Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a39633a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a39633a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          YbJAN2qcOjfsZgfoKzx5Yqxgq3P3FUJCoHNG+QZPryQ=
Subject key identifier:   24:56:05:C1:E9:E4:27:FF:16:65:3F:B7:EC:DE:67:74:1A:F4:18:06
Certificate issuer:       /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial:       3C3F1E31662A3EB8FE27D6237100D736D68FB11E
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a39633a3a2f34382d313238203d3e203532303235.roa
Signing time:             Thu 04 Jun 2026 16:32:39 +0000
ROA not before:           Thu 04 Jun 2026 16:27:39 +0000
ROA not after:            Thu 03 Jun 2027 16:32:39 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:9c::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:3f:1e:31:66:2a:3e:b8:fe:27:d6:23:71:00:d7:36:d6:8f:b1:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
        Validity
            Not Before: Jun  4 16:27:39 2026 GMT
            Not After : Jun  3 16:32:39 2027 GMT
        Subject: CN=245605C1E9E427FF16653FB7ECDE67741AF41806
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:62:ea:7d:59:3b:65:77:1c:1b:5d:d0:c1:9f:
                    cf:2e:1b:b3:17:ae:c5:6b:1b:a6:7d:ac:47:07:de:
                    11:f2:6a:89:9c:9a:25:62:b8:d2:70:9e:8b:35:8c:
                    29:48:f3:4b:40:1b:18:da:1c:42:ea:aa:69:6c:c1:
                    66:e1:81:e4:5b:f0:3b:21:c1:2e:9b:3b:81:50:3f:
                    65:04:d0:cc:b6:a7:3c:0a:79:1e:ec:df:73:b3:6b:
                    b8:89:e5:e7:5c:8f:f2:c8:81:38:d4:ad:65:aa:2e:
                    7b:4f:ae:2c:89:b3:9c:be:79:a3:f9:3c:46:b0:b1:
                    11:54:ce:d7:a9:5a:4e:89:54:0c:0f:b4:93:99:20:
                    09:56:85:f8:17:65:df:56:aa:9f:0a:69:2c:1b:7e:
                    54:cf:bb:83:90:75:e1:2d:0f:b5:fe:33:fa:5d:a8:
                    1c:3f:46:e6:d0:06:44:2b:8d:29:a6:49:e7:83:62:
                    aa:8f:21:cd:44:a5:d9:4b:ed:97:f8:a9:c2:62:8f:
                    d4:a6:f6:0d:a1:01:76:39:b8:f6:45:44:6e:f6:44:
                    c3:d5:ab:76:6f:54:d1:8f:f2:b0:eb:08:96:24:1b:
                    c0:54:09:ba:1e:b9:63:34:d1:66:cf:1a:3b:00:6e:
                    81:57:3b:ad:ef:7a:61:0d:e8:e6:c4:b6:06:65:fb:
                    c1:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:56:05:C1:E9:E4:27:FF:16:65:3F:B7:EC:DE:67:74:1A:F4:18:06
            X509v3 Authority Key Identifier:
                keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a39633a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:9c::/48

    Signature Algorithm: sha256WithRSAEncryption
         5e:7e:04:3e:18:b0:a2:6a:74:db:30:80:27:ea:e1:88:89:24:
         94:7a:fa:44:78:29:13:da:30:e2:18:8b:f5:6c:af:76:52:e0:
