Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a3a2f34382d3438203d3e203532303235.roa
File:                     326130353a646663343a3a2f34382d3438203d3e203532303235.roa (raw, json)
Hash identifier:          khNqrmjkHSPUnsZP7YmDVUJwzrCFuH0wG6Wn0aJCxVc=
Subject key identifier:   3F:0A:62:40:BA:B3:E0:2C:4C:16:21:77:7F:22:28:25:C4:59:20:EF
Certificate issuer:       /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial:       3A6CECD46786F53984DA8274362F2C91E9A991AD
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a3a2f34382d3438203d3e203532303235.roa
Signing time:             Thu 04 Jun 2026 16:32:57 +0000
ROA not before:           Thu 04 Jun 2026 16:27:57 +0000
ROA not after:            Thu 03 Jun 2027 16:32:57 +0000
asID:                     52025
IP address blocks:        2a05:dfc4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:6c:ec:d4:67:86:f5:39:84:da:82:74:36:2f:2c:91:e9:a9:91:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
        Validity
            Not Before: Jun  4 16:27:57 2026 GMT
            Not After : Jun  3 16:32:57 2027 GMT
        Subject: CN=3F0A6240BAB3E02C4C1621777F222825C45920EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c9:90:cd:ef:1d:5b:6f:a2:d4:dd:3e:6d:98:
                    21:e1:c1:07:e6:a1:2c:c2:00:b6:9a:d8:bc:4c:a8:
                    f0:0f:63:c0:5a:58:6a:91:bb:47:97:86:3a:8e:c2:
                    b8:19:0a:d6:1e:fa:5d:25:df:3d:55:ae:7e:16:79:
                    d6:70:d0:74:4a:ae:5b:b8:d1:d3:3d:e6:61:23:4e:
                    62:f0:69:86:36:68:0a:e2:48:76:8b:25:92:aa:6e:
                    20:a9:89:0e:f6:ac:31:99:e6:57:71:94:80:ee:4c:
                    22:1e:14:aa:13:aa:5a:05:a2:25:10:ca:2e:21:d6:
                    c8:61:81:0c:58:af:c6:ba:2f:f9:c1:9c:bb:fc:b3:
                    ed:0c:19:d0:7b:95:7b:59:53:22:41:48:2d:2d:af:
                    62:eb:b6:ef:d0:df:81:a2:a2:20:72:b8:6a:a8:01:
                    10:cf:71:94:f3:c9:6f:01:10:b2:70:39:f5:61:7e:
                    93:73:fb:22:a4:f4:b3:fe:66:30:2e:58:47:07:6f:
                    0e:15:41:38:7d:61:d7:93:eb:9c:12:a0:d7:08:ea:
                    67:a5:c1:ab:15:d8:6d:d5:f5:84:62:c3:67:86:80:
                    a1:1b:b7:eb:0d:0e:a8:95:cb:7d:eb:9e:ce:87:88:
                    a4:7e:be:cb:1e:59:47:d4:72:c4:41:13:ee:3b:65:
                    2b:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:0A:62:40:BA:B3:E0:2C:4C:16:21:77:7F:22:28:25:C4:59:20:EF
            X509v3 Authority Key Identifier:
                keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a3a2f34382d3438203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4::/48

    Signature Algorithm: sha256WithRSAEncryption
         7e:b4:60:f1:39:d2:66:02:05:3f:3a:05:83:c5:3f:46:73:81:
