Route Origin Authorization

$ rpki-client -vvvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/38352e3135352e3232372e302f32342d3332203d3e203532303235.roa
File:                     38352e3135352e3232372e302f32342d3332203d3e203532303235.roa (raw, json)
Hash identifier:          e/Obvm7f4gAID50sgDyj2CRASx4nxuAh2v56D2cjNeU=
Subject key identifier:   11:82:DA:39:5F:0E:BA:FF:D9:79:2F:56:3B:EE:F0:A3:25:9D:94:43
Certificate issuer:       /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial:       073E58ECB1995E9C86B0A06DF66A0BC88AD5A6BA
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/38352e3135352e3232372e302f32342d3332203d3e203532303235.roa
Signing time:             Sat 15 Aug 2026 23:11:12 +0000
ROA not before:           Sat 15 Aug 2026 23:06:12 +0000
ROA not after:            Sat 14 Aug 2027 23:11:12 +0000
asID:                     52025
IP address blocks:        85.155.227.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Aug 2026 23:30:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:3e:58:ec:b1:99:5e:9c:86:b0:a0:6d:f6:6a:0b:c8:8a:d5:a6:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
        Validity
            Not Before: Aug 15 23:06:12 2026 GMT
            Not After : Aug 14 23:11:12 2027 GMT
        Subject: CN=1182DA395F0EBAFFD9792F563BEEF0A3259D9443
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:b3:df:b4:79:53:0c:0a:cf:f9:2f:2b:7d:db:
                    56:36:17:a9:eb:d2:b5:96:c3:db:df:7f:2d:d5:6e:
                    e5:a8:dc:21:78:dd:5c:c7:08:ac:61:ef:a5:f7:63:
                    d2:24:1f:d1:5b:16:ea:e6:d3:aa:f6:db:44:82:eb:
                    05:28:07:94:80:bd:1a:69:b5:1c:6c:39:d7:b7:be:
                    0f:87:a4:c9:16:96:9d:5a:95:d4:fc:89:ad:4f:bb:
                    cf:1a:ea:a4:65:8b:4c:08:44:a9:6b:c2:f3:d0:d2:
                    09:34:17:e0:7d:2c:55:29:ab:aa:e3:d7:de:59:b9:
                    5c:90:af:de:e7:68:be:68:de:7c:ac:2e:5c:d2:aa:
                    b0:52:bc:fa:8b:71:9a:9d:d8:78:34:2f:fc:a4:50:
                    5d:60:34:f3:09:44:61:b2:c9:88:06:d3:f9:78:90:
                    16:20:42:5f:ef:a4:c9:f7:55:f6:ff:36:39:76:7a:
                    21:a2:04:b4:5a:82:d9:b9:bc:e4:db:34:d1:52:ed:
                    88:68:7c:6a:d9:b5:ee:c9:83:6c:2d:3e:76:4c:09:
                    a0:43:d7:44:37:b0:73:65:9d:8b:ac:5d:e9:57:7a:
                    f7:91:da:d4:7c:14:83:d2:73:e7:92:31:05:b0:78:
                    0f:76:f1:61:62:82:20:67:ca:43:ea:4f:92:c2:85:
                    88:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:82:DA:39:5F:0E:BA:FF:D9:79:2F:56:3B:EE:F0:A3:25:9D:94:43
            X509v3 Authority Key Identifier:
                keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/38352e3135352e3232372e302f32342d3332203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.155.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:e1:87:38:2d:88:8c:bb:bf:89:b4:dc:e1:c1:29:4a:0a:4c:
         12:aa:27:19:8a:04:8b:95:37:c6:e2:2f:58:aa:58:0b:f0:49:
         f3:58:eb:b7:1b:27:a8:36:7f:b5:13:9f:f9:60:28:8a:30:17:
         73:fa:2e:f4:8e:6e:f6:1f:30:cf:24:ce:07:3d:aa:1b:ac:f0:
         b5:96:09:dd:90:7a:a5:b5:c3:17:22:69:45:59:b1:5d:46:97:
         9c:b4:86:e8:46:a0:40:85:83:a6:23:36:a3:50:37:91:bf:3b:
         85:3a:bb:6b:81:de:59:87:75:fa:75:72:e7:87:11:c7:26:95:
         b7:12:94:ae:49:06:d4:94:0f:03:7d:22:30:fc:9c:fc:74:5d:
         5c:9f:99:98:b0:5b:ca:9f:af:81:69:8d:70:e2:7d:0e:5e:39:
         16:cb:c7:aa:5a:d8:7a:14:50:7f:57:8c:52:f8:5d:1a:25:73:
         b0:e8:a5:96:af:08:3f:ee:cc:d4:55:13:a6:0f:b9:51:b0:dd:
         db:e6:f6:f1:ff:25:df:3e:56:e9:83:73:41:ef:0e:83:4a:84:
         e0:5c:86:0b:38:7b:79:bf:32:76:1c:5d:92:0d:a8:f4:cc:5c:
         17:70:c0:74:c1:f1:b9:d5:31:f3:1d:b5:d2:b3:68:eb:ea:de:
         72:33:37:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 10:36:15 2026 by rpki-client