Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a3533343a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a3533343a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          KGTd0Y2EpZjg9b2qj93w9tVohuNFphVp/TUVJp6Mmn8=
Subject key identifier:   DA:5E:03:9A:F7:19:05:32:1E:E9:38:34:72:24:0A:E2:5B:8F:6E:F2
Certificate issuer:       /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial:       EFC23090E1A1D6C05D5DE6791518131A8FC9F8
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a3533343a3a2f34382d313238203d3e203532303235.roa
Signing time:             Tue 10 Mar 2026 22:34:48 +0000
ROA not before:           Tue 10 Mar 2026 22:29:48 +0000
ROA not after:            Tue 09 Mar 2027 22:34:48 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:534::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 08:11:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            ef:c2:30:90:e1:a1:d6:c0:5d:5d:e6:79:15:18:13:1a:8f:c9:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
        Validity
            Not Before: Mar 10 22:29:48 2026 GMT
            Not After : Mar  9 22:34:48 2027 GMT
        Subject: CN=DA5E039AF71905321EE9383472240AE25B8F6EF2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:da:64:96:91:57:55:27:6c:4e:07:8c:ca:7a:
                    95:28:b5:58:88:a0:a4:21:99:f3:22:ec:9c:9f:31:
                    25:5e:77:bc:7b:bd:2c:94:7c:fc:3d:7f:8d:e4:f8:
                    73:70:54:f0:f0:d7:27:db:5a:da:95:e8:d0:d8:bc:
                    56:37:d3:32:a2:f9:ba:89:38:35:ef:03:c4:17:b3:
                    61:b8:e7:3f:7d:24:86:cf:49:9f:03:e5:c5:28:04:
                    af:49:26:78:6d:b7:5c:f9:a2:d2:ca:09:de:c0:e4:
                    43:17:42:21:0f:a4:71:d9:fe:a3:63:2a:a7:1c:46:
                    86:0b:86:c6:1e:d6:7e:03:1b:54:60:40:54:07:a4:
                    a7:1a:19:53:7e:e2:a8:a4:6e:4e:52:3a:89:8f:0c:
                    7f:da:5b:1d:41:31:91:c7:0f:ca:ff:8a:6c:53:26:
                    45:73:b7:2d:e9:64:9c:49:35:93:8b:52:eb:b8:f2:
                    28:ed:a3:b5:df:f3:a7:62:16:63:6d:cd:7e:3b:db:
                    65:cb:ec:33:97:39:ef:4e:d9:1a:72:d7:6a:41:e8:
                    b7:c8:a8:eb:b9:54:c1:71:8e:9e:08:0b:03:5b:44:
                    3f:03:a9:d3:dd:85:de:22:89:ed:04:7f:13:c1:17:
                    ba:2c:b2:41:52:06:1f:5c:1b:da:a5:52:14:90:c0:
                    11:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:5E:03:9A:F7:19:05:32:1E:E9:38:34:72:24:0A:E2:5B:8F:6E:F2
            X509v3 Authority Key Identifier:
                keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a3533343a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:534::/48

    Signature Algorithm: sha256WithRSAEncryption
         1f:31:ea:dc:cd:be:66:65:e2:76:f1:57:5a:41:1a:0a:32:b1:
         bf:0f:d9:e6:df:e9:11:83:a8:3b:2a:70:1c:09:a5:90:b0:19:
         ff:5f:94:ba:e8:47:48:1a:ad:60:8f:d4:0e:da:0a:1c:bd:e9:
         3e:5c:b1:ec:fe:4a:d6:c8:07:3c:4e:66:31:c2:b1:ae:4c:a0:
         79:9a:29:22:75:58:cd:8a:29:fd:51:b2:11:d4:23:20:91:f4:
         8b:62:0e:6a:09:67:d0:c3:d4:d5:c5:ea:e0:d6:43:a5:98:58:
         37:b3:50:19:03:a4:e0:2c:56:60:64:7b:4f:0b:3d:da:ff:96:
         08:8e:f6:72:73:5f:ac:66:1c:11:01:d9:20:8b:5b:55:1b:48:
         ff:4d:f2:4b:71:f8:98:93:19:6f:48:33:32:6d:b4:16:49:80:
         80:3d:e9:39:bd:8e:e8:d7:46:28:df:1f:8c:77:b5:ff:5d:9b:
         88:3d:0d:7a:f6:e9:85:17:e7:cb:88:6a:be:7d:d1:f3:99:a9:
         c9:73:8a:b9:2d:2b:be:f8:cb:6b:d4:3f:76:c6:cd:1a:e2:96:
         d2:97:00:11:6f:df:84:2a:28:79:a3:30:8e:23:34:de:5a:9e:
         38:5f:6e:f1:fa:58:cf:a3:dd:d1:72:7d:73:a8:21:e5:24:ec:
         b1:31:fb:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:27:07 2026 by rpki-client