Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/4/323630323a666137653a31383a3a2f34382d313238203d3e203532303235.roa
File:                     323630323a666137653a31383a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          +Utc1cCrODRFhLLoCYOI2OZKZpFclfP+tDBpwnbB+4s=
Subject key identifier:   BD:96:05:28:AD:9B:87:78:37:EF:87:45:CC:DD:B0:FA:3E:93:E8:75
Certificate issuer:       /CN=edff5ee9c6c74e18ab3cd3244d38ecf6acc07c9835684cca08
Certificate serial:       59D30E0C913EC3493ADAA93D1CC973BB59385E88
Authority key identifier: 26:29:24:3C:9E:8D:A7:B1:4D:0A:BD:25:66:0A:74:AC:40:81:C8:8B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c88f518-5118-4680-a0ba-d2cc67b27b07/edff5ee9c6c74e18ab3cd3244d38ecf6acc07c9835684cca08.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/4/323630323a666137653a31383a3a2f34382d313238203d3e203532303235.roa
Signing time:             Thu 26 Feb 2026 00:32:20 +0000
ROA not before:           Thu 26 Feb 2026 00:27:20 +0000
ROA not after:            Thu 25 Feb 2027 00:32:20 +0000
asID:                     52025
IP address blocks:        2602:fa7e:18::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/4/2629243C9E8DA7B14D0ABD25660A74AC4081C88B.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/4/2629243C9E8DA7B14D0ABD25660A74AC4081C88B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c88f518-5118-4680-a0ba-d2cc67b27b07/edff5ee9c6c74e18ab3cd3244d38ecf6acc07c9835684cca08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c88f518-5118-4680-a0ba-d2cc67b27b07/9c88f518-5118-4680-a0ba-d2cc67b27b07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c88f518-5118-4680-a0ba-d2cc67b27b07/9c88f518-5118-4680-a0ba-d2cc67b27b07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c88f518-5118-4680-a0ba-d2cc67b27b07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Mar 2026 15:55:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:d3:0e:0c:91:3e:c3:49:3a:da:a9:3d:1c:c9:73:bb:59:38:5e:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edff5ee9c6c74e18ab3cd3244d38ecf6acc07c9835684cca08
        Validity
            Not Before: Feb 26 00:27:20 2026 GMT
            Not After : Feb 25 00:32:20 2027 GMT
        Subject: CN=BD960528AD9B877837EF8745CCDDB0FA3E93E875
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:95:15:9d:85:72:28:11:37:8f:ea:c5:51:ce:
                    f5:45:4b:ea:3c:18:d3:3c:a5:f7:5e:d0:67:3d:0d:
                    38:38:8d:2e:66:6c:e7:4b:14:ff:62:7f:47:1f:0e:
                    96:bd:35:48:56:30:d0:7a:aa:fa:d8:30:4d:e3:ad:
                    b9:24:0e:e8:48:4c:79:7b:8b:a6:25:8e:3b:a8:3d:
                    0c:85:de:05:24:20:73:31:c6:4a:4c:9b:3e:31:41:
                    03:54:4c:9d:9c:6d:79:78:84:8d:91:f7:35:97:ae:
                    ce:43:40:2f:90:eb:04:59:09:f9:e4:b7:71:ab:3d:
                    75:68:21:eb:a1:79:b1:9a:96:95:b5:30:fb:10:42:
                    11:ba:17:e0:e1:91:93:37:ea:b4:2e:d4:30:08:27:
                    cc:55:b3:b4:af:83:ae:49:7e:de:c8:e1:c2:e9:73:
                    6a:51:e9:dd:5a:2d:96:10:69:79:c5:37:b9:93:9a:
                    3a:3a:85:73:26:c8:da:98:a3:34:cd:ca:6f:04:97:
                    ba:1d:02:ae:00:64:fc:3e:44:47:a5:a3:bf:73:9e:
                    68:f3:e3:74:a7:47:a9:de:4b:19:67:9d:fd:0f:37:
                    c6:86:c8:12:3b:48:86:38:27:54:cf:f4:95:ba:17:
                    be:e3:9e:8d:05:35:04:18:f4:1d:8a:a2:03:24:99:
                    f7:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:96:05:28:AD:9B:87:78:37:EF:87:45:CC:DD:B0:FA:3E:93:E8:75
            X509v3 Authority Key Identifier:
                keyid:26:29:24:3C:9E:8D:A7:B1:4D:0A:BD:25:66:0A:74:AC:40:81:C8:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/4/2629243C9E8DA7B14D0ABD25660A74AC4081C88B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c88f518-5118-4680-a0ba-d2cc67b27b07/edff5ee9c6c74e18ab3cd3244d38ecf6acc07c9835684cca08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/4/323630323a666137653a31383a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa7e:18::/48

    Signature Algorithm: sha256WithRSAEncryption
         6c:f8:9e:ab:aa:82:15:ad:1d:39:0b:09:c1:e5:f1:c3:f8:7d:
         3e:ec:a0:1e:a3:a0:0d:11:8d:44:b6:74:b9:b9:b1:86:26:37:
         7b:12:43:3a:c8:b9:a8:47:f4:28:26:18:27:e2:c8:09:6c:39:
         5d:ea:35:99:54:ef:ac:4c:66:c3:e4:b7:b3:7c:5a:8e:88:b6:
         f1:dc:1d:97:ee:de:d6:ad:5c:29:ac:36:57:83:c2:bb:df:67:
         06:9b:1c:98:92:d2:97:27:8c:b9:49:17:fb:99:d2:be:1f:c3:
         de:98:59:6f:ea:d6:f3:83:a8:32:11:e6:76:41:66:9f:34:73:
         b5:14:3d:a4:b8:d1:7c:39:0e:23:13:59:3c:c9:2f:93:02:62:
         88:c6:77:e1:5e:8b:66:84:3b:d5:ba:77:15:e4:53:4d:c5:48:
         a6:3d:5c:5e:c5:f0:cb:71:a0:5b:74:07:a7:bf:9b:26:00:bb:
         cb:bd:7c:4c:05:35:17:b3:1d:37:35:c1:1f:67:0d:c2:75:09:
         54:37:5a:af:96:dc:5d:e6:72:94:22:99:76:b1:28:6d:f0:1d:
         c6:ea:ee:1f:6b:bc:2f:6e:62:dc:06:00:30:d2:bb:34:94:23:
         ab:31:09:d6:68:f1:c2:87:33:9c:2b:74:47:1a:bb:87:52:d3:
         73:84:e3:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:30:00 2026 by rpki-client