Route Origin Authorization

$ rpki-client -vvvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a6532633a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a6532633a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          rtkmiXMwRNWE2cLEIKsEFeiz/d0jnunqjrYmB5UqhG4=
Subject key identifier:   17:68:75:27:92:7A:13:1B:C3:3F:AA:5C:E2:2B:A9:14:7E:73:CC:4A
Certificate issuer:       /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial:       6E234E9F7F8475FEFEBE0138C9045A4FF3EB1C11
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a6532633a3a2f34382d313238203d3e203532303235.roa
Signing time:             Sat 15 Aug 2026 23:20:30 +0000
ROA not before:           Sat 15 Aug 2026 23:15:30 +0000
ROA not after:            Sat 14 Aug 2027 23:20:30 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:e2c::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Aug 2026 23:30:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:23:4e:9f:7f:84:75:fe:fe:be:01:38:c9:04:5a:4f:f3:eb:1c:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
        Validity
            Not Before: Aug 15 23:15:30 2026 GMT
            Not After : Aug 14 23:20:30 2027 GMT
        Subject: CN=17687527927A131BC33FAA5CE22BA9147E73CC4A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:5d:03:8c:5f:30:ff:36:f9:5a:4e:a6:31:df:
                    40:6c:2f:47:b1:7f:eb:9f:ec:5f:b4:9a:c9:ba:84:
                    1b:0d:b6:80:02:d1:8f:ac:98:00:e6:b2:06:cc:fc:
                    1a:19:4f:d6:7b:94:7c:32:b5:66:b1:5f:e6:c4:32:
                    c6:5c:5c:19:3e:4d:a5:41:8e:62:f1:df:4c:4c:79:
                    0e:b1:79:d1:60:9b:c4:e5:2a:ff:33:6c:03:2b:14:
                    ae:87:f2:2a:69:11:fd:4b:c3:d7:9d:ce:a5:75:5b:
                    a0:dc:c2:a4:66:53:e1:f5:bf:f5:88:17:66:b4:cd:
                    79:7d:60:83:5d:96:a9:16:5c:40:54:91:d0:b3:4f:
                    7f:7d:f9:8d:65:33:13:e4:da:60:04:7e:ef:d3:65:
                    ec:5f:2d:56:98:b3:05:c6:b4:f7:a4:a4:14:35:96:
                    5a:84:88:a8:fb:55:f6:5c:5b:16:b1:b7:0d:35:b0:
                    36:df:54:29:c7:0c:9e:da:0a:20:d5:9d:3a:cb:d5:
                    0c:b0:30:38:d7:9b:34:2a:af:2a:7d:b0:b2:a8:79:
                    2e:c8:1c:dc:12:88:37:ae:0f:1f:09:f5:c6:99:b3:
                    c4:e1:8f:17:1c:66:c2:cd:ee:72:83:41:57:2f:4a:
                    3c:c9:08:95:fe:d0:5b:e9:b2:2a:ee:04:aa:37:df:
                    9a:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:68:75:27:92:7A:13:1B:C3:3F:AA:5C:E2:2B:A9:14:7E:73:CC:4A
            X509v3 Authority Key Identifier:
                keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a6532633a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:e2c::/48

    Signature Algorithm: sha256WithRSAEncryption
         29:b9:ef:5b:21:59:25:d7:ef:3f:69:dd:f8:67:50:fd:63:00:
         ac:1e:ab:f5:34:57:3e:75:2e:aa:4a:78:9c:d4:5b:e5:86:8a:
         1c:04:11:3e:a7:3f:ec:a7:03:10:9e:12:63:82:05:ff:61:c2:
         c5:d0:2e:4e:3b:c5:41:7c:cd:5c:d3:a6:26:39:86:61:df:21:
         d9:fd:b7:d3:35:97:94:82:85:5c:bf:77:ad:a9:77:e4:c4:11:
         c5:c2:ba:c2:6d:00:19:34:e3:5c:23:ce:e9:43:03:d2:66:68:
         ab:2b:7c:79:96:ad:0e:4d:9b:ec:36:9e:14:5e:e9:20:79:56:
         0f:44:42:99:cb:49:46:f9:27:df:d9:20:b4:06:2b:60:cb:72:
         e6:81:9a:b0:fd:13:fe:84:ee:5b:6e:6a:3c:aa:36:ad:14:e3:
         37:97:6c:4b:82:cc:48:13:3c:71:fc:16:60:70:1b:c5:4c:3d:
         ee:0c:46:0f:da:af:23:a1:6e:45:c5:2b:25:c9:45:b5:6a:b2:
         f9:4f:aa:54:5a:af:1d:1d:a2:2e:ea:b2:f1:45:f6:e4:c0:01:
         b9:cd:a4:f2:74:3c:d4:73:d0:ae:15:81:59:4f:a2:fe:05:a7:
         fc:40:ca:cf:54:37:e4:6f:c0:7e:26:17:71:97:ed:8e:7f:bb:
         38:e3:ca:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 10:37:04 2026 by rpki-client