Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a3963663a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a3963663a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          0ilQzFfnQJ87eC5rZ4+DRMiRKpEUxW+jV4AKDw4qnRU=
Subject key identifier:   5D:9D:34:C0:A0:1D:97:C1:D9:5B:3C:2C:20:B5:76:3E:23:17:1D:65
Certificate issuer:       /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial:       1CD2558A7559BD5ED4CB76B21071C1083EF4A2A4
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a3963663a3a2f34382d313238203d3e203532303235.roa
Signing time:             Thu 04 Jun 2026 16:32:52 +0000
ROA not before:           Thu 04 Jun 2026 16:27:52 +0000
ROA not after:            Thu 03 Jun 2027 16:32:52 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:9cf::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:d2:55:8a:75:59:bd:5e:d4:cb:76:b2:10:71:c1:08:3e:f4:a2:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
        Validity
            Not Before: Jun  4 16:27:52 2026 GMT
            Not After : Jun  3 16:32:52 2027 GMT
        Subject: CN=5D9D34C0A01D97C1D95B3C2C20B5763E23171D65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:51:f4:42:65:d8:b6:2f:ea:54:74:4f:cd:02:
                    60:5d:0c:9d:fa:12:58:fb:10:38:ee:1f:42:14:db:
                    e4:67:27:7f:cc:65:d0:82:14:1b:ad:30:e4:1b:0f:
                    d6:99:3e:88:2b:7d:c2:ee:e5:a7:2e:6d:a8:e5:ec:
                    54:94:07:95:40:50:e4:41:e5:49:65:f8:cd:06:60:
                    bb:e5:bd:03:70:ac:d7:2a:f0:58:ea:d1:68:14:62:
                    5d:54:11:fb:d0:13:4e:fc:3f:dc:ed:77:1e:5b:9d:
                    a7:e6:63:3b:75:9f:80:ed:43:c4:af:19:fe:18:d8:
                    71:7b:ff:07:b8:ee:b6:42:f3:1a:01:45:a5:ba:eb:
                    bd:60:42:dc:ff:ed:60:d9:45:37:a2:d8:74:05:bb:
                    81:97:cd:4e:a1:c5:2c:d5:70:e5:1a:54:9a:d5:74:
                    11:c7:d6:04:60:a3:a1:b9:b2:db:17:84:e0:52:8d:
                    6d:0d:52:6a:0e:2d:4d:b6:f1:23:02:bb:6e:16:35:
                    a2:46:53:7a:b8:bb:d0:5f:ae:61:2f:aa:17:82:51:
                    43:6c:18:ca:d1:10:ab:54:67:fe:f6:1a:42:3e:7e:
                    51:6f:cb:f7:67:aa:ba:68:bf:36:bf:98:95:3e:3f:
                    f6:54:7e:40:30:ad:da:9e:53:4d:68:10:4f:a1:0c:
                    35:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:9D:34:C0:A0:1D:97:C1:D9:5B:3C:2C:20:B5:76:3E:23:17:1D:65
            X509v3 Authority Key Identifier:
                keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a3963663a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:9cf::/48

    Signature Algorithm: sha256WithRSAEncryption
         6c:8d:d8:93:9d:ce:e0:dd:ad:0b:95:54:9f:35:6f:0f:57:4e:
         a2:20:60:68:8b:19:03:99:63:aa:47:fd:73:5e:83:97:6d:f8:
         89:2f:24:69:1a:97:3b:f4:6a:3f:59:ed:32:e6:4f:03:5c:77:
         53:b1:ce:fc:5a:18:3a:2a:8c:79:59:97:07:4f:8d:4b:dc:f8:
         05:d5:a0:d4:13:1e:8c:8a:d1:95:b3:e7:29:5b:8e:72:32:a4:
         79:dc:0e:c5:03:cd:7f:3d:d7:ea:4b:34:b3:0d:cd:87:80:19:
         48:40:06:ef:3f:f1:e0:e9:61:9e:cd:0a:8c:bb:62:ba:af:77:
         8d:13:7f:19:93:35:ec:67:b3:0e:9c:ae:8a:0d:d6:13:d4:cd:
         89:13:bd:2e:21:ec:a6:d5:33:d8:04:e1:db:ab:c0:ab:3b:10:
         80:86:ed:e7:99:fb:67:97:e7:2d:2c:6a:52:5e:a1:f9:2a:82:
         35:c0:32:20:c9:43:b9:68:93:00:f8:1f:f3:37:7b:35:2e:27:
         dd:3d:2f:d5:cb:9b:25:25:00:10:aa:9b:5d:f7:03:e4:93:2a:
         c5:a2:10:a8:3b:1c:fb:e7:9c:bc:28:70:8b:66:a5:56:04:8f:
         27:e7:6c:da:b5:79:90:50:de:85:63:a8:7c:1a:dc:71:4c:61:
         80:43:71:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 21:56:25 2026 by rpki-client