         cf:7e:8c:2e:41:de:eb:e0:67:54:3d:85:c6:d8:63:86:2c:06:
         00:2c:e9:db:06:5c:c4:0d:37:45:9d:92:e2:18:47:a9:1d:cb:
         f3:e4:4e:3c:ab:9c:e5:29:31:17:1b:c8:39:76:64:2f:cd:f2:
         99:b9:aa:fe:f5:ac:0d:c7:ab:d3:a6:ec:40:ae:f3:37:41:03:
         19:5c:40:55:fb:d8:c5:f9:d0:b9:94:e7:23:e4:0b:a4:6e:1b:
         ee:bf:5c:eb:55:31:73:11:9a:3f:89:c0:1f:5d:62:04:8f:bc:
         e2:2f:8b:eb:3a:bd:76:47:8a:48:18:71:2b:d2:c3:8a:ad:7b:
         a5:a0:9f:dd:04:90:56:94:bd:63:3e:fa:df:ec:b1:57:21:3f:
         74:ea:59:3e:44:e9:7a:31:3e:18:d1:6f:56:93:69:29:ac:18:
         8f:a9:5f:16:05:d8:33:1b:bb:9a:bc:54:8f:86:82:6f:c5:aa:
         33:58:75:75:50:98:c6:95:b4:29:54:78:73:37:7b:31:ad:44:
         85:0a:33:aa:70:84:5f:54:c4:1e:b1:b8:2c:c5:93:d8:50:73:
         68:29:a0:3a
-----BEGIN CERTIFICATE-----
MIIFHzCCBAegAwIBAgIUPD8eMWYqPrj+J9YjcQDXNtaPsR4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjYzODZGQUJFQTM5MjEwQjY2NUE2QTU1QUU1REE2NkJF
Njc0MTU5NzAeFw0yNjA2MDQxNjI3MzlaFw0yNzA2MDMxNjMyMzlaMDMxMTAvBgNV
BAMTKDI0NTYwNUMxRTlFNDI3RkYxNjY1M0ZCN0VDREU2Nzc0MUFGNDE4MDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVYup9WTtldxwbXdDBn88uG7MX
rsVrG6Z9rEcH3hHyaomcmiViuNJwnos1jClI80tAGxjaHELqqmlswWbhgeRb8Dsh
wS6bO4FQP2UE0My2pzwKeR7s33Oza7iJ5edcj/LIgTjUrWWqLntPriyJs5y+eaP5
PEawsRFUztepWk6JVAwPtJOZIAlWhfgXZd9Wqp8KaSwbflTPu4OQdeEtD7X+M/pd
qBw/RubQBkQrjSmmSeeDYqqPIc1EpdlL7Zf4qcJij9Sm9g2hAXY5uPZFRG72RMPV
q3ZvVNGP8rDrCJYkG8BUCboeuWM00WbPGjsAboFXO63vemEN6ObEtgZl+8HvAgMB
AAGjggIpMIICJTAdBgNVHQ4EFgQUJFYFwenkJ/8WZT+37N5ndBr0GAYwHwYDVR0j
BBgwFoAU9jhvq+o5IQtmWmpVrl2ma+Z0FZcwDgYDVR0PAQH/BAQDAgeAMG4GA1Ud
HwRnMGUwY6BhoF+GXXJzeW5jOi8vcnBraS0wMS5wZHhuZXQudWsvcmVwby9wYXJh
ZG94bmV0d29ya3MvOC9GNjM4NkZBQkVBMzkyMTBCNjY1QTZBNTVBRTVEQTY2QkU2
NzQxNTk3LmNybDCBkwYIKwYBBQUHAQEEgYYwgYMwgYAGCCsGAQUFBzAChnRyc3lu
YzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYz
ZTAxODU3NTVjOTFiZTNmOWQvNy9GNjM4NkZBQkVBMzkyMTBCNjY1QTZBNTVBRTVE
QTY2QkU2NzQxNTk3LmNlcjCBjgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4Zx
cnN5bmM6Ly9ycGtpLTAxLnBkeG5ldC51ay9yZXBvL3BhcmFkb3huZXR3b3Jrcy84
LzMyNjEzMDM1M2E2NDY2NjMzNDNhMzk2MzNhM2EyZjM0MzgyZDMxMzIzODIwM2Qz
ZTIwMzUzMjMwMzIzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggr
BgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF38QAnDANBgkqhkiG9w0BAQsFAAOC
AQEAXn4EPhiwomp02zCAJ+rhiIkklHr6RHgpE9ow4hiL9WyvdlLgz36MLkHe6+Bn
VD2FxthjhiwGACzp2wZcxA03RZ2S4hhHqR3L8+ROPKuc5SkxFxvIOXZkL83ymbmq
/vWsDcer06bsQK7zN0EDGVxAVfvYxfnQuZTnI+QLpG4b7r9c61UxcxGaP4nAH11i
BI+84i+L6zq9dkeKSBhxK9LDiq17paCf3QSQVpS9Yz763+yxVyE/dOpZPkTpejE+
GNFvVpNpKawYj6lfFgXYMxu7mrxUj4aCb8WqM1h1dVCYxpW0KVR4czd7Ma1EhQoz
qnCEX1TEHrG4LMWT2FBzaCmgOg==
-----END CERTIFICATE-----
Generated at Thu Jun 11 21:55:03 2026 by rpki-client