYpIJ08T8Wsmd/d/ANJBIa/dVoDIwHwYDVR0j
BBgwFoAU9jhvq+o5IQtmWmpVrl2ma+Z0FZcwDgYDVR0PAQH/BAQDAgeAMG4GA1Ud
HwRnMGUwY6BhoF+GXXJzeW5jOi8vcnBraS0wMS5wZHhuZXQudWsvcmVwby9wYXJh
ZG94bmV0d29ya3MvOC9GNjM4NkZBQkVBMzkyMTBCNjY1QTZBNTVBRTVEQTY2QkU2
NzQxNTk3LmNybDCBkwYIKwYBBQUHAQEEgYYwgYMwgYAGCCsGAQUFBzAChnRyc3lu
YzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYz
ZTAxODU3NTVjOTFiZTNmOWQvNy9GNjM4NkZBQkVBMzkyMTBCNjY1QTZBNTVBRTVE
QTY2QkU2NzQxNTk3LmNlcjCBjgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4Zx
cnN5bmM6Ly9ycGtpLTAxLnBkeG5ldC51ay9yZXBvL3BhcmFkb3huZXR3b3Jrcy84
LzMyNjEzMDM1M2E2NDY2NjMzNDNhMzczOTNhM2EyZjM0MzgyZDMxMzIzODIwM2Qz
ZTIwMzUzMjMwMzIzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggr
BgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF38QAeTANBgkqhkiG9w0BAQsFAAOC
AQEAICNXw7Jtes/DZCmEq3KC6NuqG/T0MqZ+zQMevY4fsha2i5zm2hAIpujn2a+2
h2LKsSNSBOV8St7OzUc5ks9IdMqYxyQbPrJC9NTNH4FW5SYl7wa9bPXjaLaF/v8Z
/lofu1qClWn1F9fYvtp5tGXlY8E/8cSyOqZpPIevI5RzjcW0iX/xJmyM3wgwb6uT
0RjNRx7SNoXLTXaTdYTout8gmEe5cEMxL9fFkG6Pqcy/l9GZBaOBz+fW8zPgBi5D
egmI7AjtFk2hV/JzCH+Df4KI3eQ2yuDGOWibUaFPAZJnys/28k5B0AxXA4ahQvXJ
DxnXh4r/UhXIM7owGdvK5Z6NDA==
-----END CERTIFICATE-----
Generated at Mon Aug 24 10:36:40 2026 by rpki-client