Route Origin Authorization

$ rpki-client -vvvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a3a2f33322d3438203d3e203532303235.roa
File:                     326130353a646663343a3a2f33322d3438203d3e203532303235.roa (raw, json)
Hash identifier:          I9jiQBVIKunZquNad4zFu43buih2p2AZAlUDqZjv42Q=
Subject key identifier:   75:DA:DB:7B:AB:19:C2:E8:9F:D3:22:FF:CB:DE:F8:FE:CD:9A:4B:7F
Certificate issuer:       /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial:       5BAAE434AB52187E8FB7DF80CA2165A543F17B8F
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a3a2f33322d3438203d3e203532303235.roa
Signing time:             Mon 17 Aug 2026 00:25:56 +0000
ROA not before:           Mon 17 Aug 2026 00:20:56 +0000
ROA not after:            Mon 16 Aug 2027 00:25:56 +0000
asID:                     52025
IP address blocks:        2a05:dfc4::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Aug 2026 22:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:aa:e4:34:ab:52:18:7e:8f:b7:df:80:ca:21:65:a5:43:f1:7b:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
        Validity
            Not Before: Aug 17 00:20:56 2026 GMT
            Not After : Aug 16 00:25:56 2027 GMT
        Subject: CN=75DADB7BAB19C2E89FD322FFCBDEF8FECD9A4B7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:a4:46:18:66:2f:49:77:bf:d7:b7:b2:5d:95:
                    1e:88:9f:f7:a1:78:30:a0:79:c6:bf:3a:18:a0:d1:
                    9e:23:45:ba:17:45:02:ba:ce:9e:b7:10:10:7d:ff:
                    41:db:ba:44:d7:6c:8f:c6:2e:c6:b7:6c:00:37:bd:
                    a0:0e:23:44:ad:e4:e8:c1:ce:a0:60:27:d6:c1:9e:
                    95:bb:ea:eb:5e:40:74:47:67:6e:c3:40:5e:c4:c5:
                    c3:32:21:55:ef:81:4c:9f:0f:6e:b2:d2:b2:a8:27:
                    b0:50:ee:87:90:90:57:76:1c:8b:76:f2:39:47:e8:
                    0d:cc:bb:08:fb:36:8b:d7:e2:05:5a:ed:d0:95:d1:
                    04:83:68:de:f7:c3:ab:86:36:ef:44:b9:f1:c9:2b:
                    32:7f:af:e0:db:f8:b1:78:60:b1:13:fb:9c:da:24:
                    af:ba:c0:e8:41:02:69:a3:3d:4d:31:f3:76:e6:9a:
                    89:31:d6:c9:0d:a5:ab:c7:a4:ba:ad:60:af:e8:60:
                    80:7c:76:9c:f4:38:dc:95:47:05:50:86:1f:04:89:
                    14:06:9d:60:58:b2:e2:8a:fc:e2:19:74:9f:87:3a:
                    80:4c:9a:61:3e:e2:e1:36:06:e4:06:48:6a:01:05:
                    79:70:a5:0e:8b:7a:ef:1d:ef:1a:ed:b5:06:4b:06:
                    0c:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:DA:DB:7B:AB:19:C2:E8:9F:D3:22:FF:CB:DE:F8:FE:CD:9A:4B:7F
            X509v3 Authority Key Identifier:
                keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a3a2f33322d3438203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4::/32

    Signature Algorithm: sha256WithRSAEncryption
         31:3a:ed:9c:c4:fa:ef:c1:47:a2:5c:80:ff:d6:e4:69:d4:69:
         c3:c0:19:41:7d:0a:bf:cb:3a:da:30:f6:5c:a0:5d:6a:7c:6c:
         20:42:ba:fc:93:e4:1b:bc:21:f1:b9:fe:e6:8f:61:15:09:af:
         c6:ad:35:5e:07:18:52:72:d1:71:62:0e:b0:e4:d5:67:b1:30:
         25:99:47:63:92:2a:5b:43:98:1c:ab:4e:3c:92:4a:57:71:f7:
         9d:a8:d1:b8:34:6b:a5:8f:d3:c7:55:99:02:52:ee:53:ae:d0:
         9a:d0:14:41:39:1a:eb:1d:b8:7d:ad:9b:21:b6:a8:a5:6a:46:
         25:74:db:c2:ce:dd:e8:99:d3:21:83:4e:a6:2e:64:7d:58:b7:
         1f:d7:8d:3f:93:19:42:9b:70:b1:b9:72:e8:03:12:89:aa:23:
         32:7e:6e:7c:08:25:c1:fa:f4:0f:f6:1e:b0:f8:0a:35:eb:f6:
         58:48:fd:24:18:10:7f:d3:16:0f:30:c3:7b:3a:24:b0:5e:e3:
         c7:58:39:9e:96:32:96:a8:23:62:a8:c9:c3:5c:e7:19:1f:0f:
         21:db:9b:fd:78:54:72:8c:9b:a0:7c:1f:eb:eb:f5:c7:13:b6:
         7d:60:53:6f:6e:5b:f7:58:04:cf:4f:75:86:db:20:94:73:50:
         cc:11:e1:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 08:23:17 2026 by rpki-client