Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a62643a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a62643a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          YmxkEED14Tce9+el1SNpbWV3GepoDyKsmaSo6f06AXM=
Subject key identifier:   CE:40:7A:7B:1C:1F:10:CD:2A:99:D5:8B:5C:B7:17:64:2C:7B:2B:11
Certificate issuer:       /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial:       2F3FD31078F69BE0AF9F8A64D19329DD2BAE099A
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a62643a3a2f34382d313238203d3e203532303235.roa
Signing time:             Thu 04 Jun 2026 16:33:06 +0000
ROA not before:           Thu 04 Jun 2026 16:28:06 +0000
ROA not after:            Thu 03 Jun 2027 16:33:06 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:bd::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:3f:d3:10:78:f6:9b:e0:af:9f:8a:64:d1:93:29:dd:2b:ae:09:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
        Validity
            Not Before: Jun  4 16:28:06 2026 GMT
            Not After : Jun  3 16:33:06 2027 GMT
        Subject: CN=CE407A7B1C1F10CD2A99D58B5CB717642C7B2B11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:51:60:43:5e:ba:f0:99:39:10:f2:39:66:84:
                    62:12:8c:07:f2:19:51:12:cf:c2:d1:bb:93:a3:9a:
                    57:9e:d3:3f:34:85:53:fd:60:ee:bf:73:33:c4:35:
                    d5:02:b5:e5:6f:1f:9a:26:83:bf:56:62:ce:9f:84:
                    50:5c:e0:cd:21:a1:f2:89:34:0d:4c:4b:db:ce:91:
                    f5:f7:54:cf:d8:8d:f5:40:fa:37:19:53:f3:67:90:
                    75:30:8c:d5:65:de:df:95:a0:58:87:8b:5d:47:4b:
                    1a:f1:6b:14:66:03:be:d5:ae:d3:2d:04:7e:85:e9:
                    4d:49:1a:76:d8:2a:33:68:8d:21:05:d5:18:0a:36:
                    4c:c6:48:c7:d6:f2:10:06:0e:0a:3d:4e:e6:e5:aa:
                    07:c5:3a:02:9b:48:2f:f5:ab:ab:bb:4a:a2:5d:ea:
                    f0:06:47:ce:2b:bc:ca:c9:10:54:4c:24:8e:bc:d0:
                    f3:78:70:dd:16:47:c3:d5:4b:b3:2a:5c:9f:e5:80:
                    66:23:02:97:2a:3c:05:60:da:d3:a4:5e:81:5f:06:
                    eb:b1:a7:70:14:93:c3:db:00:fb:cc:2a:34:05:c5:
                    93:d4:80:08:e5:d2:d9:7b:7e:0c:9e:bc:95:a7:ce:
                    30:1e:11:42:03:1e:e6:e8:26:45:ea:48:0a:03:d4:
                    6c:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:40:7A:7B:1C:1F:10:CD:2A:99:D5:8B:5C:B7:17:64:2C:7B:2B:11
            X509v3 Authority Key Identifier:
                keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a62643a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:bd::/48

    Signature Algorithm: sha256WithRSAEncryption
         34:0d:75:4f:0f:4f:15:ae:b2:ea:6e:e4:82:60:7d:df:33:df:
         e8:e8:19:23:fd:fe:ce:87:b5:5c:2a:01:c7:16:48:0e:d5:9d:
         55:34:40:25:17:88:e4:c7:6d:dd:54:a1:ca:fe:60:99:54:59:
         02:75:8e:b2:24:d1:e7:08:d4:35:71:76:7d:80:9a:7c:1a:80:
         c7:db:5e:ab:18:ac:2d:4d:81:6f:88:f5:f0:9c:9c:e2:3c:ea:
         1f:53:1d:27:9c:db:cd:cb:25:cd:33:8c:34:ea:fa:2a:b3:11:
         a1:ae:72:45:71:38:6b:6e:ba:e7:97:ca:b9:6e:aa:87:61:0f:
         07:ed:3e:25:76:76:c9:0f:ea:3e:46:8f:4e:37:48:68:b8:8f:
         9b:72:88:b7:4d:c8:90:a0:80:9a:88:0f:78:25:aa:a5:15:60:
         12:3c:9d:f9:ff:49:e1:4b:3d:60:4d:88:3e:39:00:71:6c:b3:
         66:b5:10:94:4f:bb:59:0e:05:7f:b1:06:7e:9f:af:00:6c:9f:
         ec:77:2d:86:e3:b1:79:5c:7c:73:24:9a:5e:31:d3:93:c1:b4:
         1c:7f:59:7c:5b:e3:83:11:9a:a5:49:1b:d1:17:5b:03:fb:cf:
         b7:2b:fe:2b:ab:0f:46:b4:f9:f0:2e:a3:48:c3:d3:5b:7c:f9:
         f7:63:db:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 21:55:50 2026 by rpki-client