Route Origin Authorization

$ rpki-client -vvvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a323733363a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a323733363a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          wmKLGJo6JexJaEnSFssYxJmQpVUSixSPiRntl32H5uA=
Subject key identifier:   15:37:19:C7:2B:2B:AB:0D:12:B0:88:56:31:A1:A9:E4:B4:EC:F3:28
Certificate issuer:       /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial:       24125293E9F4AE9A2AECD00E55E129A332DCCDE5
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a323733363a3a2f34382d313238203d3e203532303235.roa
Signing time:             Sat 15 Aug 2026 23:18:53 +0000
ROA not before:           Sat 15 Aug 2026 23:13:53 +0000
ROA not after:            Sat 14 Aug 2027 23:18:53 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:2736::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:16:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:12:52:93:e9:f4:ae:9a:2a:ec:d0:0e:55:e1:29:a3:32:dc:cd:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
        Validity
            Not Before: Aug 15 23:13:53 2026 GMT
            Not After : Aug 14 23:18:53 2027 GMT
        Subject: CN=153719C72B2BAB0D12B0885631A1A9E4B4ECF328
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:b9:cf:d3:73:33:d4:06:b0:85:c8:da:14:54:
                    75:2f:4d:da:43:23:55:a8:ce:74:20:e5:33:07:ce:
                    94:2d:14:b7:24:80:79:06:c9:2d:91:20:ef:14:1e:
                    d1:3a:e4:18:60:da:ea:eb:0c:89:ac:17:7e:c1:0d:
                    d6:31:5d:e3:30:0d:2d:a9:c9:16:08:7b:57:3a:76:
                    d0:4c:af:ef:7b:f8:f7:d3:d9:ea:23:2f:ad:f6:21:
                    d8:e9:09:9d:e1:7d:c5:05:73:59:f2:9b:0c:ef:0b:
                    f4:69:ff:da:fe:d3:25:cd:d8:21:a9:74:8a:84:e1:
                    ac:0e:ca:6b:d7:ca:bf:48:5c:6b:83:a3:a8:4a:aa:
                    54:7c:b4:92:3a:a5:99:91:04:b5:f0:17:9e:f8:43:
                    82:6a:70:9e:4c:d1:46:e4:54:b1:b6:07:2e:6a:35:
                    69:23:f1:04:41:34:d7:79:66:94:80:36:38:d0:7d:
                    23:68:37:19:3b:b7:19:8e:50:7e:10:f0:70:ec:37:
                    b2:ee:cd:e1:f6:45:94:34:cb:3d:58:e0:7c:29:f6:
                    99:24:4c:fa:e6:08:e4:0c:f3:a5:a9:7c:60:d5:11:
                    8d:6a:35:3a:a7:c3:b3:b8:69:f7:3d:09:5c:ce:a0:
                    e6:2f:c4:76:0f:6b:86:12:d7:29:5f:72:77:8d:cb:
                    70:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:37:19:C7:2B:2B:AB:0D:12:B0:88:56:31:A1:A9:E4:B4:EC:F3:28
            X509v3 Authority Key Identifier:
                keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a323733363a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:2736::/48

    Signature Algorithm: sha256WithRSAEncryption
         23:3c:98:c6:6e:10:2f:c3:ec:52:3c:15:b9:3f:72:13:95:05:
         3d:44:70:5a:3e:2f:30:9c:09:de:86:49:7d:dd:72:25:fc:08:
         44:cd:5b:34:a8:1c:ce:00:d9:b8:69:6f:63:6d:12:5c:80:5f:
         eb:07:dc:57:50:6c:f1:f9:99:37:21:69:ba:4b:6b:f7:39:da:
         46:e8:cb:6e:35:78:40:44:3c:85:73:3e:d7:c2:8b:98:d8:ad:
         f6:c4:8f:05:ef:7c:cf:a8:7a:29:52:bb:7e:39:63:70:d0:7c:
         f3:b1:f2:5a:e2:1e:ce:ed:98:42:14:0b:7b:25:d3:ca:31:74:
         3d:62:ca:4f:0a:1e:84:4b:81:a0:9a:87:37:ce:58:5a:e9:1a:
         e6:d8:0e:4a:d9:3c:24:06:28:5f:25:b2:28:7d:1e:3a:fb:1d:
         8a:f9:66:ef:90:a5:fd:fb:41:90:1c:3d:48:a7:bd:de:55:8c:
         17:48:47:9d:a3:75:88:b6:36:8d:04:a5:2e:81:51:d6:2d:07:
         dc:65:63:95:50:4a:fa:f3:a0:58:b2:2f:c7:e7:3f:1f:9b:31:
         06:bb:0b:61:5a:e3:a1:3a:9d:db:65:cf:0d:71:db:38:61:ae:
         40:14:88:76:58:9d:2d:c5:3e:a9:24:c0:75:c9:35:1c:8f:be:
         38:c5:58:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:20:37 2026 by rpki-client