Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a6333323a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a6333323a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          DeHRbQZReN+HbPz5mz69y8rquJEqqvxsQKeYZl/c9iM=
Subject key identifier:   FB:A3:16:0B:DB:FB:85:87:56:4F:B4:9C:FC:A2:29:46:6F:7E:D4:8D
Certificate issuer:       /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial:       168E4D2D61908A828FE64465F52769CE98812FB8
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a6333323a3a2f34382d313238203d3e203532303235.roa
Signing time:             Thu 04 Jun 2026 16:32:38 +0000
ROA not before:           Thu 04 Jun 2026 16:27:38 +0000
ROA not after:            Thu 03 Jun 2027 16:32:38 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:c32::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:8e:4d:2d:61:90:8a:82:8f:e6:44:65:f5:27:69:ce:98:81:2f:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
        Validity
            Not Before: Jun  4 16:27:38 2026 GMT
            Not After : Jun  3 16:32:38 2027 GMT
        Subject: CN=FBA3160BDBFB8587564FB49CFCA229466F7ED48D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:a1:c7:c5:68:7e:28:47:50:ad:97:ca:a2:40:
                    6f:95:e2:5f:17:f9:d7:e9:07:3a:c2:3d:d6:5a:5d:
                    c7:d2:58:7d:dd:de:cf:c9:df:56:35:15:a4:4a:a6:
                    6c:09:f6:75:69:02:97:d0:21:df:cf:46:ee:dc:88:
                    9c:9f:c3:03:db:9a:e3:15:fc:33:71:95:55:81:1b:
                    dc:06:d2:64:3a:53:8d:d1:02:3a:d2:a5:ca:dc:20:
                    44:e3:1e:23:16:f8:44:ab:84:f7:ba:d9:a3:99:08:
                    3d:57:94:d7:88:9a:e4:9b:7f:e9:dc:1f:03:04:b4:
                    e7:2b:d5:7f:74:0b:01:b8:75:28:2d:ae:22:be:68:
                    13:bf:5a:c8:07:a1:0b:0b:10:65:aa:fe:c2:01:39:
                    a5:6c:a1:56:b3:4c:b8:0d:bd:dd:f4:00:2a:5b:19:
                    de:86:9f:6c:a3:0d:7c:5e:58:b0:2e:d2:88:20:fa:
                    0d:99:8e:5f:f6:03:49:9c:61:58:12:09:b5:ca:36:
                    00:f6:fe:e4:04:eb:23:f6:54:37:eb:ee:11:d1:bf:
                    2d:fe:b5:72:aa:54:ef:d1:56:ff:bb:fe:18:c7:f9:
                    fa:12:b0:63:0c:0b:6c:79:0e:7f:73:0e:9b:b5:8a:
                    66:87:9f:c0:7f:0f:18:72:19:18:56:07:d4:97:7a:
                    b7:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:A3:16:0B:DB:FB:85:87:56:4F:B4:9C:FC:A2:29:46:6F:7E:D4:8D
            X509v3 Authority Key Identifier:
                keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a6333323a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:c32::/48

    Signature Algorithm: sha256WithRSAEncryption
         3e:d3:17:92:ed:bd:19:d8:92:c6:32:3e:b8:02:9b:e1:97:0a:
         ee:ad:ee:de:16:45:b7:7d:f0:29:13:7b:50:14:bb:fe:15:5a:
         55:ca:16:b2:ad:2f:81:4c:73:f3:2b:d7:5f:6a:3f:68:96:22:
         cd:92:13:22:06:27:62:3f:c6:e0:42:9c:9d:e6:7d:6d:d1:ff:
         1d:86:56:18:a9:23:75:64:06:9f:07:02:7f:1c:9d:10:c1:c3:
         4d:86:4a:8e:42:83:8d:56:06:d3:a1:a8:03:3b:c7:9e:85:cf:
         f2:4f:4f:68:a8:46:75:7c:5b:45:aa:b0:60:db:3d:c6:1e:ce:
         5e:7d:93:37:40:30:8a:db:cd:fc:8e:22:6a:57:0d:dc:43:18:
         22:c7:a8:0b:2c:5e:c3:58:af:20:7b:d8:7d:30:6b:2c:d0:73:
         8d:ef:f8:97:51:c5:23:e8:76:33:19:98:12:cc:ad:5c:58:c7:
         57:6f:79:3a:6c:c5:88:90:59:ba:d4:fc:06:78:ee:66:65:be:
         c6:8a:f8:06:bf:13:1d:04:5f:eb:46:72:e1:53:4a:1b:7b:7d:
         ad:29:02:35:77:b3:6e:1d:19:ae:a3:92:05:28:82:8b:ae:03:
         d8:15:5d:4f:68:06:13:90:90:a4:a9:62:de:0c:7b:f2:70:96:
         3c:59:93:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 21:56:35 2026 by rpki-client