Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a3739663a3a2f34382d3438203d3e203532303235.roa
File:                     326130353a646663343a3739663a3a2f34382d3438203d3e203532303235.roa (raw, json)
Hash identifier:          CFgVMDoGTCRRTiJaCyb57ZCeIq2x/6wz94wXR+GN9/I=
Subject key identifier:   57:14:1A:F7:09:0D:A1:26:0B:5B:71:70:20:4A:7A:10:6B:06:22:F8
Certificate issuer:       /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial:       591DDE56DBDD1815EF82E8D6693A53F93FF3E461
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a3739663a3a2f34382d3438203d3e203532303235.roa
Signing time:             Thu 04 Jun 2026 16:33:01 +0000
ROA not before:           Thu 04 Jun 2026 16:28:01 +0000
ROA not after:            Thu 03 Jun 2027 16:33:01 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:79f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:1d:de:56:db:dd:18:15:ef:82:e8:d6:69:3a:53:f9:3f:f3:e4:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
        Validity
            Not Before: Jun  4 16:28:01 2026 GMT
            Not After : Jun  3 16:33:01 2027 GMT
        Subject: CN=57141AF7090DA1260B5B7170204A7A106B0622F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c4:35:f5:bc:dd:08:15:16:dc:aa:01:1c:65:
                    ea:40:3a:b7:63:9f:a6:87:22:96:af:bd:ab:9b:77:
                    29:c5:b3:78:3c:72:a7:b4:45:6a:a6:1a:ba:d1:7c:
                    86:2f:05:d5:46:66:66:ec:2d:61:e9:3a:8e:fe:67:
                    9e:68:0c:7a:b3:ef:6d:44:f2:85:86:a5:32:15:8d:
                    73:88:c5:ba:c2:04:17:e2:72:2f:d1:f8:6a:86:e2:
                    40:c5:ff:97:1b:2d:09:ad:37:21:c4:67:ab:55:3e:
                    fa:e3:38:0b:6b:9a:70:8b:fb:39:44:03:e2:c4:43:
                    74:ce:15:8f:43:7a:5a:24:03:c1:85:f6:92:95:eb:
                    7d:1a:06:36:ef:1e:70:57:4d:a3:b9:58:f1:a0:be:
                    f8:fd:48:21:e4:5e:a3:8a:61:87:7f:99:30:d3:a8:
                    df:07:71:6a:89:e5:a4:f7:aa:80:3f:fd:62:d5:57:
                    86:81:fc:b0:c9:f3:b8:a6:ff:c3:d8:4a:50:15:3a:
                    d5:61:6d:12:91:a7:e2:09:31:af:f9:c5:9e:ad:60:
                    ba:2e:42:e5:31:57:9e:73:5f:dc:12:5e:5b:8c:bf:
                    26:7d:42:38:18:1a:bf:61:fa:a7:5c:70:80:82:68:
                    a1:4a:ce:b9:6d:8d:77:d1:f6:a1:78:d9:1e:04:65:
                    99:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:14:1A:F7:09:0D:A1:26:0B:5B:71:70:20:4A:7A:10:6B:06:22:F8
            X509v3 Authority Key Identifier:
                keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a3739663a3a2f34382d3438203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:79f::/48

    Signature Algorithm: sha256WithRSAEncryption
         53:cd:e4:85:c9:6d:25:3f:53:4d:4a:2e:79:ce:0c:fb:6d:82:
