Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a6531303a3a2f34382d3438203d3e203532303235.roa
File:                     326130353a646663343a6531303a3a2f34382d3438203d3e203532303235.roa (raw, json)
Hash identifier:          UwOZ1wnJaU2T8N7ix5lmSVgRtz8kjVH46jN2Qh705C0=
Subject key identifier:   D6:EF:93:8B:41:61:FE:53:C2:3D:FF:4F:0D:CD:B8:E3:99:07:C0:80
Certificate issuer:       /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial:       75301385A51C374C3C9468E60E3F1232A4A95B7D
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a6531303a3a2f34382d3438203d3e203532303235.roa
Signing time:             Thu 04 Jun 2026 16:32:40 +0000
ROA not before:           Thu 04 Jun 2026 16:27:40 +0000
ROA not after:            Thu 03 Jun 2027 16:32:40 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:e10::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:30:13:85:a5:1c:37:4c:3c:94:68:e6:0e:3f:12:32:a4:a9:5b:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
        Validity
            Not Before: Jun  4 16:27:40 2026 GMT
            Not After : Jun  3 16:32:40 2027 GMT
        Subject: CN=D6EF938B4161FE53C23DFF4F0DCDB8E39907C080
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:4b:24:4d:d0:14:75:27:e1:e4:0e:17:c2:94:
                    d1:3f:00:6b:d1:ef:09:83:33:9b:27:43:51:40:8a:
                    27:5d:f2:88:b4:3e:ef:4c:86:51:db:78:fd:48:28:
                    73:b8:e2:ba:ca:15:f4:49:a4:31:b9:ba:b7:83:0c:
                    8a:02:79:ce:9e:e8:ee:81:b5:17:80:a8:65:c9:fe:
                    76:a8:1a:39:c9:32:e1:b1:71:72:ac:89:71:7c:3f:
                    a8:d3:ca:8c:3c:48:c3:d0:73:58:1e:76:58:fa:d8:
                    ac:c7:17:06:a3:63:70:52:77:06:39:28:99:4a:51:
                    11:7d:9c:19:dc:b9:89:ec:9f:06:f4:87:52:83:6e:
                    91:ce:eb:d7:e6:b8:5c:fd:05:51:95:f3:ed:77:bf:
                    29:3a:b0:cf:9e:34:74:d0:06:9e:9d:0a:60:71:aa:
                    0a:c9:ef:7b:b3:aa:c4:90:ad:99:8b:b6:65:3b:2b:
                    92:bc:88:d0:3e:f0:fc:24:56:9b:ed:a6:1d:5a:e9:
                    27:d2:67:39:f8:d3:7e:78:c3:1a:7a:c5:80:e9:0e:
                    2e:73:b4:fd:ca:d8:cf:a0:9c:fb:d4:63:ab:01:88:
                    10:6e:d6:8b:cf:33:65:8a:45:5e:e7:6a:a9:a1:e8:
                    6c:07:d6:ad:65:69:ef:25:c1:15:98:3d:5d:eb:e1:
                    1d:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:EF:93:8B:41:61:FE:53:C2:3D:FF:4F:0D:CD:B8:E3:99:07:C0:80
            X509v3 Authority Key Identifier:
                keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a6531303a3a2f34382d3438203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:e10::/48

    Signature Algorithm: sha256WithRSAEncryption
         24:40:34:d9:b0:f4:bb:a1:89:51:72:28:09:87:fc:72:78:25:
         be:77:4f:7f:2d:b2:8f:1a:35:3b:6c:5a:63:8c:14:c8:5f:ca:
         fd:78:11:7f:c8:c0:80:dc:b4:d7:84:00:d0:73:a8:15:e9:77:
         dc:d6:1d:0e:ff:c4:0e:b5:16:f1:41:2a:76:f7:10:67:45:61:
         d6:a4:84:3d:1a:6e:26:a7:3a:63:f7:33:78:63:90:d5:ec:08:
         8c:60:68:88:49:1b:bc:de:58:ed:31:dd:56:23:f3:37:e5:2f:
         15:19:ff:1a:ef:6f:9b:97:b4:dd:89:95:00:c6:f9:3e:67:59:
         de:80:4d:7e:e9:8d:ba:4b:18:ad:42:28:cb:7c:3c:8c:08:7f:
         a9:26:4b:da:63:17:f0:a2:53:25:6c:b1:54:8c:6a:8a:b2:8d:
         1f:16:bd:56:e1:cd:d3:e5:d2:28:12:53:ac:7c:70:32:ce:67:
         09:fc:d7:a6:b0:01:e3:d1:f8:aa:fb:5e:d2:59:7c:24:0e:ad:
         86:c9:14:2d:77:cf:c7:0d:69:48:a4:d3:e7:b6:df:39:65:d2:
         82:25:d1:83:4d:7d:30:ec:10:8f:b5:85:08:d7:ee:da:4e:70:
         5a:3f:79:06:95:23:3c:44:6a:c3:8d:f5:d5:87:cc:10:25:85:
         84:d2:48:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 21:56:35 2026 by rpki-client