Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a39623a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a39623a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          GlnVybny0zlsa6muVYj8LzrLe14yjPaPsrfQhALJa14=
Subject key identifier:   54:4F:51:B9:A9:F7:80:63:1A:0F:BA:E5:4E:FF:59:84:A6:1F:E3:F5
Certificate issuer:       /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial:       4BE0740D2A058DB495761D6CFAE6CE133B706777
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a39623a3a2f34382d313238203d3e203532303235.roa
Signing time:             Thu 04 Jun 2026 16:33:07 +0000
ROA not before:           Thu 04 Jun 2026 16:28:07 +0000
ROA not after:            Thu 03 Jun 2027 16:33:07 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:9b::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:e0:74:0d:2a:05:8d:b4:95:76:1d:6c:fa:e6:ce:13:3b:70:67:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
        Validity
            Not Before: Jun  4 16:28:07 2026 GMT
            Not After : Jun  3 16:33:07 2027 GMT
        Subject: CN=544F51B9A9F780631A0FBAE54EFF5984A61FE3F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:45:c8:65:b7:5e:cd:28:46:3b:dc:3a:0b:a1:
                    74:74:ff:54:18:61:89:72:02:98:ac:48:ff:fe:6f:
                    a7:8d:4c:d3:f7:62:c5:20:53:9a:fd:b2:10:d9:cf:
                    dd:d3:18:24:ec:d8:19:6a:c3:14:6e:9d:a6:35:68:
                    19:70:da:60:9d:f3:01:52:41:94:99:dd:d7:57:6c:
                    61:d9:8d:10:54:cb:b3:2e:0d:3d:71:c8:92:f1:91:
                    86:3f:2c:19:e1:eb:8d:df:4d:32:de:3a:15:14:f2:
                    f4:39:54:7f:f2:92:39:9a:3b:29:e3:aa:e4:6c:8a:
                    2c:0a:0f:bf:47:42:f8:65:a2:84:8c:62:69:4c:f4:
                    b0:ef:cb:ca:c3:c1:89:8b:d9:cf:f7:b2:89:8b:1b:
                    b3:fd:13:ee:78:0b:22:f2:e3:e2:af:26:dc:35:75:
                    28:f1:00:11:38:44:df:92:28:ae:7d:91:83:97:54:
                    be:39:5e:3d:f8:fd:78:e1:d6:ff:a3:59:e7:57:68:
                    08:3b:16:1c:c8:f7:cb:ea:0e:64:1c:55:d7:9b:ae:
                    0a:c8:13:22:a8:30:09:41:75:dd:b8:b9:9f:fa:1b:
                    e6:c9:01:2b:ef:76:8f:97:70:2e:d4:fc:19:83:de:
                    2a:0a:de:77:be:25:b0:3a:4e:ed:a8:54:63:a3:87:
                    c9:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:4F:51:B9:A9:F7:80:63:1A:0F:BA:E5:4E:FF:59:84:A6:1F:E3:F5
            X509v3 Authority Key Identifier:
                keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a39623a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:9b::/48

    Signature Algorithm: sha256WithRSAEncryption
         2a:ab:22:88:be:9e:3d:62:2f:ca:22:dd:a9:d2:4d:94:4b:b1:
         3b:74:8a:f0:27:4c:d7:df:36:73:15:2b:48:e0:7f:2a:f0:09:
         e0:6e:a5:05:5b:a5:6f:3c:2f:c0:05:8d:07:bd:66:af:8d:c0:
         76:77:17:d6:a4:d1:7a:c9:3f:d4:78:0c:eb:9f:25:55:05:77:
         40:b3:a1:fd:ca:6b:32:cd:be:df:cf:72:af:98:17:0b:6c:e9:
         d8:73:85:0a:05:d7:ec:3d:13:81:c7:49:c7:63:90:55:10:ba:
         94:4b:43:66:60:19:b9:1a:68:28:f2:70:e5:91:a4:12:41:a1:
         9a:9c:02:26:4d:a3:a2:94:7d:fb:5b:1b:39:fc:fc:9d:f1:83:
         f3:d6:13:20:e4:cd:1f:ff:8e:78:6e:60:2e:20:0a:fc:bd:44:
         2e:ba:04:eb:52:78:f2:90:c2:3b:60:b9:c9:bf:a2:c2:e7:2c:
         18:17:ae:fd:c7:ac:d3:4d:0b:ce:30:2c:d8:d3:f1:4d:12:74:
         60:4a:bc:cc:f5:a3:3a:35:82:3c:70:0e:b8:64:62:f6:64:e0:
         08:47:89:fc:05:b9:6a:49:d4:5b:c4:3c:a9:1d:a9:12:68:26:
         d2:8c:a4:1c:48:17:35:d4:dc:cc:fc:44:65:03:25:ed:a7:64:
         7d:fe:7c:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 21:55:49 2026 by rpki-client