Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a383136663a3a2f34382d3438203d3e203532303235.roa
File:                     326130353a646663343a383136663a3a2f34382d3438203d3e203532303235.roa (raw, json)
Hash identifier:          s4Nzyx/cgis9IOLViv/rxFyHDo6x0gekhopmJ1SOnpE=
Subject key identifier:   AB:F1:B6:70:C4:FD:D0:25:2C:6F:69:08:87:44:95:44:86:A6:E8:98
Certificate issuer:       /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial:       025BFA7E6A4955CE1ED59C519D3C55EFBD4CB711
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a383136663a3a2f34382d3438203d3e203532303235.roa
Signing time:             Thu 04 Jun 2026 16:32:51 +0000
ROA not before:           Thu 04 Jun 2026 16:27:51 +0000
ROA not after:            Thu 03 Jun 2027 16:32:51 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:816f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:5b:fa:7e:6a:49:55:ce:1e:d5:9c:51:9d:3c:55:ef:bd:4c:b7:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
        Validity
            Not Before: Jun  4 16:27:51 2026 GMT
            Not After : Jun  3 16:32:51 2027 GMT
        Subject: CN=ABF1B670C4FDD0252C6F69088744954486A6E898
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:91:80:d3:b7:47:92:7a:44:e9:36:f3:37:a3:
                    20:88:58:aa:8d:5b:ee:b4:71:58:65:4d:9a:69:55:
                    47:99:79:65:7e:ca:77:b4:a1:35:fe:10:42:d3:d7:
                    7c:3c:8a:20:59:72:1c:d4:e5:09:28:5c:5e:13:7c:
                    ae:9d:1d:30:34:dd:b2:a1:85:f3:e8:64:25:3f:90:
                    04:2a:ef:8f:a9:54:1f:ff:36:20:d1:81:b5:c6:9f:
                    a0:f4:9e:9c:3a:1d:ef:b6:90:e9:9a:9c:b6:fa:e6:
                    b9:97:12:2d:f2:63:29:58:b6:83:a1:ad:e9:de:e2:
                    95:7d:e3:1c:b0:a2:07:54:28:b8:e1:a3:ab:27:4e:
                    c1:61:11:9d:b4:4f:56:ac:2d:ba:64:8e:6d:b1:ae:
                    af:4b:f9:40:2f:3a:f4:02:25:a4:87:56:c1:a2:f8:
                    e4:4b:24:62:b0:66:f5:aa:91:af:59:ad:bf:3d:9f:
                    ed:1e:69:06:5e:39:a1:8e:4b:85:81:6f:3c:be:4b:
                    bb:80:81:f5:1c:f7:7f:c4:90:cb:7f:e5:79:2a:34:
                    31:f7:b5:d0:b2:d4:9b:3b:77:ff:54:05:45:09:2b:
                    69:30:ba:6c:bb:1e:1e:c5:6b:bf:ef:28:f8:37:cf:
                    3c:f0:6e:df:26:ca:f2:b1:8d:c5:f9:a2:20:17:45:
                    52:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:F1:B6:70:C4:FD:D0:25:2C:6F:69:08:87:44:95:44:86:A6:E8:98
            X509v3 Authority Key Identifier:
                keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a383136663a3a2f34382d3438203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:816f::/48

    Signature Algorithm: sha256WithRSAEncryption
         57:55:50:30:14:09:51:33:91:15:dd:bc:47:63:29:0c:bd:70:
         62:cc:42:6c:87:51:ec:c6:3e:13:38:a1:a9:b5:de:6a:ea:8c:
         62:86:98:a6:28:de:c3:b4:4e:21:2c:21:8f:51:06:d4:19:30:
         d2:ba:6b:77:25:e3:bb:94:c6:e9:0a:f5:75:74:60:19:35:60:
         68:01:23:8b:c4:cf:1d:a1:98:f9:26:08:37:72:ae:91:80:7c:
         b8:4c:2d:27:da:e8:82:0b:f8:8a:ca:ed:6d:ce:7e:e5:92:01:
         3f:f5:cd:25:a6:6e:b1:7a:f1:54:97:0e:ed:8b:6e:a8:fd:76:
         af:b7:95:8d:53:53:ac:35:c3:6c:26:6f:40:ce:3f:83:28:14:
         9f:be:0e:76:5f:93:a0:e8:f5:1f:f2:b6:96:2c:e1:76:0c:1a:
         8e:b2:5d:6f:48:16:24:7c:e7:0b:77:83:70:86:06:e2:40:7a:
         cf:5b:6e:5b:9b:67:62:dd:a4:90:c0:35:1d:40:86:56:39:b7:
         99:24:bc:95:4c:0c:18:40:43:7e:4d:61:42:64:9d:d5:f1:9f:
         15:e3:48:40:53:34:f7:a7:37:5a:e7:df:cf:a1:a2:61:47:83:
         d9:3a:8f:56:05:01:fc:76:c7:ee:a1:b4:9e:7c:a5:ee:17:f9:
         10:8b:cc:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 21:56:39 2026 by rpki-client