Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a3831363a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a3831363a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          xFEqS2cy5lCNS44T0oKqaEI4OteIRkuykS9740Jb8WE=
Subject key identifier:   57:63:D1:6F:10:51:78:34:0E:01:53:1C:FF:4E:BE:5A:DB:26:11:E9
Certificate issuer:       /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial:       56E24875E07DDC189782C52913C2E5F8A68337F3
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a3831363a3a2f34382d313238203d3e203532303235.roa
Signing time:             Thu 04 Jun 2026 16:33:08 +0000
ROA not before:           Thu 04 Jun 2026 16:28:08 +0000
ROA not after:            Thu 03 Jun 2027 16:33:08 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:816::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:e2:48:75:e0:7d:dc:18:97:82:c5:29:13:c2:e5:f8:a6:83:37:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
        Validity
            Not Before: Jun  4 16:28:08 2026 GMT
            Not After : Jun  3 16:33:08 2027 GMT
        Subject: CN=5763D16F105178340E01531CFF4EBE5ADB2611E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:93:a9:31:38:48:76:e7:d6:a6:1c:85:a7:29:
                    01:6a:25:1b:c6:a4:2e:75:75:d1:31:df:6c:85:0a:
                    e6:c5:28:04:fc:d3:1d:9f:b1:f8:88:8e:c5:2e:bf:
                    28:8d:b7:55:0b:2b:11:55:8c:04:d7:1f:ee:30:ca:
                    9f:c0:5d:37:3f:8d:90:e3:84:33:d6:93:da:e3:5d:
                    cb:b3:fb:5d:a9:bc:b1:92:3a:df:7e:89:47:0e:4f:
                    de:7f:c3:dc:7b:a5:15:db:8a:67:a3:19:81:59:f6:
                    18:f5:00:8f:45:05:00:b4:2b:99:58:88:6a:70:88:
                    d3:8e:b8:33:72:2a:5e:4f:0e:4f:a1:4a:b5:7e:ae:
                    e0:5a:e8:5f:70:92:f6:88:b7:e5:85:08:96:3b:3c:
                    36:89:79:ac:12:ff:c3:1b:22:02:78:e7:30:f6:bb:
                    90:36:b8:d9:a3:e2:67:80:ec:f4:0a:b0:70:47:9c:
                    5a:f5:7f:3e:53:b3:44:d1:30:e7:9a:8e:92:c9:44:
                    4b:c3:bf:e0:a4:5b:3e:d4:7a:a3:be:03:99:53:5f:
                    b0:47:e3:bc:48:a0:aa:89:67:40:83:0d:b0:65:d2:
                    aa:90:85:c8:99:c1:cf:db:51:57:d8:bd:86:85:18:
                    45:76:3a:38:fb:2b:ed:5b:95:3f:c2:84:7e:c6:bf:
                    b5:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:63:D1:6F:10:51:78:34:0E:01:53:1C:FF:4E:BE:5A:DB:26:11:E9
            X509v3 Authority Key Identifier:
                keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a3831363a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:816::/48

    Signature Algorithm: sha256WithRSAEncryption
         90:44:da:20:c2:64:89:78:f7:4f:c5:39:7d:29:cf:92:6d:74:
