Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/7/3139322e36372e33322e302f32332d3332203d3e203532303235.roa
File:                     3139322e36372e33322e302f32332d3332203d3e203532303235.roa (raw, json)
Hash identifier:          rEWVSPjKEKKT6VKu2wxUKDWYC20ONMHdn1HOMKXabcM=
Subject key identifier:   E8:F5:1C:A5:EC:E9:C1:8E:1B:CA:DD:84:4F:31:99:4D:C5:E4:46:BE
Certificate issuer:       /CN=716ED138312A679CA1B1F88B3EF7301163F16356
Certificate serial:       4E2807A4758565F1B178575078859D964387D407
Authority key identifier: 71:6E:D1:38:31:2A:67:9C:A1:B1:F8:8B:3E:F7:30:11:63:F1:63:56
Authority info access:    rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/716ED138312A679CA1B1F88B3EF7301163F16356.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/7/3139322e36372e33322e302f32332d3332203d3e203532303235.roa
Signing time:             Wed 29 Apr 2026 16:32:32 +0000
ROA not before:           Wed 29 Apr 2026 16:27:32 +0000
ROA not after:            Wed 28 Apr 2027 16:32:32 +0000
asID:                     52025
IP address blocks:        192.67.32.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/7/716ED138312A679CA1B1F88B3EF7301163F16356.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/7/716ED138312A679CA1B1F88B3EF7301163F16356.mft
                          rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/716ED138312A679CA1B1F88B3EF7301163F16356.cer
                          rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.crl
                          rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 13 May 2026 09:19:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:28:07:a4:75:85:65:f1:b1:78:57:50:78:85:9d:96:43:87:d4:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=716ED138312A679CA1B1F88B3EF7301163F16356
        Validity
            Not Before: Apr 29 16:27:32 2026 GMT
            Not After : Apr 28 16:32:32 2027 GMT
        Subject: CN=E8F51CA5ECE9C18E1BCADD844F31994DC5E446BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:05:0a:1f:44:4f:8a:40:6b:38:44:5d:35:17:
                    61:4a:86:aa:6e:c1:1d:51:46:9b:bb:ef:38:cb:34:
                    02:5a:07:ca:43:91:6e:4e:88:36:66:70:0c:8a:aa:
                    35:76:58:ff:fd:23:69:6a:71:04:0e:c7:e9:7e:ed:
                    68:51:63:47:68:af:ee:9c:5e:de:04:cc:0c:2f:47:
                    ce:d8:ad:66:4a:71:68:8c:53:4e:90:80:8b:8e:25:
                    fb:80:98:09:38:e9:46:3e:6e:5e:2f:4a:29:f0:3c:
                    09:40:af:2c:90:78:c7:d0:7f:4a:33:8c:bd:90:cc:
                    51:74:08:19:cd:78:b7:51:4a:67:7d:2d:c9:77:4b:
                    53:26:f7:60:60:74:3b:5c:77:c5:29:6f:86:f8:ae:
                    27:e9:be:4c:56:6b:2f:fb:b2:7f:0d:55:af:8c:93:
                    72:07:6d:fa:08:f2:96:aa:cd:ad:93:8b:7f:9d:ae:
                    ba:28:49:a8:01:b6:02:63:f3:b3:af:bc:92:44:ab:
                    ec:e7:13:51:cf:c0:70:10:f2:c7:12:7c:5b:4d:b1:
                    7e:1d:6a:37:a9:cb:7f:c6:5c:05:fa:b5:dc:f5:e1:
                    8a:ef:73:46:0d:12:13:99:8f:cb:50:19:87:be:03:
                    74:e5:5a:8a:89:6c:4b:59:a2:3f:91:38:4e:b4:8a:
                    28:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:F5:1C:A5:EC:E9:C1:8E:1B:CA:DD:84:4F:31:99:4D:C5:E4:46:BE
            X509v3 Authority Key Identifier:
                keyid:71:6E:D1:38:31:2A:67:9C:A1:B1:F8:8B:3E:F7:30:11:63:F1:63:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/7/716ED138312A679CA1B1F88B3EF7301163F16356.crl

            Authority Information Access:
                CA Issuers - URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/716ED138312A679CA1B1F88B3EF7301163F16356.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/7/3139322e36372e33322e302f32332d3332203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.67.32.0/23

    Signature Algorithm: sha256WithRSAEncryption
         27:2b:ed:0a:fb:a4:21:3f:90:a7:ab:4d:10:ae:16:98:e6:d5:
         39:a0:b7:7e:17:0b:e0:bc:ec:29:eb:d5:c4:e1:ae:c4:85:0b:
         71:7b:84:fc:61:72:c9:77:ed:c1:53:1c:82:8c:2b:1f:96:c8:
         e1:50:a7:39:a7:54:35:fa:60:0b:03:0f:8b:1e:99:6b:be:52:
         e3:75:0b:9d:6b:3f:38:43:3e:9d:36:03:c4:54:96:f7:96:4e:
         d4:eb:29:3b:f2:09:75:42:93:f0:4c:59:74:b8:b1:9e:98:5a:
         8d:cb:0f:0a:63:6b:34:70:27:49:8d:f6:23:6a:b5:72:41:a2:
         fe:a8:a1:90:3f:0e:51:70:0c:68:ff:7f:fe:6f:85:be:72:c5:
         00:f1:3a:19:57:29:87:39:68:86:9a:b6:73:27:b3:1d:58:e1:
         be:5a:02:75:68:f5:03:30:8f:8e:5d:11:88:05:89:46:ac:e8:
         86:42:c6:82:0a:82:2a:f4:46:c8:ad:4c:0d:c0:e2:0a:6e:a6:
         0a:7e:3e:a8:06:4d:bc:4d:4c:2b:21:27:0d:a8:79:af:41:64:
         67:60:b5:b6:40:5d:6b:3f:ad:25:d9:6c:0a:38:b9:09:31:99:
         47:29:9b:b4:90:a1:8b:a5:cc:ea:0f:d4:65:4d:28:38:17:41:
         de:2b:41:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:52:52 2026 by rpki-client