Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a323432643a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a323432643a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          DO3gEbhXmdHg3p/7/r3G3gKp5gflj1Lnnt6U6ZOmqy0=
Subject key identifier:   6A:BA:AD:95:C7:48:8C:AE:05:00:2D:02:63:F7:03:E7:96:A3:79:FE
Certificate issuer:       /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial:       639850156122ADEC67AC60D53DCCB00794DF71FF
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a323432643a3a2f34382d313238203d3e203532303235.roa
Signing time:             Mon 27 Jul 2026 20:33:46 +0000
ROA not before:           Mon 27 Jul 2026 20:28:46 +0000
ROA not after:            Mon 26 Jul 2027 20:33:46 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:242d::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 21:29:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:98:50:15:61:22:ad:ec:67:ac:60:d5:3d:cc:b0:07:94:df:71:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
        Validity
            Not Before: Jul 27 20:28:46 2026 GMT
            Not After : Jul 26 20:33:46 2027 GMT
        Subject: CN=6ABAAD95C7488CAE05002D0263F703E796A379FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:5a:a2:3e:cd:35:18:7f:a3:e9:7e:87:a9:07:
                    9e:79:c4:9e:ac:39:2c:68:3e:13:58:59:40:3f:8c:
                    96:4d:d2:7b:b7:53:24:9e:f1:0a:54:f0:99:d2:e6:
                    5c:57:67:1b:e1:06:1c:56:be:76:8c:7e:03:c6:73:
                    e7:89:a2:8b:0c:38:ae:56:5a:b6:2a:27:22:e6:eb:
                    70:5c:a3:8b:a5:ce:12:b4:d8:f1:f1:5d:82:60:85:
                    92:ce:29:8d:4a:03:df:b8:6a:12:c1:dd:3f:b6:b7:
                    76:40:bb:c6:08:c2:87:1e:b1:71:c2:0d:d7:7e:4d:
                    9c:00:7b:6a:62:79:57:05:b2:16:45:f2:e1:f6:39:
                    bd:6d:84:e3:02:76:ba:65:e9:69:86:a2:b9:3b:7a:
                    4d:e0:9a:ab:45:d4:ae:d9:9a:29:d0:51:4c:c7:da:
                    07:7e:6a:3d:6e:5e:44:8d:c3:37:03:2d:25:44:72:
                    2a:63:b5:62:4d:9f:b5:ac:54:2b:b2:09:d7:4c:26:
                    4c:b2:fd:59:a6:6e:ab:58:bb:cb:e4:db:90:4a:fd:
                    9e:20:43:fb:3f:4b:4a:39:95:af:7a:3b:92:f8:d0:
                    93:f6:b4:61:53:12:a6:cb:80:63:f2:d5:4d:a0:3a:
                    22:d5:98:d2:01:2d:dd:f5:4c:63:cf:c7:86:df:82:
                    c7:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:BA:AD:95:C7:48:8C:AE:05:00:2D:02:63:F7:03:E7:96:A3:79:FE
            X509v3 Authority Key Identifier:
                keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a323432643a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:242d::/48

    Signature Algorithm: sha256WithRSAEncryption
         58:6e:d3:08:15:b0:9e:82:99:9b:f4:b1:14:cc:95:c3:a3:19:
         13:cf:42:55:18:97:16:df:a0:d6:42:bf:5a:12:02:b2:55:de:
         0b:6b:53:29:f5:c5:a0:fb:2d:57:29:db:3d:7b:86:52:d0:56:
         89:69:e8:87:d4:d2:17:5b:99:33:44:52:47:b9:58:1b:58:c4:
         93:01:f7:2b:25:c1:92:07:15:19:c2:22:50:6b:6b:6a:cf:52:
         2c:be:37:66:e7:99:00:79:91:56:32:7f:6b:3d:99:9d:42:75:
         fc:85:af:9e:ca:a6:0c:ff:13:e0:28:9c:86:e3:80:56:dc:19:
         50:89:c3:9d:e9:84:4c:d7:d2:62:7c:65:9d:10:8c:00:35:5d:
         80:58:d4:85:5d:cc:f9:27:52:66:c1:03:53:fa:9f:9b:bc:76:
         1e:fc:4e:99:54:37:9d:87:0f:4f:0a:78:f3:60:f1:d1:43:de:
         75:c4:f9:1a:b0:c6:5b:09:25:88:a8:ff:fd:24:c9:97:09:48:
         e7:03:ab:8a:42:ec:72:ad:d5:70:71:c3:59:3b:58:18:f0:83:
         f3:bc:82:63:38:ac:e9:c5:32:a4:b9:9a:df:e6:7e:0f:60:5c:
         85:29:49:76:1f:b6:43:fb:ef:6a:cc:23:8b:96:e9:e8:dd:9e:
         4a:a9:b6:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:59:24 2026 by rpki-client