Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a3962663a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a3962663a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          /AEmtaUSUkLfSVbfGBSqPsnkse8TGKxqjq//cMeVyCY=
Subject key identifier:   71:A1:6B:57:23:9E:7E:C2:99:49:03:9F:44:CB:4E:E8:64:40:F8:DA
Certificate issuer:       /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial:       679CCC47349281920562DF3E8D4C0B8AB59D699E
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a3962663a3a2f34382d313238203d3e203532303235.roa
Signing time:             Thu 04 Jun 2026 16:32:41 +0000
ROA not before:           Thu 04 Jun 2026 16:27:41 +0000
ROA not after:            Thu 03 Jun 2027 16:32:41 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:9bf::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:9c:cc:47:34:92:81:92:05:62:df:3e:8d:4c:0b:8a:b5:9d:69:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
        Validity
            Not Before: Jun  4 16:27:41 2026 GMT
            Not After : Jun  3 16:32:41 2027 GMT
        Subject: CN=71A16B57239E7EC29949039F44CB4EE86440F8DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:0f:51:8a:c9:0e:0c:ca:f2:f9:f9:e4:3b:af:
                    65:38:1e:2e:6a:d3:b9:8f:62:f4:db:43:20:6e:5e:
                    c2:8c:30:d5:2c:4f:08:d2:be:04:35:74:0c:25:a5:
                    63:a8:95:e7:26:1d:39:e2:a4:ea:59:c9:17:78:aa:
                    4d:9c:d1:6d:80:90:cc:0d:8c:db:7a:65:f2:4b:6f:
                    a2:db:86:8a:7b:9f:a3:f3:96:1b:fb:27:62:42:65:
                    74:0f:9f:20:c2:8f:40:fd:67:5f:83:51:43:1c:96:
                    48:a6:b8:87:48:0f:7d:6c:7c:17:c1:a2:37:8b:f6:
                    f2:62:6c:12:3c:27:fb:ec:ff:20:d3:95:e4:a1:c9:
                    a5:e0:8f:8e:c2:d5:5f:18:e8:10:15:0c:9b:be:37:
                    36:00:5f:f8:2b:70:dd:92:7d:4b:b7:a9:dd:fb:3a:
                    58:5a:9f:a6:93:7f:0d:27:b3:a0:59:ab:ec:a4:e3:
                    e2:16:0f:24:1e:71:38:5d:4c:6d:8a:ca:3e:fa:77:
                    9c:41:75:40:ee:b6:f2:d2:de:17:7c:cc:06:c5:82:
                    6d:7a:ed:b5:30:ea:c3:bb:1d:04:94:a5:97:0c:e0:
                    8e:d2:10:ec:58:2c:57:bc:d9:2b:85:47:8e:8e:01:
                    68:03:86:a7:10:f6:84:1d:43:75:b7:f0:88:7f:73:
                    01:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:A1:6B:57:23:9E:7E:C2:99:49:03:9F:44:CB:4E:E8:64:40:F8:DA
            X509v3 Authority Key Identifier:
                keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a3962663a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:9bf::/48

    Signature Algorithm: sha256WithRSAEncryption
         4e:df:b8:38:7c:d7:03:76:15:59:b8:65:02:41:a1:fe:da:4f:
