Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a3a2f33322d3332203d3e203532303235.roa
File:                     326130353a646663343a3a2f33322d3332203d3e203532303235.roa (raw, json)
Hash identifier:          JUl8wSpkcz3aLkOzHLocA6Jb5GCSxo0z8U0Gc4a/OV8=
Subject key identifier:   EC:5C:46:A5:AF:D8:BD:CA:DA:C6:22:B1:DF:6D:5B:B7:B2:BF:CA:35
Certificate issuer:       /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial:       66151B32B353DACD8A013DD08342D0B02F23E2E8
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a3a2f33322d3332203d3e203532303235.roa
Signing time:             Thu 04 Jun 2026 16:32:55 +0000
ROA not before:           Thu 04 Jun 2026 16:27:55 +0000
ROA not after:            Thu 03 Jun 2027 16:32:55 +0000
asID:                     52025
IP address blocks:        2a05:dfc4::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:15:1b:32:b3:53:da:cd:8a:01:3d:d0:83:42:d0:b0:2f:23:e2:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
        Validity
            Not Before: Jun  4 16:27:55 2026 GMT
            Not After : Jun  3 16:32:55 2027 GMT
        Subject: CN=EC5C46A5AFD8BDCADAC622B1DF6D5BB7B2BFCA35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:7d:b3:43:a2:64:11:63:98:e7:df:44:a1:4c:
                    65:1a:f8:66:77:e9:2c:65:f7:de:42:98:66:d8:0f:
                    73:96:a0:53:db:83:51:35:ce:35:a1:72:ac:c9:68:
                    7e:89:97:d2:21:12:09:ca:d0:44:e8:31:b8:45:d0:
                    09:81:43:27:8a:b9:64:c7:2a:13:fa:d7:f8:b8:6d:
                    a1:ad:cf:fd:77:98:72:9b:c6:c0:ae:fc:de:82:f5:
                    4b:df:71:23:da:b7:dc:fe:c6:1e:7b:04:f9:52:19:
                    48:32:41:bb:df:5b:60:78:15:59:b1:ed:88:e0:04:
                    2a:52:c6:f0:0a:0b:01:f7:f9:a6:09:89:ac:06:db:
                    16:73:7b:97:49:64:3a:e3:72:39:59:1c:1f:df:1c:
                    9c:75:f8:ff:a3:2d:ea:6f:5e:a7:55:72:79:0b:f0:
                    f7:10:6c:28:55:e0:61:4d:30:8c:e9:c7:16:b6:2d:
                    76:c4:3b:0b:35:c8:94:59:16:c1:ff:04:18:89:74:
                    10:20:b8:bb:80:24:0d:fe:c2:83:64:35:a2:f4:24:
                    17:89:18:19:9f:b7:55:e4:b6:c9:3c:e0:70:4d:74:
                    27:5d:c5:3b:5d:6a:00:5f:c8:dd:92:f5:38:3a:fb:
                    ab:be:53:e8:3b:e7:75:da:3b:9c:b4:2c:29:c0:0b:
                    c3:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:5C:46:A5:AF:D8:BD:CA:DA:C6:22:B1:DF:6D:5B:B7:B2:BF:CA:35
            X509v3 Authority Key Identifier:
                keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a3a2f33322d3332203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4::/32

    Signature Algorithm: sha256WithRSAEncryption
         74:d6:a4:4b:09:42:b4:25:a1:9d:94:b0:0f:ff:9a:a5:b1:bb:
         1e:6d:e6:af:a8:cb:08:cc:27:8c:33:95:fb:21:fd:83:3b:b4:
         fb:33:0a:3a:93:2c:c9:ec:20:35:24:c2:80:7b:d7:97:1c:98:
         3b:10:fa:24:d5:ba:c3:38:ac:db:44:d7:91:3e:f6:16:e1:ac:
         8c:81:81:03:5c:ae:4c:55:ef:bc:33:34:61:31:87:3a:e3:47:
         c0:74:bc:f4:d0:90:34:ef:25:c8:a7:6a:be:ff:70:a3:22:bf:
         a4:0b:19:86:7c:bb:f5:7b:00:7c:cb:fa:a2:c1:81:40:65:f6:
         05:b0:d3:14:50:f6:17:bb:26:89:d0:a7:a5:72:9c:71:55:ba:
         35:d2:7e:ea:e7:94:32:8c:04:87:28:78:33:dc:ac:93:0d:b5:
         18:54:29:3f:d1:09:b4:1c:fa:02:58:92:9c:1d:ba:bb:a3:6f:
         79:6a:96:81:17:da:f4:0f:ed:4a:39:c5:86:54:87:1e:cc:80:
         ba:b1:ed:43:f7:1e:22:19:31:ec:e3:21:72:d2:e6:a0:21:03:
         e9:5f:9b:da:e4:91:af:31:02:78:55:4f:8f:f5:98:ff:b0:0b:
         47:47:43:b8:c0:af:88:5a:6f:6c:5c:32:05:38:fe:02:de:e0:
         e7:84:31:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 21:55:49 2026 by rpki-client