Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a633162663a3a2f34382d3438203d3e203532303235.roa
File:                     326130353a646663343a633162663a3a2f34382d3438203d3e203532303235.roa (raw, json)
Hash identifier:          ulXlnZwopqN/naNY5oUi9CI7wbSkI0+JwypDoHDJw/I=
Subject key identifier:   CC:E1:0A:A2:2A:7B:CA:52:AC:6B:2F:5C:58:D6:43:2F:B4:B0:34:67
Certificate issuer:       /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial:       53FCAB1CB4CD52EDF4D11E16902483DC59ED6240
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a633162663a3a2f34382d3438203d3e203532303235.roa
Signing time:             Thu 04 Jun 2026 16:32:53 +0000
ROA not before:           Thu 04 Jun 2026 16:27:53 +0000
ROA not after:            Thu 03 Jun 2027 16:32:53 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:c1bf::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:fc:ab:1c:b4:cd:52:ed:f4:d1:1e:16:90:24:83:dc:59:ed:62:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
        Validity
            Not Before: Jun  4 16:27:53 2026 GMT
            Not After : Jun  3 16:32:53 2027 GMT
        Subject: CN=CCE10AA22A7BCA52AC6B2F5C58D6432FB4B03467
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:07:02:ee:8f:43:9e:36:44:46:4b:65:4f:99:
                    49:c4:9a:5d:e2:86:fc:4a:50:d4:29:69:e5:b3:b2:
                    f0:d2:0a:81:6c:da:52:86:aa:55:ec:19:f8:51:08:
                    26:c8:97:8c:01:5a:85:20:64:2d:f7:90:b8:49:3b:
                    08:b9:b8:8e:cc:d5:6d:49:39:b9:9a:be:94:5c:67:
                    b5:99:64:4c:9e:61:1e:76:a1:7f:03:00:ac:6b:17:
                    44:6f:7e:75:cb:9a:f4:8d:18:48:d7:d6:ef:a1:de:
                    39:d7:ca:1a:cd:90:6a:df:95:64:18:6f:c2:e6:0b:
                    69:2b:ff:a5:86:a5:27:6c:25:7c:6d:ea:4d:26:37:
                    e7:f3:dd:b2:c6:23:55:7e:8b:3a:be:26:09:a3:f4:
                    fe:2c:12:7b:67:22:2e:82:d3:52:f6:f1:55:51:bc:
                    ad:e6:3b:d6:19:1d:74:af:fc:e1:ec:66:96:0d:99:
                    e5:b3:9a:d5:c7:08:f5:af:93:07:ca:21:17:d9:f0:
                    44:44:93:b9:bf:41:68:77:cd:f1:6d:0d:57:a0:66:
                    9f:16:6d:9f:0c:b3:e8:07:00:f1:63:6d:0c:6b:09:
                    5d:b2:20:c5:0f:79:f2:8e:80:e1:8e:e3:14:b0:a6:
                    f1:97:bc:d9:d7:4d:6d:ed:c9:2f:f2:9d:b5:77:33:
                    f0:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:E1:0A:A2:2A:7B:CA:52:AC:6B:2F:5C:58:D6:43:2F:B4:B0:34:67
            X509v3 Authority Key Identifier:
                keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a633162663a3a2f34382d3438203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:c1bf::/48

    Signature Algorithm: sha256WithRSAEncryption
         58:d8:84:16:df:9b:26:14:4f:a8:dd:35:35:7c:f4:18:ab:98:
         f9:1e:48:ff:5a:bc:b1:ab:87:40:8d:08:ec:92:9f:de:31:ee:
         ed:fd:3f:00:c4:6a:5a:67:ae:f6:4c:07:69:bf:a7:55:39:1c:
         ef:fc:16:24:27:e6:85:58:09:bc:57:c1:ec:57:cc:c4:8c:64:
         9f:c1:82:89:9f:3c:cd:49:d3:cd:31:f6:d5:33:b4:cf:94:de:
         56:b1:7e:bd:96:34:a0:0e:ea:04:5a:8a:6a:d8:d4:02:aa:d8:
         a9:95:c4:e9:3a:11:07:35:ca:ef:b4:79:d7:3f:ee:6f:72:e5:
         b8:40:cf:ba:69:0c:23:99:d9:cb:2a:64:a6:4a:ef:21:5b:de:
         45:fe:fb:d6:80:6d:36:25:62:65:29:01:cf:a7:34:5d:26:96:
         70:50:32:0e:c8:ed:69:8e:f3:3c:a8:75:44:91:0b:40:a7:f7:
         96:8b:a2:26:89:72:b7:43:85:d3:40:2f:9e:cf:30:88:15:b4:
         40:a1:18:49:5e:b9:d9:2d:be:92:c6:f6:cf:eb:a7:61:b9:a1:
         91:d2:41:31:74:a3:57:4f:ab:e7:73:1c:0c:59:5e:45:ed:e5:
         43:32:6a:5f:ac:ed:bd:55:4f:ca:a9:94:c7:0e:44:5f:5b:69:
         79:f2:d1:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 21:57:16 2026 by rpki-client