         a3:29:c2:8a:1d:c2:20:71:ad:be:6f:95:ce:7f:3a:64:46:c4:
         ea:eb:0d:c1:7e:fd:0e:86:1d:6c:fb:c7:5e:9f:41:fb:3a:7d:
         18:7b:c6:08:dc:1c:62:fb:44:91:70:c5:d3:eb:df:f3:66:28:
         f8:c9:ae:f3:84:04:fb:6c:a5:4d:58:66:a2:b7:60:74:66:d3:
         14:38:9b:4d:a3:4e:40:20:84:27:0a:d3:c9:4c:53:47:45:0f:
         a9:f6:12:62:b5:a7:0c:87:4c:8e:4c:ae:b1:1d:a0:a0:9d:7b:
         fa:c0:47:fa:ce:c1:b6:a4:e2:d6:77:1c:5b:14:9d:30:dd:e1:
         6d:bb:fa:76:5e:5c:b4:f3:6b:6e:ef:f0:d7:66:91:ad:07:bc:
         3b:58:36:b7:ec:d4:a9:f6:ac:d2:8a:d3:4e:36:a1:03:23:c2:
         f7:1b:64:94:76:be:41:f0:ac:d9:21:01:e6:48:ca:75:32:2e:
         62:3c:97:e4:41:8e:85:18:9d:40:10:68:58:ff:9c:f6:2f:58:
         11:af:ab:df:1b:3d:9c:b2:06:2e:1f:59:80:52:5c:a5:8f:56:
         51:5e:33:0f:3d:b0:ce:57:91:8b:26:b0:da:fc:8b:0d:4c:a3:
         f8:f6:9a:6b
-----BEGIN CERTIFICATE-----
MIIFIjCCBAqgAwIBAgIUZ5zMRzSSgZIFYt8+jUwLirWdaZ4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjYzODZGQUJFQTM5MjEwQjY2NUE2QTU1QUU1REE2NkJF
Njc0MTU5NzAeFw0yNjA2MDQxNjI3NDFaFw0yNzA2MDMxNjMyNDFaMDMxMTAvBgNV
BAMTKDcxQTE2QjU3MjM5RTdFQzI5OTQ5MDM5RjQ0Q0I0RUU4NjQ0MEY4REEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXD1GKyQ4MyvL5+eQ7r2U4Hi5q
07mPYvTbQyBuXsKMMNUsTwjSvgQ1dAwlpWOolecmHTnipOpZyRd4qk2c0W2AkMwN
jNt6ZfJLb6Lbhop7n6Pzlhv7J2JCZXQPnyDCj0D9Z1+DUUMclkimuIdID31sfBfB
ojeL9vJibBI8J/vs/yDTleShyaXgj47C1V8Y6BAVDJu+NzYAX/grcN2SfUu3qd37
Olhan6aTfw0ns6BZq+yk4+IWDyQecThdTG2Kyj76d5xBdUDutvLS3hd8zAbFgm16
7bUw6sO7HQSUpZcM4I7SEOxYLFe82SuFR46OAWgDhqcQ9oQdQ3W38Ih/cwG1AgMB
AAGjggIsMIICKDAdBgNVHQ4EFgQUcaFrVyOefsKZSQOfRMtO6GRA+NowHwYDVR0j
BBgwFoAU9jhvq+o5IQtmWmpVrl2ma+Z0FZcwDgYDVR0PAQH/BAQDAgeAMG4GA1Ud
HwRnMGUwY6BhoF+GXXJzeW5jOi8vcnBraS0wMS5wZHhuZXQudWsvcmVwby9wYXJh
ZG94bmV0d29ya3MvOC9GNjM4NkZBQkVBMzkyMTBCNjY1QTZBNTVBRTVEQTY2QkU2
NzQxNTk3LmNybDCBkwYIKwYBBQUHAQEEgYYwgYMwgYAGCCsGAQUFBzAChnRyc3lu
YzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYz
ZTAxODU3NTVjOTFiZTNmOWQvNy9GNjM4NkZBQkVBMzkyMTBCNjY1QTZBNTVBRTVE
QTY2QkU2NzQxNTk3LmNlcjCBkQYIKwYBBQUHAQsEgYQwgYEwfwYIKwYBBQUHMAuG
c3JzeW5jOi8vcnBraS0wMS5wZHhuZXQudWsvcmVwby9wYXJhZG94bmV0d29ya3Mv
OC8zMjYxMzAzNTNhNjQ2NjYzMzQzYTM5NjI2NjNhM2EyZjM0MzgyZDMxMzIzODIw
M2QzZTIwMzUzMjMwMzIzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF38QJvzANBgkqhkiG9w0BAQsF
AAOCAQEATt+4OHzXA3YVWbhlAkGh/tpPoynCih3CIHGtvm+Vzn86ZEbE6usNwX79
DoYdbPvHXp9B+zp9GHvGCNwcYvtEkXDF0+vf82Yo+Mmu84QE+2ylTVhmordgdGbT
FDibTaNOQCCEJwrTyUxTR0UPqfYSYrWnDIdMjkyusR2goJ17+sBH+s7BtqTi1ncc
WxSdMN3hbbv6dl5ctPNrbu/w12aRrQe8O1g2t+zUqfas0orTTjahAyPC9xtklHa+
QfCs2SEB5kjKdTIuYjyX5EGOhRidQBBoWP+c9i9YEa+r3xs9nLIGLh9ZgFJcpY9W
UV4zDz2wzleRiyaw2vyLDUyj+Paaaw==
-----END CERTIFICATE-----
Generated at Thu Jun 11 21:56:40 2026 by rpki-client