Route Origin Authorization

$ rpki-client -vvvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a39623a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a39623a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          +nZZzAqlWxPAOx28kayWDsAzvdmz4HfJjEEPMmtasnM=
Subject key identifier:   E0:CF:79:EC:19:40:82:5E:81:8E:67:64:CD:49:D4:F3:7E:07:E7:8F
Certificate issuer:       /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial:       20C33A0A9EC917F7B7672F62FAEDB99B95A888E3
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a39623a3a2f34382d313238203d3e203532303235.roa
Signing time:             Sat 15 Aug 2026 23:21:16 +0000
ROA not before:           Sat 15 Aug 2026 23:16:16 +0000
ROA not after:            Sat 14 Aug 2027 23:21:16 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:9b::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Aug 2026 23:30:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:c3:3a:0a:9e:c9:17:f7:b7:67:2f:62:fa:ed:b9:9b:95:a8:88:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
        Validity
            Not Before: Aug 15 23:16:16 2026 GMT
            Not After : Aug 14 23:21:16 2027 GMT
        Subject: CN=E0CF79EC1940825E818E6764CD49D4F37E07E78F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:23:a2:25:db:0e:29:70:f2:06:a8:6a:2e:4d:
                    6e:fc:4f:cc:9d:09:2d:25:ee:cd:43:65:66:83:54:
                    05:88:9b:00:e3:16:f1:15:cd:1c:cb:27:2c:de:64:
                    fe:c1:48:cd:ac:b8:36:57:8e:7e:89:76:2d:6b:a4:
                    c4:0f:eb:74:10:73:99:ce:36:80:02:48:14:c2:e9:
                    e5:38:76:cb:1e:20:03:d6:7d:bc:5a:73:72:07:15:
                    b4:99:cd:0a:dc:af:ef:23:b5:c6:5a:eb:1d:87:d0:
                    2a:e6:1a:23:1c:6a:df:e8:2d:df:e4:7f:4d:22:40:
                    7c:c1:25:55:3a:ea:0c:a8:57:da:1f:27:4c:27:23:
                    03:69:77:e2:86:b6:5b:4e:ab:47:37:c4:93:48:1a:
                    a8:66:a5:d3:5f:fe:3a:68:df:01:84:45:a8:41:6c:
                    0e:1c:d7:a4:0a:28:3d:ec:45:b4:13:e8:1d:f8:23:
                    60:e1:56:60:57:f5:7d:f1:2b:60:0c:cd:f4:00:7c:
                    39:65:f5:9c:03:9c:9c:00:18:64:ac:86:fe:bc:11:
                    0a:88:c4:da:c4:ce:d5:30:fa:0e:29:12:ac:33:4f:
                    76:74:04:21:50:e8:4c:0e:3f:71:80:85:f6:65:37:
                    00:48:6e:5c:24:dd:d4:31:da:2e:78:1a:05:e7:09:
                    f8:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:CF:79:EC:19:40:82:5E:81:8E:67:64:CD:49:D4:F3:7E:07:E7:8F
            X509v3 Authority Key Identifier:
                keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a39623a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:9b::/48

    Signature Algorithm: sha256WithRSAEncryption
         89:5d:16:5c:af:81:47:d9:74:b1:b8:70:bc:30:c9:24:ef:d6:
         2e:d7:e2:34:5c:d3:19:22:e3:15:19:6e:a8:1c:0a:03:82:76:
         1e:5f:bd:0b:c7:79:d1:da:1b:9f:3b:81:38:0a:07:25:3a:0d:
         7a:2d:e4:76:3b:60:cf:aa:15:7d:fb:17:3d:41:ce:5f:3e:af:
         de:41:12:ce:5b:86:cb:3c:97:ac:36:9a:a3:18:63:34:50:f6:
         d3:c5:f7:d9:bc:de:55:c9:93:46:41:d1:40:28:b8:fa:e9:ca:
         8c:bd:34:92:89:d4:26:01:f6:c6:38:aa:58:87:95:6b:26:92:
         b4:49:df:49:a3:3e:cf:65:2b:d9:92:33:de:94:ff:e9:28:51:
         36:0b:5d:a2:fc:58:ac:8d:f1:22:89:fe:b4:f6:36:74:a2:c2:
         7a:5c:1d:09:8b:8c:5a:b6:4a:67:c7:ee:57:17:52:8b:72:73:
         e3:1a:00:18:61:d3:c3:c0:46:c9:0f:08:b1:88:78:55:23:c1:
         89:62:08:8c:75:0b:a9:fc:8f:c6:c0:84:3b:bd:96:57:fd:b7:
         13:5d:fc:d1:e2:da:03:9e:1c:f3:3a:27:e2:89:a3:64:55:d4:
         15:18:20:c2:a3:f0:8b:7d:73:a2:5c:f4:eb:0b:0d:de:0e:15:
         ba:ca:93:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 10:36:33 2026 by rpki-client