Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a316432663a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a316432663a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          nkDX0hrgMc/mwl1dp+dmaYOaS2+C7sCIXflA+lpyTbs=
Subject key identifier:   A3:07:89:3B:D0:78:A6:30:2E:E4:E8:F2:61:32:8F:FD:B2:39:00:72
Certificate issuer:       /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial:       2E20B8AAA6A3D7EA42F583A24CE2BC69316389F3
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a316432663a3a2f34382d313238203d3e203532303235.roa
Signing time:             Tue 28 Jul 2026 18:33:53 +0000
ROA not before:           Tue 28 Jul 2026 18:28:53 +0000
ROA not after:            Tue 27 Jul 2027 18:33:53 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:1d2f::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 21:29:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:20:b8:aa:a6:a3:d7:ea:42:f5:83:a2:4c:e2:bc:69:31:63:89:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
        Validity
            Not Before: Jul 28 18:28:53 2026 GMT
            Not After : Jul 27 18:33:53 2027 GMT
        Subject: CN=A307893BD078A6302EE4E8F261328FFDB2390072
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:94:b2:37:1e:bd:6a:2f:84:db:6e:2b:2a:a3:
                    54:70:7c:4b:c2:b9:29:1d:fa:d2:f8:ef:66:43:12:
                    2b:8e:91:4b:90:80:cd:32:14:1b:ec:90:60:fc:1a:
                    0e:b0:af:56:87:10:cb:51:b9:44:49:28:79:fb:e0:
                    55:0b:42:0f:9f:45:a9:8a:27:c2:9d:93:ee:83:19:
                    9d:72:72:29:b9:48:76:b2:a2:98:94:c0:15:3d:c9:
                    f6:51:dd:1c:6c:43:29:59:c8:df:0e:6c:55:b9:f8:
                    21:f6:ec:19:37:37:24:d3:40:1d:ae:e8:92:41:aa:
                    11:09:4f:19:71:e2:f2:9c:20:2e:8f:e0:b5:10:92:
                    10:74:56:a8:ba:32:c0:2a:43:84:61:9e:19:7c:f8:
                    a1:07:89:b1:4f:a6:db:6f:97:1b:59:92:7b:e5:6a:
                    72:64:d9:32:e7:01:34:17:61:7f:df:3e:48:2c:a9:
                    8d:98:25:40:57:47:28:eb:96:81:eb:94:0a:9b:1b:
                    f7:eb:4d:d4:e8:b7:ad:73:02:a9:4d:ff:1b:e8:b6:
                    e2:a9:82:19:ac:68:a1:60:6d:b0:b6:13:1a:75:58:
                    d1:5d:a1:8d:4e:22:ff:a7:d1:fa:84:d2:48:4b:7d:
                    1f:f6:cb:7a:37:58:aa:c9:0e:d6:1f:cc:12:fd:8f:
                    e6:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:07:89:3B:D0:78:A6:30:2E:E4:E8:F2:61:32:8F:FD:B2:39:00:72
            X509v3 Authority Key Identifier:
                keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a316432663a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:1d2f::/48

    Signature Algorithm: sha256WithRSAEncryption
         3c:75:7b:ec:7b:22:67:6e:69:99:72:84:ee:8c:bc:e9:90:45:
         12:4c:ff:a6:2a:3e:e9:d8:94:9b:95:a9:57:c1:1e:c4:7f:e2:
         23:81:05:1a:14:de:7a:b3:fd:75:b6:26:fc:c5:a4:5a:18:1a:
         65:68:db:ab:e2:f2:f0:37:74:8f:b6:9e:b8:9b:2d:c1:b4:df:
         df:ea:a6:8a:01:5e:77:42:fa:6b:09:07:02:cc:9f:98:80:86:
         05:db:aa:47:b0:08:a9:38:02:65:8d:9b:c6:bb:c1:f5:d9:9d:
         83:0c:b0:0e:df:cd:0f:66:11:df:f9:20:98:72:28:ed:81:e9:
         db:24:55:98:7a:c5:62:0d:34:14:c8:ee:02:9a:11:07:45:4f:
         51:7e:e6:75:42:4c:ee:57:d0:04:e1:6c:3e:2a:aa:d7:3b:07:
         60:61:47:e0:ba:4e:0d:9f:cb:ec:ad:36:15:4f:27:3d:2e:ef:
         53:4d:51:47:a5:1d:c8:c7:fd:04:fb:c9:e3:a5:10:fe:34:da:
         4d:25:47:52:16:22:c2:d6:a4:8f:dd:e6:44:cc:75:83:d4:d3:
         c9:40:bf:2e:61:65:9a:00:0b:04:a7:b9:53:09:48:f3:0a:76:
         2b:e6:24:44:04:22:44:b6:05:13:e3:d4:53:0e:f5:9f:c4:63:
         8b:40:7d:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:17:20 2026 by rpki-client