Route Origin Authorization

$ rpki-client -vvvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a3831363a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a3831363a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          9XntYSKWAeQ0rG2r/kLu/+/lpezMb5Q4Nd8M+mDNq4w=
Subject key identifier:   AA:A8:B3:81:60:62:42:64:F5:4F:8E:C0:28:7C:42:7D:2E:0F:DD:9C
Certificate issuer:       /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial:       6A080E480FC507D8018F9C9B020A30711BBCD6E4
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a3831363a3a2f34382d313238203d3e203532303235.roa
Signing time:             Sat 15 Aug 2026 23:20:51 +0000
ROA not before:           Sat 15 Aug 2026 23:15:51 +0000
ROA not after:            Sat 14 Aug 2027 23:20:51 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:816::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Aug 2026 23:30:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:08:0e:48:0f:c5:07:d8:01:8f:9c:9b:02:0a:30:71:1b:bc:d6:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
        Validity
            Not Before: Aug 15 23:15:51 2026 GMT
            Not After : Aug 14 23:20:51 2027 GMT
        Subject: CN=AAA8B38160624264F54F8EC0287C427D2E0FDD9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:9e:85:6f:c5:fd:37:c6:ae:32:52:76:4a:0c:
                    d3:eb:58:dc:a4:4d:3d:de:27:a8:65:78:5c:6a:b3:
                    4d:e1:a8:aa:9b:d6:02:e7:31:50:a2:33:68:11:4f:
                    42:43:0c:11:0c:00:fe:3a:86:48:cd:75:4f:fe:86:
                    cc:37:2e:67:25:e5:e4:5e:ee:ac:6e:19:43:f7:53:
                    90:1b:a9:98:33:e8:5f:21:a5:9c:f0:b4:2f:be:f7:
                    b3:98:53:b7:51:df:e1:c8:08:59:79:9d:cb:7f:6a:
                    59:57:d6:4e:79:0a:53:3e:e6:13:fd:f6:39:23:17:
                    bb:d0:98:97:a4:2f:69:50:c4:1e:8c:c3:14:00:9c:
                    06:dc:a5:c1:cd:21:75:5d:79:ae:6e:27:f0:28:51:
                    cb:2f:41:c6:4a:d8:a0:79:02:56:1d:f0:ac:99:2f:
                    2d:17:a0:e2:c7:af:9d:ab:7e:8d:c9:f2:6c:05:c7:
                    17:85:0b:f7:27:56:70:88:9f:49:9a:be:b7:92:41:
                    9b:8d:55:8b:e5:5b:a3:9b:20:9c:42:ce:7f:42:ea:
                    d2:23:fd:bc:9f:66:63:95:37:9c:b1:a3:38:b0:86:
                    a3:fb:42:c0:8c:bd:14:9d:8c:ea:5e:ea:5e:a0:24:
                    bb:8c:d0:b8:6b:e1:bd:97:4a:a4:62:e2:9c:1a:91:
                    fd:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:A8:B3:81:60:62:42:64:F5:4F:8E:C0:28:7C:42:7D:2E:0F:DD:9C
            X509v3 Authority Key Identifier:
                keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a3831363a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:816::/48

    Signature Algorithm: sha256WithRSAEncryption
         01:fc:35:37:73:a4:b9:35:fa:3f:f2:42:67:17:bc:0a:6f:8d:
         f3:60:6c:17:dc:95:ef:03:70:45:f0:cf:ce:c8:65:00:f8:f4:
         b9:f7:52:02:76:d1:36:2e:a6:5a:5a:92:89:9d:1a:2b:1f:82:
         d6:e2:14:6b:ef:b9:f1:90:c2:97:22:72:21:1a:87:86:f3:10:
         0e:d2:52:87:ac:0f:5a:a5:e0:25:fc:12:21:e0:4c:2d:ea:fe:
         cd:f1:b7:63:8b:6c:03:59:71:0e:b7:da:9c:0f:30:ce:b8:4f:
         38:d0:70:f7:9f:10:28:4b:c1:a5:cb:31:e6:b3:42:33:a2:9c:
         08:a1:0f:8e:92:25:2e:5b:4f:67:d5:48:0e:6f:97:1b:95:5d:
         19:10:40:ac:1d:67:4f:a4:3e:3d:9d:c7:c8:6a:e9:6b:4c:06:
         d0:e0:75:cb:1a:c0:16:76:1b:e8:36:fe:fb:70:5e:52:1c:cd:
         df:ae:03:26:e9:00:8e:f5:ce:7a:b5:2b:25:81:f3:48:f2:c3:
         ac:82:bc:68:fb:79:4c:e3:be:cf:be:75:19:db:84:d9:33:f7:
         de:65:31:9c:5c:ca:e7:8b:79:fb:11:46:73:d2:7f:54:4f:02:
         96:89:33:39:0f:4e:d5:d3:2d:9d:f7:57:e0:06:c7:57:d9:41:
         e2:e7:86:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 09:06:45 2026 by rpki-client