Route Origin Authorization

$ rpki-client -vvvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a39633a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a39633a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          cHNhPp4UWxQCX9VucPvOgssenb+G5bOtjnzurpADjBw=
Subject key identifier:   79:80:25:41:9B:97:CB:FC:B2:9E:73:55:03:C3:52:58:2B:E2:E3:5A
Certificate issuer:       /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial:       6D3BA7F681046C1078E961D0DD2656F49D52358B
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a39633a3a2f34382d313238203d3e203532303235.roa
Signing time:             Sat 15 Aug 2026 23:21:10 +0000
ROA not before:           Sat 15 Aug 2026 23:16:10 +0000
ROA not after:            Sat 14 Aug 2027 23:21:10 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:9c::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Aug 2026 23:30:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:3b:a7:f6:81:04:6c:10:78:e9:61:d0:dd:26:56:f4:9d:52:35:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
        Validity
            Not Before: Aug 15 23:16:10 2026 GMT
            Not After : Aug 14 23:21:10 2027 GMT
        Subject: CN=798025419B97CBFCB29E735503C352582BE2E35A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:58:b5:84:7d:5f:76:7d:ef:90:ec:5c:07:52:
                    8a:d8:9e:f6:46:e4:61:11:f2:f7:2b:c8:ea:18:4b:
                    de:6d:cc:ef:fd:87:35:7f:7b:1f:3d:00:00:84:72:
                    58:fe:a6:29:c8:34:80:c0:d2:5e:55:22:04:96:61:
                    4b:74:20:e3:ae:5c:30:b0:7d:cc:36:dd:02:08:e6:
                    01:53:42:d3:09:3d:56:eb:7a:ba:c7:10:82:af:15:
                    9c:3b:e8:0b:a1:80:07:f5:e3:2a:e4:3a:21:ba:36:
                    0f:5a:7c:1d:0b:a1:9b:0c:0c:5e:38:ff:d6:a8:d9:
                    a3:37:bb:e7:f8:a5:85:3b:9a:06:0b:49:22:e6:14:
                    e1:24:18:a4:e2:58:7e:18:fd:11:9d:b0:00:16:ea:
                    4a:20:b7:13:93:e9:09:47:30:bb:fb:b7:aa:97:bc:
                    f0:86:7b:90:e4:d8:1a:e8:4b:9b:9e:21:bf:e5:92:
                    66:2f:4c:6c:6a:01:16:2b:53:5f:c1:f0:19:61:ad:
                    e5:36:fa:62:33:f3:01:6b:a7:e2:85:69:df:9e:33:
                    51:6d:fe:0d:d4:32:19:b4:11:3e:d0:47:e3:35:1f:
                    bc:58:5d:52:36:bf:00:9e:8b:a1:a7:35:40:b4:42:
                    11:3a:ec:67:be:3d:bc:6f:fa:c8:fd:1c:2c:e4:0e:
                    90:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:80:25:41:9B:97:CB:FC:B2:9E:73:55:03:C3:52:58:2B:E2:E3:5A
            X509v3 Authority Key Identifier:
                keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a39633a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:9c::/48

    Signature Algorithm: sha256WithRSAEncryption
         1e:d0:1a:1a:73:a5:e3:c1:3f:18:b7:61:34:7d:28:64:a0:a3:
         c6:ed:57:d8:da:7b:c3:20:bb:12:41:65:68:a8:d7:05:7e:62:
         c2:ae:c0:63:e0:9e:5a:16:f2:80:57:d8:af:65:1b:2d:c9:65:
         99:e0:0d:55:d5:99:55:b1:05:57:4a:aa:56:2d:e7:6f:6d:44:
         91:56:fc:35:8a:52:0c:32:95:58:25:4c:db:ed:59:ee:35:a1:
         3e:26:42:33:47:fb:5b:1c:d8:f7:c6:a5:49:1d:66:1e:10:ae:
         0d:3d:bf:5c:97:3f:18:08:fa:ea:ca:d2:29:47:b1:51:e1:83:
         e7:e6:f4:88:19:d0:7f:44:6b:9c:ca:0b:18:8d:38:5b:12:2a:
         db:fb:5d:23:79:8e:09:fe:9e:59:a7:18:52:10:be:ad:f5:bf:
         1a:6d:66:17:20:01:63:e8:3d:4d:66:85:73:3f:46:e6:75:f8:
         4a:cb:95:8c:19:79:d4:b7:79:32:a8:4d:8e:e7:db:d4:01:e2:
         24:74:00:84:77:60:2d:08:22:03:00:a1:6a:d3:8c:4d:cb:b0:
         9b:31:69:b9:60:ba:67:14:8a:b5:6e:1f:9f:2a:8f:f7:a1:fc:
         24:ab:06:4f:8e:15:83:a2:b5:5b:93:5e:69:ad:6a:4c:55:9c:
         7b:aa:0f:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 10:36:22 2026 by rpki-client