         34:18:5f:53:51:9a:02:17:da:33:4c:4d:b0:70:a2:f5:e6:ba:
         1e:b4:39:d5:8e:00:6c:6c:50:be:59:3b:c7:26:cc:81:32:0a:
         76:37:0b:d8:88:01:c6:be:9e:50:97:68:81:f0:11:77:9a:5e:
         66:e2:13:a2:f7:14:1d:77:46:0d:14:7d:52:ff:ad:86:a7:0a:
         aa:01:9e:19:8d:82:c2:43:30:95:4a:ce:ea:4b:e3:fa:7e:9e:
         6b:42:91:e1:9c:bc:b9:6e:8e:66:5f:86:74:b5:39:e9:77:6f:
         a8:bb:78:df:e4:10:7d:2f:79:a1:5a:0f:ae:38:14:f9:36:10:
         11:b2:85:4b:58:cc:a4:e2:1c:62:bb:ab:98:c4:07:c2:89:5a:
         47:1b:24:ed:f2:75:67:fd:dd:62:d7:94:9a:7f:9f:c1:78:e8:
         54:e7:92:b2:51:68:80:f1:5b:70:8b:7d:48:e1:60:3b:70:13:
         17:c5:5c:c8:ee:b1:ee:71:43:44:ae:fb:3f:2c:75:3d:81:8d:
         9a:b0:e2:81:ce:4e:6b:ce:0a:85:bf:b7:74:32:5f:17:06:71:
         df:2c:1e:38:af:4e:c5:40:86:b6:5a:e7:f9:49:78:0e:e1:df:
         d3:8c:a1:22
-----BEGIN CERTIFICATE-----
MIIFHzCCBAegAwIBAgIUWR3eVtvdGBXvgujWaTpT+T/z5GEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjYzODZGQUJFQTM5MjEwQjY2NUE2QTU1QUU1REE2NkJF
Njc0MTU5NzAeFw0yNjA2MDQxNjI4MDFaFw0yNzA2MDMxNjMzMDFaMDMxMTAvBgNV
BAMTKDU3MTQxQUY3MDkwREExMjYwQjVCNzE3MDIwNEE3QTEwNkIwNjIyRjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwxDX1vN0IFRbcqgEcZepAOrdj
n6aHIpavvaubdynFs3g8cqe0RWqmGrrRfIYvBdVGZmbsLWHpOo7+Z55oDHqz721E
8oWGpTIVjXOIxbrCBBfici/R+GqG4kDF/5cbLQmtNyHEZ6tVPvrjOAtrmnCL+zlE
A+LEQ3TOFY9DelokA8GF9pKV630aBjbvHnBXTaO5WPGgvvj9SCHkXqOKYYd/mTDT
qN8HcWqJ5aT3qoA//WLVV4aB/LDJ87im/8PYSlAVOtVhbRKRp+IJMa/5xZ6tYLou
QuUxV55zX9wSXluMvyZ9QjgYGr9h+qdccICCaKFKzrltjXfR9qF42R4EZZknAgMB
AAGjggIpMIICJTAdBgNVHQ4EFgQUVxQa9wkNoSYLW3FwIEp6EGsGIvgwHwYDVR0j
BBgwFoAU9jhvq+o5IQtmWmpVrl2ma+Z0FZcwDgYDVR0PAQH/BAQDAgeAMG4GA1Ud
HwRnMGUwY6BhoF+GXXJzeW5jOi8vcnBraS0wMS5wZHhuZXQudWsvcmVwby9wYXJh
ZG94bmV0d29ya3MvOC9GNjM4NkZBQkVBMzkyMTBCNjY1QTZBNTVBRTVEQTY2QkU2
NzQxNTk3LmNybDCBkwYIKwYBBQUHAQEEgYYwgYMwgYAGCCsGAQUFBzAChnRyc3lu
YzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYz
ZTAxODU3NTVjOTFiZTNmOWQvNy9GNjM4NkZBQkVBMzkyMTBCNjY1QTZBNTVBRTVE
QTY2QkU2NzQxNTk3LmNlcjCBjgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4Zx
cnN5bmM6Ly9ycGtpLTAxLnBkeG5ldC51ay9yZXBvL3BhcmFkb3huZXR3b3Jrcy84
LzMyNjEzMDM1M2E2NDY2NjMzNDNhMzczOTY2M2EzYTJmMzQzODJkMzQzODIwM2Qz
ZTIwMzUzMjMwMzIzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggr
BgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF38QHnzANBgkqhkiG9w0BAQsFAAOC
AQEAU83khcltJT9TTUouec4M+22CNBhfU1GaAhfaM0xNsHCi9ea6HrQ51Y4AbGxQ
vlk7xybMgTIKdjcL2IgBxr6eUJdogfARd5peZuITovcUHXdGDRR9Uv+thqcKqgGe
GY2CwkMwlUrO6kvj+n6ea0KR4Zy8uW6OZl+GdLU56XdvqLt43+QQfS95oVoPrjgU
+TYQEbKFS1jMpOIcYrurmMQHwolaRxsk7fJ1Z/3dYteUmn+fwXjoVOeSslFogPFb
cIt9SOFgO3ATF8VcyO6x7nFDRK77Pyx1PYGNmrDigc5Oa84Khb+3dDJfFwZx3ywe
OK9OxUCGtlrn+Ul4DuHf04yhIg==
-----END CERTIFICATE-----
Generated at Thu Jun 11 21:55:50 2026 by rpki-client