Route Origin Authorization

$ rpki-client -vvvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a6331623a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a6331623a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          5rs2as4pNIPukwA2zwgKI/TbKuJUKbKkxA3rI3Lx5fs=
Subject key identifier:   65:17:79:3F:9C:0C:3F:CD:98:67:C8:C3:3A:A3:6C:CC:64:E5:D0:4F
Certificate issuer:       /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial:       2058811007A81A650BC1029600E29480CA413534
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a6331623a3a2f34382d313238203d3e203532303235.roa
Signing time:             Sat 15 Aug 2026 23:17:55 +0000
ROA not before:           Sat 15 Aug 2026 23:12:55 +0000
ROA not after:            Sat 14 Aug 2027 23:17:55 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:c1b::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Aug 2026 22:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:58:81:10:07:a8:1a:65:0b:c1:02:96:00:e2:94:80:ca:41:35:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
        Validity
            Not Before: Aug 15 23:12:55 2026 GMT
            Not After : Aug 14 23:17:55 2027 GMT
        Subject: CN=6517793F9C0C3FCD9867C8C33AA36CCC64E5D04F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:03:cb:4f:76:9d:12:f2:6e:20:e1:bb:95:04:
                    c8:1c:8e:bd:02:70:fd:10:89:ca:5b:c1:06:29:03:
                    50:70:15:d1:d5:90:39:25:06:f2:55:fd:12:3b:ed:
                    3a:fe:be:eb:53:9c:2c:43:40:39:d3:1f:ab:0a:7c:
                    01:d7:a8:9a:41:61:47:a6:3b:6f:6e:4f:75:38:db:
                    f9:0e:37:f6:8f:a3:26:8c:cc:34:be:5e:0b:f0:3b:
                    89:8e:94:c2:90:7c:2f:38:f6:0d:2a:92:78:cb:16:
                    ed:01:ad:8c:63:bc:e6:d4:eb:6d:b5:a7:3b:74:13:
                    15:49:7e:d9:ed:65:a2:19:41:b5:c2:0f:34:90:99:
                    f0:89:61:22:7f:6e:b9:33:71:fc:d6:84:59:ca:48:
                    81:0b:c7:39:04:f4:11:be:98:15:0b:e6:48:a0:7e:
                    9e:3a:26:84:97:fb:b6:47:22:bf:69:56:98:1c:70:
                    07:b3:21:99:fe:55:36:fc:26:27:3f:12:eb:7e:b0:
                    b9:0e:6d:b3:60:da:76:a0:6f:b8:b6:28:83:48:5d:
                    27:6a:61:c5:70:39:aa:1f:17:48:f2:82:4b:21:de:
                    56:fe:ee:99:fa:f9:fd:9e:70:53:13:17:95:8d:61:
                    23:4d:9b:ca:ab:0e:ed:70:20:10:0e:b8:62:43:02:
                    c4:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:17:79:3F:9C:0C:3F:CD:98:67:C8:C3:3A:A3:6C:CC:64:E5:D0:4F
            X509v3 Authority Key Identifier:
                keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a6331623a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:c1b::/48

    Signature Algorithm: sha256WithRSAEncryption
         48:13:2f:81:1c:6a:6c:85:9d:2f:39:52:79:4d:e4:eb:35:6b:
         07:1b:f6:bf:c9:fd:af:f4:40:e7:51:99:f1:2d:8c:6e:c7:6a:
         ba:c7:b7:5f:41:18:5c:73:cd:54:eb:4a:7c:d1:27:ba:71:29:
         e6:82:85:47:59:cb:28:e8:9d:fe:a9:7f:44:17:cc:fc:45:6e:
         d8:78:91:7e:fa:d3:33:0b:d5:3f:15:3e:48:4b:c2:a7:16:ff:
         a1:21:72:70:ae:ba:0f:c5:90:fb:03:b3:26:f2:d3:b3:5f:9c:
         52:ba:f4:e2:cb:d9:2c:ea:92:e5:d9:cc:b4:0b:80:ed:7f:8a:
         e9:9e:38:a3:df:1a:89:e2:4a:65:08:e0:1e:54:74:25:d1:8f:
         4d:2f:2c:9d:ad:18:de:f5:14:c0:68:6c:4d:9f:1b:91:ce:82:
         06:fc:f0:91:91:46:25:24:2d:f4:37:7d:7e:df:54:e3:eb:cd:
         62:d8:a6:6d:de:f7:77:f3:e4:81:f8:b2:61:11:8b:fd:3d:1c:
         ac:7d:2b:d4:3b:f6:07:3f:5a:54:9b:5f:2b:17:c1:18:2d:0a:
         24:78:28:97:14:0d:b0:a1:fa:2a:79:90:c2:6f:47:2c:7a:c1:
         db:8c:b7:f4:ac:0f:d2:76:1c:a4:bf:8f:db:51:5a:ab:bb:1c:
         6e:ec:9a:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 08:22:03 2026 by rpki-client