Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a6264663a3a2f34382d3438203d3e203532303235.roa
File:                     326130353a646663343a6264663a3a2f34382d3438203d3e203532303235.roa (raw, json)
Hash identifier:          KD346CZcPRg+LL4sNEBx+Giv7a3pHSD6vRl4QweAMZs=
Subject key identifier:   D5:13:C8:E1:C0:F9:45:74:70:55:EB:49:43:07:8E:46:25:F1:23:C9
Certificate issuer:       /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial:       258B493B858E2AEAF6131D8F165ACB9CF04CF490
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a6264663a3a2f34382d3438203d3e203532303235.roa
Signing time:             Thu 04 Jun 2026 16:32:58 +0000
ROA not before:           Thu 04 Jun 2026 16:27:58 +0000
ROA not after:            Thu 03 Jun 2027 16:32:58 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:bdf::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:8b:49:3b:85:8e:2a:ea:f6:13:1d:8f:16:5a:cb:9c:f0:4c:f4:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
        Validity
            Not Before: Jun  4 16:27:58 2026 GMT
            Not After : Jun  3 16:32:58 2027 GMT
        Subject: CN=D513C8E1C0F945747055EB4943078E4625F123C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:06:56:10:f0:5c:8f:96:fa:ac:b8:be:54:89:
                    a3:ca:72:1c:83:f2:02:04:e7:6a:55:b6:95:b4:dd:
                    a6:e3:42:1c:7b:80:60:28:86:5b:f6:47:32:e7:7f:
                    a1:70:87:d3:56:9e:f2:99:f6:5e:29:64:17:d7:58:
                    02:24:9d:34:49:31:19:c6:29:16:4c:41:16:f8:08:
                    b9:a3:bc:d0:4f:03:a4:e1:ad:fe:79:ed:7e:74:5d:
                    c9:03:90:19:1c:2d:d7:0d:49:19:01:2b:56:b5:71:
                    71:e9:ae:70:6b:ba:a8:53:e7:2b:4a:0b:0b:c0:04:
                    0b:6e:0f:22:6a:49:7a:50:4a:36:f4:cb:e5:37:f1:
                    ba:be:bc:f9:8e:d4:24:55:c9:63:2d:c2:43:e5:02:
                    77:b1:02:2d:7b:ea:9b:38:b6:c4:52:76:cd:20:04:
                    15:76:55:bf:c1:15:0b:e9:3a:ce:03:53:db:ce:55:
                    26:b9:ba:c3:9d:d8:16:af:cd:fd:06:d9:77:26:85:
                    e5:cc:31:45:fb:92:4e:bf:92:69:76:40:5b:08:ac:
                    5c:b5:c9:57:3a:5e:53:6b:b2:83:77:3e:a4:4f:3a:
                    46:eb:a2:46:9f:03:7a:bc:2e:3b:70:48:f5:ef:6b:
                    3a:28:12:46:19:d9:d7:a6:64:b5:08:4b:dc:10:8a:
                    11:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:13:C8:E1:C0:F9:45:74:70:55:EB:49:43:07:8E:46:25:F1:23:C9
            X509v3 Authority Key Identifier:
                keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a6264663a3a2f34382d3438203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:bdf::/48

    Signature Algorithm: sha256WithRSAEncryption
         42:ab:dd:30:53:b2:84:1a:24:3e:d5:37:ac:71:ba:ff:77:33:
         25:33:5b:fc:37:72:ef:a7:d7:ca:e5:b4:26:01:3e:28:e5:ca:
         0f:8c:e0:75:e7:dc:b1:69:6e:b4:c2:d5:0c:d6:41:5a:72:7b:
         9e:3a:2b:30:ba:71:dd:f9:4e:29:a9:65:1a:df:a6:1e:83:e8:
         cb:c7:c0:89:0f:6f:f5:db:73:b2:bf:1b:f7:a8:29:a4:0a:36:
         12:ef:d7:15:77:21:0c:eb:cd:3b:98:23:7c:99:34:50:42:10:
         65:ba:57:20:32:eb:d7:84:c1:f1:c5:58:f3:bd:c4:67:a2:30:
         80:32:87:1f:36:ad:ca:d9:14:9e:cd:42:e9:bf:64:9d:48:e6:
         6a:b0:20:66:fa:1f:31:ad:dd:64:6d:65:62:e2:22:49:48:ad:
         24:87:57:11:e8:6e:e8:a3:92:0f:de:2b:46:e3:98:54:d4:7c:
         2b:b5:6c:88:db:d2:82:f7:2d:4b:d6:ce:9c:be:12:6b:d0:41:
         a2:40:d9:82:ab:d3:93:ed:7e:4a:64:04:43:d7:63:1a:a6:e3:
         95:11:ed:8e:1a:6a:de:0a:67:d4:df:34:15:95:8f:bc:f8:8d:
         12:b4:ce:3a:b2:a6:ba:d3:f3:31:17:45:3a:3f:63:ad:0d:bc:
         19:98:23:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 21:55:00 2026 by rpki-client