         42:bd:52:74:c9:6c:79:d7:42:4f:cb:3e:d5:6f:70:34:38:3e:
         33:ac:60:fd:dd:46:5c:4c:ae:ea:c8:40:44:75:e9:92:5c:da:
         2c:9f:c4:fc:0f:07:7d:b1:02:a3:39:ec:9d:ea:c6:8c:7d:ea:
         57:22:ab:84:44:9e:52:dd:eb:76:ca:ee:17:82:2b:9d:d5:31:
         ab:33:35:89:17:4a:31:7e:73:23:53:09:51:94:4a:eb:04:d1:
         9e:fc:86:96:37:54:85:f9:09:1e:8b:1d:7d:47:89:09:9c:28:
         7b:90:62:c7:ac:05:08:3a:ec:27:a7:49:dd:3a:3e:51:b5:14:
         bb:4f:28:2f:de:08:eb:4a:f0:df:a1:3f:4a:2a:57:9f:d2:e5:
         c0:1e:b0:f5:86:33:9e:6e:29:5e:ab:47:75:1a:15:19:24:01:
         33:61:94:e8:5b:cb:75:dc:52:a4:43:7e:01:99:2e:26:26:6c:
         bf:5b:bf:46:28:d6:19:1e:ee:2e:f4:31:ab:fb:8d:c8:8a:e6:
         9e:ac:1a:ea:fe:92:a8:36:f2:38:0d:df:6f:36:40:23:63:8a:
         80:01:d3:25:12:6d:39:fc:96:85:1b:4d:7a:05:8c:d6:c6:ee:
         64:5f:9c:dc
-----BEGIN CERTIFICATE-----
MIIFIjCCBAqgAwIBAgIUVuJIdeB93BiXgsUpE8Ll+KaDN/MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjYzODZGQUJFQTM5MjEwQjY2NUE2QTU1QUU1REE2NkJF
Njc0MTU5NzAeFw0yNjA2MDQxNjI4MDhaFw0yNzA2MDMxNjMzMDhaMDMxMTAvBgNV
BAMTKDU3NjNEMTZGMTA1MTc4MzQwRTAxNTMxQ0ZGNEVCRTVBREIyNjExRTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0k6kxOEh259amHIWnKQFqJRvG
pC51ddEx32yFCubFKAT80x2fsfiIjsUuvyiNt1ULKxFVjATXH+4wyp/AXTc/jZDj
hDPWk9rjXcuz+12pvLGSOt9+iUcOT95/w9x7pRXbimejGYFZ9hj1AI9FBQC0K5lY
iGpwiNOOuDNyKl5PDk+hSrV+ruBa6F9wkvaIt+WFCJY7PDaJeawS/8MbIgJ45zD2
u5A2uNmj4meA7PQKsHBHnFr1fz5Ts0TRMOeajpLJREvDv+CkWz7UeqO+A5lTX7BH
47xIoKqJZ0CDDbBl0qqQhciZwc/bUVfYvYaFGEV2Ojj7K+1blT/ChH7Gv7V9AgMB
AAGjggIsMIICKDAdBgNVHQ4EFgQUV2PRbxBReDQOAVMc/06+WtsmEekwHwYDVR0j
BBgwFoAU9jhvq+o5IQtmWmpVrl2ma+Z0FZcwDgYDVR0PAQH/BAQDAgeAMG4GA1Ud
HwRnMGUwY6BhoF+GXXJzeW5jOi8vcnBraS0wMS5wZHhuZXQudWsvcmVwby9wYXJh
ZG94bmV0d29ya3MvOC9GNjM4NkZBQkVBMzkyMTBCNjY1QTZBNTVBRTVEQTY2QkU2
NzQxNTk3LmNybDCBkwYIKwYBBQUHAQEEgYYwgYMwgYAGCCsGAQUFBzAChnRyc3lu
YzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYz
ZTAxODU3NTVjOTFiZTNmOWQvNy9GNjM4NkZBQkVBMzkyMTBCNjY1QTZBNTVBRTVE
QTY2QkU2NzQxNTk3LmNlcjCBkQYIKwYBBQUHAQsEgYQwgYEwfwYIKwYBBQUHMAuG
c3JzeW5jOi8vcnBraS0wMS5wZHhuZXQudWsvcmVwby9wYXJhZG94bmV0d29ya3Mv
OC8zMjYxMzAzNTNhNjQ2NjYzMzQzYTM4MzEzNjNhM2EyZjM0MzgyZDMxMzIzODIw
M2QzZTIwMzUzMjMwMzIzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF38QIFjANBgkqhkiG9w0BAQsF
AAOCAQEAkETaIMJkiXj3T8U5fSnPkm10Qr1SdMlseddCT8s+1W9wNDg+M6xg/d1G
XEyu6shARHXpklzaLJ/E/A8HfbECoznsnerGjH3qVyKrhESeUt3rdsruF4IrndUx
qzM1iRdKMX5zI1MJUZRK6wTRnvyGljdUhfkJHosdfUeJCZwoe5Bix6wFCDrsJ6dJ
3To+UbUUu08oL94I60rw36E/SipXn9LlwB6w9YYznm4pXqtHdRoVGSQBM2GU6FvL
ddxSpEN+AZkuJiZsv1u/RijWGR7uLvQxq/uNyIrmnqwa6v6SqDbyOA3fbzZAI2OK
gAHTJRJtOfyWhRtNegWM1sbuZF+c3A==
-----END CERTIFICATE-----
Generated at Thu Jun 11 21:55:49 2026 by rpki-client