Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a313132653a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a313132653a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          HNrcAypwIYiII0Os7GdE/jdIIOlOHCsFQmmLd3UqXVc=
Subject key identifier:   F1:7E:EB:12:C5:1F:87:FC:CE:E1:41:84:BE:99:74:31:89:3D:09:80
Certificate issuer:       /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial:       14F9C042802AD0791A8F524989B7379FDE5ED228
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a313132653a3a2f34382d313238203d3e203532303235.roa
Signing time:             Tue 28 Jul 2026 14:33:50 +0000
ROA not before:           Tue 28 Jul 2026 14:28:50 +0000
ROA not after:            Tue 27 Jul 2027 14:33:50 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:112e::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 21:29:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:f9:c0:42:80:2a:d0:79:1a:8f:52:49:89:b7:37:9f:de:5e:d2:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
        Validity
            Not Before: Jul 28 14:28:50 2026 GMT
            Not After : Jul 27 14:33:50 2027 GMT
        Subject: CN=F17EEB12C51F87FCCEE14184BE997431893D0980
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:52:ad:ce:f0:72:30:3e:05:3e:2b:a7:2a:83:
                    20:fb:e7:92:b3:b4:17:00:09:4d:5f:6c:2e:e2:05:
                    e5:48:8a:93:fb:06:be:8f:d9:ef:e5:fc:77:78:65:
                    46:ab:68:d4:c8:c4:ea:7c:46:1a:83:a4:1c:44:37:
                    cb:bc:85:2a:8b:e0:d7:1c:f1:de:97:94:a7:fb:85:
                    2c:55:5b:e4:18:2e:35:85:db:1b:ee:da:44:1e:c7:
                    a0:5a:4f:e4:39:59:6a:60:76:59:57:32:7b:89:0b:
                    eb:8a:75:30:5d:be:df:3e:91:aa:82:ab:5a:f6:94:
                    ab:b2:8a:ba:70:c8:12:03:a1:af:fb:d6:d5:6d:11:
                    ce:4b:98:0e:a5:79:8a:ee:34:18:e3:75:2a:2d:75:
                    1e:79:43:59:ad:4c:20:14:22:be:29:a4:1b:f4:19:
                    c3:5e:65:f1:d0:3c:30:e4:f2:03:e7:9d:00:62:80:
                    4d:83:4f:1c:b5:2a:ed:4f:55:e8:c0:31:16:ec:47:
                    f5:17:77:8f:00:f3:0c:bf:6e:5d:05:5f:73:03:97:
                    57:17:bd:d0:ae:e7:4c:65:1c:e7:20:f1:de:ae:b2:
                    f9:92:11:1d:93:2c:de:9a:f0:48:31:6f:aa:76:3e:
                    4a:74:c0:dc:6c:4e:7f:9b:92:88:34:f0:f7:3a:54:
                    56:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:7E:EB:12:C5:1F:87:FC:CE:E1:41:84:BE:99:74:31:89:3D:09:80
            X509v3 Authority Key Identifier:
                keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a313132653a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:112e::/48

    Signature Algorithm: sha256WithRSAEncryption
         20:28:77:50:f4:7b:b3:ca:72:82:fd:36:c1:18:62:85:a4:51:
         d8:7b:6a:2d:e9:fd:e6:eb:a3:a1:37:af:56:9d:66:f2:ab:fb:
         3b:e1:36:e2:6c:36:12:82:b6:a8:fc:7c:7d:dd:16:99:89:d3:
         9b:cd:7f:d9:5e:a6:4c:c1:73:40:46:44:47:dc:05:a6:71:8f:
         89:4d:bf:e9:5e:35:c2:59:a2:dd:2a:a3:0d:b8:f6:e1:6f:2a:
         19:67:7a:3c:e8:f7:79:a9:55:46:f0:81:6f:36:7a:9d:2e:4a:
         bd:f0:f2:36:71:61:61:be:e1:f8:c1:10:6e:ca:c0:2f:a3:99:
         3c:1c:09:4b:99:41:07:1e:d2:12:b8:d2:af:5c:a0:f8:39:a3:
         e5:1f:65:0e:59:63:d9:66:b8:86:f2:0c:47:c8:85:72:34:68:
         db:7a:f6:4c:ae:4d:96:fd:57:9f:37:75:0d:c5:73:d2:d6:ef:
         63:0a:63:fd:6b:11:66:0f:63:d1:fc:5e:67:ba:b1:1b:8c:e2:
         29:38:3b:ee:eb:c1:30:c5:4e:27:d6:d8:ab:a1:f5:72:6a:9a:
         ce:51:91:46:9c:21:0c:9a:f1:98:88:81:68:e3:28:d2:c4:87:
         b0:74:24:7a:8d:a3:9a:be:89:f2:89:29:57:52:4c:1e:81:fd:
         d3:58:80:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:14:57 2026 by rpki-client