Route Origin Authorization

$ rpki-client -vvvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a64663a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a64663a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          HrpH9YTsNlNw7S8JXCffBcvxIWCVqb6ekW2DLMgJ6SA=
Subject key identifier:   E0:77:8C:7B:A6:D3:A6:B5:8D:7C:7C:0E:40:E9:E9:F0:C6:C8:B8:9B
Certificate issuer:       /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial:       3C8B8458991402150B56BDBE626983A03FFE4997
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a64663a3a2f34382d313238203d3e203532303235.roa
Signing time:             Sat 15 Aug 2026 23:20:45 +0000
ROA not before:           Sat 15 Aug 2026 23:15:45 +0000
ROA not after:            Sat 14 Aug 2027 23:20:45 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:df::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Aug 2026 23:30:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:8b:84:58:99:14:02:15:0b:56:bd:be:62:69:83:a0:3f:fe:49:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
        Validity
            Not Before: Aug 15 23:15:45 2026 GMT
            Not After : Aug 14 23:20:45 2027 GMT
        Subject: CN=E0778C7BA6D3A6B58D7C7C0E40E9E9F0C6C8B89B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:3f:7a:53:cc:c9:83:81:7f:31:fc:a0:47:57:
                    77:a2:93:42:c0:bf:4e:95:07:14:b6:94:90:fc:7f:
                    77:c7:6e:5a:4c:35:ed:7e:af:a5:33:30:a1:91:af:
                    03:ff:fe:52:21:74:37:fb:7a:68:27:d6:ac:51:f2:
                    fa:bd:46:a7:1c:48:ba:54:f3:d0:65:69:4d:51:ae:
                    c2:2c:6c:90:a1:c2:74:6f:de:b9:64:99:38:73:67:
                    9c:da:ad:62:83:ed:82:c1:b2:01:39:b1:b4:ee:5d:
                    f8:a5:f5:68:58:f0:64:43:66:ae:51:be:5f:ca:b4:
                    e2:e6:44:17:62:74:1e:a0:d7:fc:d2:6f:03:f6:0a:
                    e3:0d:39:07:16:56:a8:77:94:52:15:15:a3:dd:9a:
                    86:90:1a:2d:86:80:9e:9c:d3:97:7b:16:d4:46:b2:
                    9e:ed:b8:70:45:27:8e:7e:4f:8d:b9:5e:1c:11:83:
                    98:e6:05:82:de:8f:3a:58:80:70:77:b1:5d:7b:53:
                    d5:8f:e9:8e:31:25:db:c6:0e:ae:02:e5:b2:d0:bc:
                    aa:42:18:6c:14:75:c2:a3:c8:55:d6:e0:9d:2f:84:
                    71:9a:d8:d1:59:27:92:87:c6:2e:3d:c7:5e:ef:e9:
                    a0:9d:82:09:fe:f2:44:17:47:d4:3b:57:0f:fa:fa:
                    84:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:77:8C:7B:A6:D3:A6:B5:8D:7C:7C:0E:40:E9:E9:F0:C6:C8:B8:9B
            X509v3 Authority Key Identifier:
                keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a64663a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:df::/48

    Signature Algorithm: sha256WithRSAEncryption
         87:1e:d9:07:11:ac:a8:9d:16:f0:f8:d4:63:cb:9f:bf:b9:68:
         b9:a3:86:ff:69:4a:74:0c:40:14:f5:76:99:7a:a8:bb:a0:56:
         dc:c9:13:25:35:bc:46:bb:6f:f8:3a:28:51:5c:cd:36:39:65:
         a4:f5:4b:2e:52:5a:9d:43:14:cf:ad:71:b9:c8:da:82:d4:4c:
         94:f5:ee:b3:d2:d3:ad:f0:0b:30:85:9d:24:9b:7c:df:96:3f:
         f2:a5:1f:57:e5:fb:0f:24:d3:6a:a3:b9:cd:5f:ae:bf:ca:3a:
         8c:e8:f3:0b:7a:66:c3:28:0f:eb:e4:36:b0:12:99:cc:ac:ad:
         9e:7a:1f:3a:22:a9:67:be:53:cf:a8:81:35:a7:73:14:58:66:
         9a:e4:6b:6f:5e:65:ee:d4:b9:e2:c2:04:f9:54:57:3a:d1:b4:
         20:eb:5b:50:77:b6:4b:69:0d:56:88:ae:f5:57:30:3e:bc:6b:
         86:96:17:16:a9:eb:91:1e:67:e1:c5:12:ae:73:02:32:69:85:
         99:ea:81:91:d2:0b:26:2a:25:c8:dd:3f:c0:99:71:71:17:97:
         79:f7:96:e2:72:84:76:be:b5:4e:e7:0f:7a:51:21:e1:e2:d8:
         e2:bb:87:e2:df:be:7d:86:5a:29:16:93:cc:fc:c4:b8:50:f8:
         5d:ed:7e:fc
-----BEGIN CERTIFICATE-----
MIIFHzCCBAegAwIBAgIUPIuEWJkUAhULVr2+YmmDoD/+SZcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjYzODZGQUJFQTM5MjEwQjY2NUE2QTU1QUU1REE2NkJF
Njc0MTU5NzAeFw0yNjA4MTUyMzE1NDVaFw0yNzA4MTQyMzIwNDVaMDMxMTAvBgNV
BAMTKEUwNzc4QzdCQTZEM0E2QjU4RDdDN0MwRTQwRTlFOUYwQzZDOEI4OUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCKP3pTzMmDgX8x/KBHV3eik0LA
v06VBxS2lJD8f3fHblpMNe1+r6UzMKGRrwP//lIhdDf7emgn1qxR8vq9RqccSLpU
89BlaU1RrsIsbJChwnRv3rlkmThzZ5zarWKD7YLBsgE5sbTuXfil9WhY8GRDZq5R
vl/KtOLmRBdidB6g1/zSbwP2CuMNOQcWVqh3lFIVFaPdmoaQGi2GgJ6c05d7FtRG
sp7tuHBFJ45+T425XhwRg5jmBYLejzpYgHB3sV17U9WP6Y4xJdvGDq4C5bLQvKpC
GGwUdcKjyFXW4J0vhHGa2NFZJ5KHxi49x17v6aCdggn+8kQXR9Q7Vw/6+oRpAgMB
AAGjggIpMIICJTAdBgNVHQ4EFgQU4HeMe6bTprWNfHwOQOnp8MbIuJswHwYDVR0j
BBgwFoAU9jhvq+o5IQtmWmpVrl2ma+Z0FZcwDgYDVR0PAQH/BAQDAgeAMG4GA1Ud
HwRnMGUwY6BhoF+GXXJzeW5jOi8vcnBraS0wMS5wZHhuZXQudWsvcmVwby9wYXJh
ZG94bmV0d29ya3MvOC9GNjM4NkZBQkVBMzkyMTBCNjY1QTZBNTVBRTVEQTY2QkU2
NzQxNTk3LmNybDCBkwYIKwYBBQUHAQEEgYYwgYMwgYAGCCsGAQUFBzAChnRyc3lu
YzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYz
ZTAxODU3NTVjOTFiZTNmOWQvNy9GNjM4NkZBQkVBMzkyMTBCNjY1QTZBNTVBRTVE
QTY2QkU2NzQxNTk3LmNlcjCBjgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4Zx
cnN5bmM6Ly9ycGtpLTAxLnBkeG5ldC51ay9yZXBvL3BhcmFkb3huZXR3b3Jrcy84
LzMyNjEzMDM1M2E2NDY2NjMzNDNhNjQ2NjNhM2EyZjM0MzgyZDMxMzIzODIwM2Qz
ZTIwMzUzMjMwMzIzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggr
BgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF38QA3zANBgkqhkiG9w0BAQsFAAOC
AQEAhx7ZBxGsqJ0W8PjUY8ufv7louaOG/2lKdAxAFPV2mXqou6BW3MkTJTW8Rrtv
+DooUVzNNjllpPVLLlJanUMUz61xucjagtRMlPXus9LTrfALMIWdJJt835Y/8qUf
V+X7DyTTaqO5zV+uv8o6jOjzC3pmwygP6+Q2sBKZzKytnnofOiKpZ75Tz6iBNadz
FFhmmuRrb15l7tS54sIE+VRXOtG0IOtbUHe2S2kNVoiu9VcwPrxrhpYXFqnrkR5n
4cUSrnMCMmmFmeqBkdILJiolyN0/wJlxcReXefeW4nKEdr61TucPelEh4eLY4ruH
4t++fYZaKRaTzPzEuFD4Xe1+/A==
-----END CERTIFICATE-----
Generated at Mon Aug 24 10:36:18 2026 by rpki-client