Route Origin Authorization

$ rpki-client -vvvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a62643a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a62643a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          z3QiKhvwgju+hHo067/DuoV/6NxDdwrWssmkam9S/xQ=
Subject key identifier:   4A:E5:BB:22:6F:3C:F8:B5:6A:EF:A7:F5:A2:A9:0E:04:A5:99:72:E1
Certificate issuer:       /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial:       4CA65029715CBDE056FADF89885A5832B9D3A990
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a62643a3a2f34382d313238203d3e203532303235.roa
Signing time:             Sat 15 Aug 2026 23:21:37 +0000
ROA not before:           Sat 15 Aug 2026 23:16:37 +0000
ROA not after:            Sat 14 Aug 2027 23:21:37 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:bd::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Aug 2026 23:30:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:a6:50:29:71:5c:bd:e0:56:fa:df:89:88:5a:58:32:b9:d3:a9:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
        Validity
            Not Before: Aug 15 23:16:37 2026 GMT
            Not After : Aug 14 23:21:37 2027 GMT
        Subject: CN=4AE5BB226F3CF8B56AEFA7F5A2A90E04A59972E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:82:89:ec:66:90:fb:02:db:6d:3e:32:21:a7:
                    49:e2:4a:65:09:a7:e8:80:ad:63:27:fb:a8:88:05:
                    6f:43:16:de:86:fa:b7:c3:97:17:b5:66:f9:c5:f0:
                    9a:bd:c1:44:da:e3:30:fb:b6:34:e9:1d:9a:7f:ce:
                    6a:13:ac:62:c1:13:92:78:77:6b:bb:4a:58:6d:a9:
                    da:c0:56:40:ea:e8:26:e7:9f:98:fa:b7:3c:f6:30:
                    10:05:d8:bd:78:a4:e5:6c:21:51:d9:44:18:5b:19:
                    83:de:7a:73:34:f3:9e:4b:2b:e8:3d:bf:c7:15:5b:
                    44:02:ee:94:3a:2c:f2:05:de:be:6f:57:9c:e1:f1:
                    aa:25:c8:e1:a5:65:1d:37:21:a7:16:f8:10:36:5d:
                    e8:ac:c3:78:69:7e:d3:40:4c:1a:b3:dd:28:5a:7a:
                    27:21:36:e3:d1:76:73:74:81:5d:68:46:de:8a:01:
                    7c:9c:bc:d3:cd:b5:c8:92:c1:53:ab:4f:46:de:cb:
                    69:ee:2e:fc:14:ad:dd:a0:2b:42:42:7b:0c:c4:82:
                    79:02:0c:8d:9d:4e:2a:95:f9:59:91:4d:a3:cf:82:
                    47:de:3d:93:bc:e4:05:d5:14:81:df:ab:13:18:3c:
                    8c:87:72:51:22:fa:86:e9:8a:fb:2b:96:58:89:19:
                    a1:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:E5:BB:22:6F:3C:F8:B5:6A:EF:A7:F5:A2:A9:0E:04:A5:99:72:E1
            X509v3 Authority Key Identifier:
                keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a62643a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:bd::/48

    Signature Algorithm: sha256WithRSAEncryption
         73:d4:ea:22:d7:7b:9d:48:51:02:99:10:21:a3:74:aa:b5:e4:
         c4:65:8f:55:8f:ee:f3:d7:f9:cb:50:10:ab:0c:df:6a:8d:3b:
         e9:2f:1a:e5:4a:29:5a:b3:b7:f4:6c:aa:ca:ba:cc:b7:ee:32:
         5c:2b:de:75:13:02:d9:7a:28:e6:30:31:0d:54:f3:68:91:59:
         6b:fb:91:d7:3f:dc:ed:4e:ec:6d:ab:24:ec:fd:d5:09:e3:79:
         8e:7c:7f:a9:44:5a:a2:99:12:90:30:f1:38:7e:42:13:40:e1:
         b2:c2:bf:df:5f:8e:54:b4:65:b3:26:94:d3:b8:cf:7b:68:48:
         4d:8c:60:ee:7d:42:96:fb:e4:00:11:5d:d7:f6:29:20:11:86:
         77:21:7e:d8:83:db:d6:1c:92:4b:68:a1:38:6f:eb:6f:28:dd:
         37:3f:c6:88:9a:95:98:66:fe:95:a8:62:1d:80:e5:22:b0:a9:
         1f:17:40:55:dc:d7:1a:e7:15:43:53:b6:dc:48:cc:1b:d2:5a:
         6c:d6:a1:9e:7f:aa:67:e4:f3:b8:0e:49:21:26:4f:9b:b0:26:
         9f:f3:ff:4f:95:6d:cc:51:f1:f3:11:8b:f2:a8:3a:8c:c2:63:
         ef:0e:66:7c:8e:65:9d:17:25:6a:8c:76:0a:8a:db:45:14:b3:
         a2:0f:54:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 10:36:38 2026 by rpki-client