Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/5/323630323a666261313a3961303a3a2f34342d3438203d3e203532303235.roa
File:                     323630323a666261313a3961303a3a2f34342d3438203d3e203532303235.roa (raw, json)
Hash identifier:          4o/nPw/Cqb8+ecDNuvU/hK0tRyAzDHP/eZSNe5HUa/4=
Subject key identifier:   3F:35:8B:CE:C1:13:CC:5F:34:D1:29:23:17:C4:B0:27:D0:8C:34:FF
Certificate issuer:       /CN=5A96B8985A8E62FB1094248D3B5B4A3BB24369EC
Certificate serial:       7EB4A8CDBB91E462FE97042EE73F467EEC47C514
Authority key identifier: 5A:96:B8:98:5A:8E:62:FB:10:94:24:8D:3B:5B:4A:3B:B2:43:69:EC
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/5A96B8985A8E62FB1094248D3B5B4A3BB24369EC.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/5/323630323a666261313a3961303a3a2f34342d3438203d3e203532303235.roa
Signing time:             Sun 28 Jun 2026 00:33:44 +0000
ROA not before:           Sun 28 Jun 2026 00:28:44 +0000
ROA not after:            Sun 27 Jun 2027 00:33:44 +0000
asID:                     52025
IP address blocks:        2602:fba1:9a0::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/5/5A96B8985A8E62FB1094248D3B5B4A3BB24369EC.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/5/5A96B8985A8E62FB1094248D3B5B4A3BB24369EC.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/5A96B8985A8E62FB1094248D3B5B4A3BB24369EC.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/6BEC1AED6508BB07511B01B177551792DAEB2C90.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/6BEC1AED6508BB07511B01B177551792DAEB2C90.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/c13035cd-c46d-421c-b9e0-e6d4dd336d21.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/c13035cd-c46d-421c-b9e0-e6d4dd336d21.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 03:21:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:b4:a8:cd:bb:91:e4:62:fe:97:04:2e:e7:3f:46:7e:ec:47:c5:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A96B8985A8E62FB1094248D3B5B4A3BB24369EC
        Validity
            Not Before: Jun 28 00:28:44 2026 GMT
            Not After : Jun 27 00:33:44 2027 GMT
        Subject: CN=3F358BCEC113CC5F34D1292317C4B027D08C34FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ea:fc:99:ea:63:8e:95:2f:89:31:6f:d8:42:
                    8d:ea:92:3e:f5:4c:9e:49:35:1b:2f:ee:9b:79:26:
                    0b:1f:ea:bb:b3:b0:8c:07:b8:61:0b:f3:4f:97:6a:
                    37:19:09:ce:a3:e8:a8:ce:64:b5:93:48:75:70:67:
                    e6:84:82:bc:a2:aa:bc:99:92:c5:60:26:b9:a2:3a:
                    2d:13:d0:4d:8f:0e:b0:cf:48:1b:f2:e4:77:85:c1:
                    53:ad:08:fe:f3:16:49:e5:1e:68:ec:8b:43:6b:ef:
                    73:ca:98:d3:78:3b:e9:48:f8:3d:c1:0f:2e:e0:c5:
                    fb:6b:2a:67:d0:63:3c:91:de:74:df:d0:db:d6:d8:
                    03:35:52:27:9d:40:43:8a:10:d6:7c:6f:d4:82:29:
                    a7:04:17:b5:15:dd:cc:35:08:2e:ec:78:4c:63:5c:
                    e4:1e:7e:be:be:6d:18:1a:58:73:e4:e9:f5:cb:3e:
                    77:55:cb:5b:9a:db:bf:62:47:c8:e4:6d:c1:52:06:
                    2a:bb:e5:f4:77:98:5f:19:0b:cf:54:19:d8:64:d8:
                    f3:00:1d:f2:11:c8:ad:a4:d6:aa:42:b7:88:5d:67:
                    15:a8:5d:3f:8c:9e:a6:91:25:45:70:b0:49:78:8f:
                    ca:c0:76:3e:71:44:72:af:df:93:05:80:8f:e7:1f:
                    53:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:35:8B:CE:C1:13:CC:5F:34:D1:29:23:17:C4:B0:27:D0:8C:34:FF
            X509v3 Authority Key Identifier:
                keyid:5A:96:B8:98:5A:8E:62:FB:10:94:24:8D:3B:5B:4A:3B:B2:43:69:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/5/5A96B8985A8E62FB1094248D3B5B4A3BB24369EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/5A96B8985A8E62FB1094248D3B5B4A3BB24369EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/5/323630323a666261313a3961303a3a2f34342d3438203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fba1:9a0::/44

    Signature Algorithm: sha256WithRSAEncryption
         27:3b:bc:bc:5f:5d:ee:15:0f:2a:0d:2a:4a:7d:d3:bf:fb:50:
         42:fa:27:c7:03:a8:26:72:d9:4e:30:88:04:2b:49:a4:3f:37:
         56:d4:6c:ac:61:87:40:8d:ef:65:6a:7b:12:1b:c9:6c:f4:7c:
         2f:c1:60:38:42:00:43:b4:2c:2e:dd:1e:28:9e:d1:d2:08:5e:
         c4:81:3e:fd:bd:e6:1f:45:03:2b:a4:ce:23:5e:38:1f:f2:4d:
         30:eb:27:4c:af:b6:e2:28:24:93:21:b4:08:64:16:bc:4b:fc:
         0a:92:21:81:a1:3a:ea:5a:4d:5d:67:a8:74:7f:4a:ad:da:12:
         29:c0:e8:d7:aa:53:24:1c:d4:ea:85:e9:ed:09:9a:d6:97:ae:
         d1:74:b3:d7:16:38:91:37:f8:45:0b:81:93:9d:f2:43:ed:ca:
         93:82:c0:8a:07:91:cc:b3:5d:51:e3:51:b1:12:90:c2:87:16:
         a5:72:5b:e8:3e:c4:6f:c8:e3:fb:8e:ec:f4:29:d4:ce:6f:ef:
         a2:8d:39:41:f1:c1:96:46:4f:f0:b7:b1:16:ab:de:41:8a:12:
         63:a6:08:e7:57:99:1d:e6:87:ed:ee:eb:74:d0:0a:2f:5e:9c:
         2b:c8:63:1b:d7:73:de:73:79:48:ab:39:5b:a6:55:22:9f:e3:
         5d:b1:9e:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:10:50 2026 by rpki-client