Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a6165663a3a2f34382d3438203d3e203532303235.roa
File:                     326130353a646663343a6165663a3a2f34382d3438203d3e203532303235.roa (raw, json)
Hash identifier:          y7zGULHPFBrG/CCxWfQS0h6EFc+Q9yEsWic8jimKbdA=
Subject key identifier:   38:A6:A3:3F:AA:56:CE:FD:B5:6D:6E:F5:B2:9C:41:72:4E:F1:41:7F
Certificate issuer:       /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial:       3FD6C3CFFA2A2B8DF5857FF23E845028FA432C0B
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a6165663a3a2f34382d3438203d3e203532303235.roa
Signing time:             Thu 04 Jun 2026 16:32:44 +0000
ROA not before:           Thu 04 Jun 2026 16:27:44 +0000
ROA not after:            Thu 03 Jun 2027 16:32:44 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:aef::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:d6:c3:cf:fa:2a:2b:8d:f5:85:7f:f2:3e:84:50:28:fa:43:2c:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
        Validity
            Not Before: Jun  4 16:27:44 2026 GMT
            Not After : Jun  3 16:32:44 2027 GMT
        Subject: CN=38A6A33FAA56CEFDB56D6EF5B29C41724EF1417F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:85:d5:70:3e:14:fb:2d:0d:03:8e:03:40:0d:
                    5d:7f:1d:09:d1:5c:17:02:dd:48:17:b9:fc:7b:3b:
                    1c:b8:f9:f6:3f:fa:57:80:13:38:ee:43:63:74:82:
                    79:be:87:cc:9f:c7:ba:46:ee:e8:98:f9:b1:70:0f:
                    e5:3f:b5:73:50:f1:b0:0b:12:ac:f9:a5:7c:3a:47:
                    50:77:85:c2:77:99:ef:cd:e9:89:d6:17:04:b5:04:
                    d5:5d:ff:24:1e:df:25:c5:58:2e:e6:2b:e4:88:40:
                    b7:8a:62:29:fe:25:92:31:9e:a1:aa:59:f6:92:5a:
                    ed:43:c3:28:a0:e8:d6:db:13:b2:e4:c0:17:a7:bb:
                    a4:0f:e5:9a:6b:dc:7a:69:2a:0f:46:f8:8c:ac:ee:
                    2b:e5:67:fb:32:48:96:dd:cc:ea:20:1c:29:53:98:
                    82:a6:c7:5f:8d:7d:b4:e0:36:7d:99:34:c0:f2:c1:
                    3c:f9:63:35:54:c4:d3:ed:da:74:9b:52:9e:9d:1c:
                    bc:33:2e:96:d5:17:76:35:9f:72:8a:f8:56:e0:0d:
                    08:37:d2:1a:9f:7b:6c:c9:2c:f6:93:61:73:ee:ef:
                    90:29:8b:35:63:ab:03:0b:9b:5b:10:38:fa:fb:fb:
                    fe:cb:f8:5f:af:93:38:62:dd:03:17:46:73:37:1c:
                    0d:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:A6:A3:3F:AA:56:CE:FD:B5:6D:6E:F5:B2:9C:41:72:4E:F1:41:7F
            X509v3 Authority Key Identifier:
                keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a6165663a3a2f34382d3438203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:aef::/48

    Signature Algorithm: sha256WithRSAEncryption
         0a:19:37:bf:6f:cf:e2:7a:65:bc:ed:49:7b:f6:de:51:a7:4b:
         6b:77:75:ac:0c:62:12:e7:6b:f7:b0:e4:84:93:29:25:3c:82:
         b8:50:62:a6:fc:48:a0:62:47:db:0d:2c:6f:64:65:c8:1f:6a:
         46:f8:9f:b9:ca:ad:05:e0:fd:40:2a:ea:cf:d3:6b:4c:8d:61:
         71:53:02:0a:3e:3d:8d:85:e6:4e:e8:3b:c6:ba:eb:a7:fc:ee:
         3e:9d:9f:f6:5c:da:5e:ca:7d:60:5d:ca:34:da:18:c2:78:e5:
         be:00:c4:6b:3b:80:fe:e9:8c:51:aa:73:ed:2b:49:b7:1d:b9:
         a1:eb:a0:f8:9a:ad:b5:ce:7b:ef:19:79:5e:43:2e:94:63:97:
         0f:1f:32:f5:24:7e:ae:64:d6:05:d0:65:d0:68:5c:cb:9c:05:
         f9:2e:e3:71:84:f8:9a:07:d6:0e:f9:d5:8c:b6:e2:0f:c0:2f:
         a5:56:9d:5b:61:81:75:c2:9c:c3:2c:6a:9f:8c:b1:74:13:80:
         83:25:cc:81:56:80:f2:5e:71:87:d9:37:77:03:de:11:b2:76:
         b3:7f:2a:aa:42:83:1c:5f:2d:1b:3c:89:f4:88:72:63:9f:17:
         ca:44:37:cf:2d:3b:44:c4:99:b1:fd:0b:49:fe:f1:d7:31:87:
         66:cf:33:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 21:55:50 2026 by rpki-client