Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/4/323630323a666137653a31343a3a2f34382d313238203d3e203532303235.roa
File:                     323630323a666137653a31343a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          80cFgN3tidjhCrF4cYFYZrQ4/dxoGiVBRcJIo3y68WU=
Subject key identifier:   1C:F4:63:6C:EA:CB:E4:AF:98:DE:7A:06:BC:C7:9C:34:7F:61:8B:70
Certificate issuer:       /CN=edff5ee9c6c74e18ab3cd3244d38ecf6acc07c9835684cca08
Certificate serial:       4641C2B55F56EBF6CB1331B0C663EC1ABCD06A81
Authority key identifier: 26:29:24:3C:9E:8D:A7:B1:4D:0A:BD:25:66:0A:74:AC:40:81:C8:8B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c88f518-5118-4680-a0ba-d2cc67b27b07/edff5ee9c6c74e18ab3cd3244d38ecf6acc07c9835684cca08.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/4/323630323a666137653a31343a3a2f34382d313238203d3e203532303235.roa
Signing time:             Thu 19 Mar 2026 01:32:27 +0000
ROA not before:           Thu 19 Mar 2026 01:27:27 +0000
ROA not after:            Thu 18 Mar 2027 01:32:27 +0000
asID:                     52025
IP address blocks:        2602:fa7e:14::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/4/2629243C9E8DA7B14D0ABD25660A74AC4081C88B.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/4/2629243C9E8DA7B14D0ABD25660A74AC4081C88B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c88f518-5118-4680-a0ba-d2cc67b27b07/edff5ee9c6c74e18ab3cd3244d38ecf6acc07c9835684cca08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c88f518-5118-4680-a0ba-d2cc67b27b07/9c88f518-5118-4680-a0ba-d2cc67b27b07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c88f518-5118-4680-a0ba-d2cc67b27b07/9c88f518-5118-4680-a0ba-d2cc67b27b07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c88f518-5118-4680-a0ba-d2cc67b27b07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 26 Mar 2026 08:18:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:41:c2:b5:5f:56:eb:f6:cb:13:31:b0:c6:63:ec:1a:bc:d0:6a:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edff5ee9c6c74e18ab3cd3244d38ecf6acc07c9835684cca08
        Validity
            Not Before: Mar 19 01:27:27 2026 GMT
            Not After : Mar 18 01:32:27 2027 GMT
        Subject: CN=1CF4636CEACBE4AF98DE7A06BCC79C347F618B70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:71:1c:f9:6d:7d:51:88:20:f2:7c:ab:fb:9e:
                    d8:aa:e7:70:a4:95:5b:b8:c2:03:e6:ff:13:f5:f1:
                    cb:4f:ff:05:ea:16:74:50:8c:60:b4:27:40:e4:46:
                    fd:28:66:c2:53:03:ec:3d:db:44:b3:8b:94:70:7c:
                    12:30:f3:15:52:01:1f:d5:80:88:be:87:15:ea:2f:
                    9f:1b:44:2c:a0:54:7b:92:60:0f:42:26:a1:b3:4c:
                    9b:73:1d:db:ba:3c:41:97:4a:32:73:73:89:a0:1a:
                    b9:f6:b0:e9:e7:d9:74:bc:ea:64:26:cb:aa:21:fc:
                    e8:ae:f9:5b:90:59:28:10:8e:41:56:80:16:f8:09:
                    dc:a2:39:cf:35:1d:30:76:4b:9d:cf:a5:5c:b5:85:
                    e8:bb:22:5a:9b:eb:a7:a0:a4:d0:f1:5a:61:7b:75:
                    35:27:f5:28:14:bb:52:1d:49:e9:ca:d2:f1:7f:93:
                    79:e1:a2:ec:0d:2b:c1:6a:11:95:dd:ff:5a:6e:1f:
                    02:06:30:5d:1c:0d:64:17:28:b2:27:86:86:97:59:
                    1e:7a:9a:fc:c6:a4:ab:53:5f:2d:f4:b0:8e:1a:35:
                    19:06:68:29:3c:44:16:9a:46:4e:88:ab:dc:da:7f:
                    c0:71:f3:92:42:c4:84:b5:9b:68:f2:d7:77:e9:d7:
                    38:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:F4:63:6C:EA:CB:E4:AF:98:DE:7A:06:BC:C7:9C:34:7F:61:8B:70
            X509v3 Authority Key Identifier:
                keyid:26:29:24:3C:9E:8D:A7:B1:4D:0A:BD:25:66:0A:74:AC:40:81:C8:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/4/2629243C9E8DA7B14D0ABD25660A74AC4081C88B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c88f518-5118-4680-a0ba-d2cc67b27b07/edff5ee9c6c74e18ab3cd3244d38ecf6acc07c9835684cca08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/4/323630323a666137653a31343a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa7e:14::/48

    Signature Algorithm: sha256WithRSAEncryption
         11:3d:5b:cf:5e:17:aa:1b:4b:cc:fd:13:47:eb:5e:13:86:41:
         cd:cc:fc:a5:1d:27:05:66:95:cb:4b:88:5b:88:ac:fd:be:83:
         28:37:83:0a:62:55:90:73:7b:c2:de:39:11:1b:73:ed:47:c1:
         68:9c:8f:a9:05:3b:b9:d1:1b:0a:7e:fa:6c:54:75:13:77:9b:
         ef:4c:84:dd:98:b5:db:fc:83:18:28:6f:bb:36:ef:de:5c:32:
         b0:1b:ef:a0:3c:9a:fe:74:57:21:0a:33:c4:aa:63:67:79:d9:
         d1:59:23:14:54:a2:5c:2a:f9:26:f0:82:6f:e2:bd:1f:e4:3a:
         fc:ba:23:56:64:e3:f3:54:c1:cc:6e:31:37:3d:df:5c:d7:b4:
         89:c7:3c:93:22:da:8f:71:cd:04:38:b7:c4:2b:b5:8c:03:e7:
         80:99:92:b0:ff:cf:fb:f5:cc:3d:99:45:44:8a:da:7a:83:36:
         e8:a4:7f:0e:62:75:f0:5b:69:33:3d:b1:97:72:da:b9:71:e9:
         09:0b:9f:b0:9d:b6:db:c0:e6:c6:f3:92:d4:fd:65:70:7f:e3:
         7a:40:f9:c6:57:21:af:d2:5c:d4:f4:44:93:c5:bc:de:84:94:
         9a:83:e5:3e:a0:49:9b:2a:2f:58:94:0e:e5:98:10:30:f4:60:
         4d:fa:3d:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:24:48 2026 by rpki-client