Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a61653a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a61653a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          Xd4dwFRiy+41k9HP4Re0Cy+TbNeAUUcw67ObM4AiMYE=
Subject key identifier:   A2:52:B4:42:B3:0F:A8:31:F8:72:D3:79:61:77:EB:4D:65:98:A5:8A
Certificate issuer:       /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial:       25FECB5F88A1396AE142CF50C477AC0E2C426B81
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a61653a3a2f34382d313238203d3e203532303235.roa
Signing time:             Thu 04 Jun 2026 16:33:03 +0000
ROA not before:           Thu 04 Jun 2026 16:28:03 +0000
ROA not after:            Thu 03 Jun 2027 16:33:03 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:ae::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:fe:cb:5f:88:a1:39:6a:e1:42:cf:50:c4:77:ac:0e:2c:42:6b:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
        Validity
            Not Before: Jun  4 16:28:03 2026 GMT
            Not After : Jun  3 16:33:03 2027 GMT
        Subject: CN=A252B442B30FA831F872D3796177EB4D6598A58A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:3f:8c:57:77:ef:0f:a9:12:38:05:d7:c0:91:
                    39:cd:0d:f4:43:00:ce:ae:0f:a0:21:8b:45:e4:89:
                    1c:db:a5:34:04:78:8b:3c:d4:50:40:64:64:48:f0:
                    25:e2:be:ad:d1:c3:e8:73:b7:a7:55:7b:c7:f0:1d:
                    f3:54:b6:9e:7d:9b:1b:07:0b:dc:bd:05:06:75:6a:
                    61:d8:d8:ef:bd:42:09:f8:f4:e1:e0:ed:e7:7a:fa:
                    bc:85:01:7d:64:7b:3d:fd:62:8c:8c:9f:cb:f6:af:
                    55:4c:ce:85:28:24:a0:7e:1e:2d:3a:96:78:f3:70:
                    0f:bb:3d:6e:bd:28:92:40:2f:4b:be:42:58:27:72:
                    3b:59:41:c6:26:0e:f6:a8:c3:88:c7:a3:3b:d3:89:
                    00:28:6c:f6:4f:5d:ab:37:f5:c0:8a:d9:54:7e:be:
                    ce:d8:d1:de:28:a5:f1:1c:32:fc:08:79:b1:d3:db:
                    8c:c2:20:56:f9:3b:af:90:7e:ab:e2:3f:14:e6:8e:
                    ba:e9:9d:3b:d9:86:9b:f1:22:94:48:89:96:6a:8c:
                    c4:f1:63:93:1c:a9:39:93:90:f6:73:71:40:06:94:
                    18:5a:6d:d2:32:73:49:7b:3c:80:8c:4a:2a:b9:be:
                    03:4b:a3:32:b8:4b:ce:ac:2c:e3:9b:27:2d:76:b3:
                    46:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:52:B4:42:B3:0F:A8:31:F8:72:D3:79:61:77:EB:4D:65:98:A5:8A
            X509v3 Authority Key Identifier:
                keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a61653a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:ae::/48

    Signature Algorithm: sha256WithRSAEncryption
         49:ed:60:5c:7e:6e:f1:04:d4:fd:94:cd:6d:83:57:1f:84:31:
         4f:d6:87:23:3f:a6:74:5b:1a:32:86:d5:24:a9:8f:71:76:cd:
         7f:28:7d:82:40:eb:e8:a7:94:4e:10:b7:ce:c9:0b:63:80:2f:
         47:8d:c5:17:2c:c6:96:e6:4e:33:e5:95:bb:24:53:ac:d7:ef:
         56:33:a2:cc:41:ce:6f:1b:d3:a5:2b:4f:c2:65:43:0e:bf:f7:
         7d:d0:9a:7f:dd:38:4f:f9:de:07:8e:d6:1a:f5:00:8a:95:81:
         36:90:26:2d:15:73:30:ef:7e:b8:6b:32:17:78:23:a2:30:d1:
         ff:de:0c:89:7b:9c:dc:cb:1b:95:19:5b:f9:0f:6f:41:19:ff:
         b0:f8:46:cb:b2:57:4b:01:96:ac:42:03:88:4d:21:c7:d2:f3:
         ff:2a:17:6b:2e:0e:d2:d5:30:6a:4e:7d:c2:00:69:c8:2f:4e:
         c9:8d:91:5f:28:82:55:39:cd:ab:db:2d:a4:ee:b2:7a:51:30:
         81:47:4e:a9:7f:75:b2:69:07:9f:80:b0:97:1c:f3:af:a2:b3:
         2b:75:0a:5a:e2:43:c0:d1:81:71:a1:30:60:45:28:5a:bd:61:
         89:6c:da:55:a1:6f:c1:0d:af:88:6d:d1:03:a2:20:ba:a0:b0:
         94:69:5d:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 21:55:01 2026 by rpki-client