         9e:af:21:65:0f:e3:f6:c5:d4:e6:7a:26:d3:53:6e:81:cf:e5:
         78:20:eb:09:a9:a5:1f:45:40:38:db:16:f1:3a:07:1f:fa:e1:
         68:87:3e:4b:b7:c0:da:30:16:cb:70:00:cd:f2:35:8c:c5:0f:
         f3:82:3d:e7:43:ec:ad:f8:ee:28:c3:4f:9c:5d:7f:20:7a:c5:
         a6:0e:c3:46:7c:d6:78:59:0e:ef:77:d8:29:11:3e:2b:46:35:
         18:a0:1a:a7:39:ed:e7:2f:5a:29:87:8e:3c:44:4c:dd:3f:e2:
         00:f0:53:27:aa:97:ec:b6:94:21:71:c8:7a:c5:35:64:90:3d:
         df:c7:2c:b9:1e:b5:49:c8:49:c3:45:e8:40:d5:13:dd:ef:81:
         c5:67:74:b2:0e:a4:46:6e:7b:07:76:29:d6:95:df:fe:63:a7:
         05:9b:d3:f0:ac:98:e6:3b:53:c9:12:dc:56:5d:55:f1:27:40:
         91:b9:e5:3c:02:91:2d:f9:27:24:c4:f5:1f:6e:8d:72:2a:34:
         24:90:2c:a6:f4:ba:33:a5:e9:7e:63:2d:31:b3:7f:47:73:e7:
         db:ff:b1:06:e8:98:c5:98:f4:39:93:99:50:4b:a2:4e:cc:ba:
         58:db:ac:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgIUOmzs1GeG9TmE2oJ0Ni8skempka0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjYzODZGQUJFQTM5MjEwQjY2NUE2QTU1QUU1REE2NkJF
Njc0MTU5NzAeFw0yNjA2MDQxNjI3NTdaFw0yNzA2MDMxNjMyNTdaMDMxMTAvBgNV
BAMTKDNGMEE2MjQwQkFCM0UwMkM0QzE2MjE3NzdGMjIyODI1QzQ1OTIwRUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEyZDN7x1bb6LU3T5tmCHhwQfm
oSzCALaa2LxMqPAPY8BaWGqRu0eXhjqOwrgZCtYe+l0l3z1Vrn4WedZw0HRKrlu4
0dM95mEjTmLwaYY2aAriSHaLJZKqbiCpiQ72rDGZ5ldxlIDuTCIeFKoTqloFoiUQ
yi4h1shhgQxYr8a6L/nBnLv8s+0MGdB7lXtZUyJBSC0tr2Lrtu/Q34GioiByuGqo
ARDPcZTzyW8BELJwOfVhfpNz+yKk9LP+ZjAuWEcHbw4VQTh9YdeT65wSoNcI6mel
wasV2G3V9YRiw2eGgKEbt+sNDqiVy33rns6HiKR+vsseWUfUcsRBE+47ZSuLAgMB
AAGjggIgMIICHDAdBgNVHQ4EFgQUPwpiQLqz4CxMFiF3fyIoJcRZIO8wHwYDVR0j
BBgwFoAU9jhvq+o5IQtmWmpVrl2ma+Z0FZcwDgYDVR0PAQH/BAQDAgeAMG4GA1Ud
HwRnMGUwY6BhoF+GXXJzeW5jOi8vcnBraS0wMS5wZHhuZXQudWsvcmVwby9wYXJh
ZG94bmV0d29ya3MvOC9GNjM4NkZBQkVBMzkyMTBCNjY1QTZBNTVBRTVEQTY2QkU2
NzQxNTk3LmNybDCBkwYIKwYBBQUHAQEEgYYwgYMwgYAGCCsGAQUFBzAChnRyc3lu
YzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYz
ZTAxODU3NTVjOTFiZTNmOWQvNy9GNjM4NkZBQkVBMzkyMTBCNjY1QTZBNTVBRTVE
QTY2QkU2NzQxNTk3LmNlcjCBhQYIKwYBBQUHAQsEeTB3MHUGCCsGAQUFBzALhmly
c3luYzovL3Jwa2ktMDEucGR4bmV0LnVrL3JlcG8vcGFyYWRveG5ldHdvcmtzLzgv
MzI2MTMwMzUzYTY0NjY2MzM0M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzUzMjMw
MzIzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB
/wQTMBEwDwQCAAIwCQMHACoF38QAADANBgkqhkiG9w0BAQsFAAOCAQEAfrRg8TnS
ZgIFPzoFg8U/RnOBnq8hZQ/j9sXU5nom01Nugc/leCDrCamlH0VAONsW8ToHH/rh
aIc+S7fA2jAWy3AAzfI1jMUP84I950PsrfjuKMNPnF1/IHrFpg7DRnzWeFkO73fY
KRE+K0Y1GKAapznt5y9aKYeOPERM3T/iAPBTJ6qX7LaUIXHIesU1ZJA938csuR61
SchJw0XoQNUT3e+BxWd0sg6kRm57B3Yp1pXf/mOnBZvT8KyY5jtTyRLcVl1V8SdA
kbnlPAKRLfknJMT1H26Ncio0JJAspvS6M6XpfmMtMbN/R3Pn2/+xBuiYxZj0OZOZ
UEuiTsy6WNus/g==
-----END CERTIFICATE-----
Generated at Thu Jun 11 21:53:43 2026 by rpki-client