Route Origin Authorization

$ rpki-client -vvvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a326433633a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a326433633a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          L463n2VQWGRVyVULq0AiLzNV9UtCYIeiEEwCEVR+N28=
Subject key identifier:   91:1E:54:D0:25:AF:BE:83:2A:E3:01:48:0A:86:9B:FA:3B:D9:B8:39
Certificate issuer:       /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial:       3B458E53DB44F4BF9CA705EE4F83B203100096D4
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a326433633a3a2f34382d313238203d3e203532303235.roa
Signing time:             Fri 23 Oct 2026 06:31:31 +0000
ROA not before:           Fri 23 Oct 2026 06:26:31 +0000
ROA not after:            Fri 22 Oct 2027 06:31:31 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:2d3c::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 05 Nov 2026 19:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:45:8e:53:db:44:f4:bf:9c:a7:05:ee:4f:83:b2:03:10:00:96:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
        Validity
            Not Before: Oct 23 06:26:31 2026 GMT
            Not After : Oct 22 06:31:31 2027 GMT
        Subject: CN=911E54D025AFBE832AE301480A869BFA3BD9B839
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:0d:63:f3:bd:f8:8c:4c:44:c7:5e:90:12:a9:
                    79:ba:da:16:20:d4:74:96:b0:7a:44:a8:18:c3:ea:
                    b7:25:80:22:3c:7e:d5:45:ec:9f:cb:5c:2f:0c:4b:
                    90:e3:cc:3f:bd:e8:74:bd:4d:13:9a:f8:dc:4d:75:
                    a0:f5:be:72:51:6f:eb:9a:2d:71:0a:cc:ec:a1:f4:
                    cf:a1:be:21:43:1b:18:a0:af:a0:3d:6b:25:79:51:
                    ee:5a:44:52:b7:ee:40:12:67:34:18:47:97:af:a8:
                    58:9e:6e:72:b7:7a:b8:bf:89:1d:fb:fa:9c:05:2a:
                    bc:95:dd:87:d9:9b:14:b6:15:d0:44:aa:67:91:9c:
                    ac:fc:aa:bb:8f:97:c4:73:4b:5b:33:67:03:40:3a:
                    83:13:b1:c7:1d:f8:ac:c7:3c:68:6d:10:b0:8e:0d:
                    fe:33:ee:5a:34:04:e4:e8:b2:df:2f:47:c6:c7:87:
                    b7:bd:a2:1a:01:b9:26:82:cd:dc:73:22:aa:7e:72:
                    b5:db:0b:5b:2a:6b:ff:f3:db:81:5c:ff:52:5a:8d:
                    5e:4a:ab:17:78:13:e5:94:08:e4:e5:90:67:dd:9b:
                    f7:b5:43:56:37:6b:a6:b2:6d:3c:85:ce:cc:4c:fa:
                    13:f6:94:ca:a6:da:30:d7:50:0d:51:67:4e:e6:c1:
                    ba:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:1E:54:D0:25:AF:BE:83:2A:E3:01:48:0A:86:9B:FA:3B:D9:B8:39
            X509v3 Authority Key Identifier:
                keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a326433633a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:2d3c::/48

    Signature Algorithm: sha256WithRSAEncryption
         1d:b5:1d:9f:30:f4:0f:5d:1f:b6:0c:ab:7e:9b:26:2f:a0:d1:
         d3:86:ee:b4:02:e4:26:49:03:57:59:74:fa:0c:91:57:a3:a0:
         ce:92:51:5f:aa:c1:86:1e:11:14:f6:9a:54:9b:d5:3f:a1:29:
         04:65:b4:f4:96:14:0d:7b:34:d0:9e:a1:48:6f:fa:3b:ae:d7:
         85:a8:50:a4:76:d1:77:76:f0:b3:e0:45:a5:61:19:0f:80:38:
         38:43:fc:d7:e3:db:f4:f8:02:b2:48:68:f4:22:c6:00:10:12:
         b3:aa:f3:5c:0e:e5:a1:36:23:f1:f3:01:18:3f:71:26:62:c3:
         8c:7d:86:d0:6e:e1:04:1d:44:35:f6:23:e3:eb:e9:c1:3b:62:
         9a:7a:01:d6:56:9e:dd:43:ec:ea:86:eb:1e:b9:d2:25:20:74:
         2a:1d:20:4e:d4:46:8d:0f:08:8c:2f:79:66:96:3e:02:18:83:
         69:82:c3:d6:18:b7:b8:d5:55:d1:d6:6d:8c:df:fe:fc:92:ba:
         9c:04:8a:90:ea:cf:c7:8c:3b:23:f7:dd:fb:93:cf:4f:66:dd:
         0b:bf:93:3f:6d:72:36:9e:86:c6:9c:be:2c:34:77:61:2b:a5:
         7e:25:56:e4:10:cf:b0:07:1f:1b:33:82:d5:2a:1a:7d:9b:c6:
         78:69:d5:49
-----BEGIN CERTIFICATE-----
MIIFJTCCBA2gAwIBAgIUO0WOU9tE9L+cpwXuT4OyAxAAltQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjYzODZGQUJFQTM5MjEwQjY2NUE2QTU1QUU1REE2NkJF
Njc0MTU5NzAeFw0yNjEwMjMwNjI2MzFaFw0yNzEwMjIwNjMxMzFaMDMxMTAvBgNV
BAMTKDkxMUU1NEQwMjVBRkJFODMyQUUzMDE0ODBBODY5QkZBM0JEOUI4MzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkDWPzvfiMTETHXpASqXm62hYg
1HSWsHpEqBjD6rclgCI8ftVF7J/LXC8MS5DjzD+96HS9TROa+NxNdaD1vnJRb+ua
LXEKzOyh9M+hviFDGxigr6A9ayV5Ue5aRFK37kASZzQYR5evqFiebnK3eri/iR37
+pwFKryV3YfZmxS2FdBEqmeRnKz8qruPl8RzS1szZwNAOoMTsccd+KzHPGhtELCO
Df4z7lo0BOTost8vR8bHh7e9ohoBuSaCzdxzIqp+crXbC1sqa//z24Fc/1JajV5K
qxd4E+WUCOTlkGfdm/e1Q1Y3a6aybTyFzsxM+hP2lMqm2jDXUA1RZ07mwbrTAgMB
AAGjggIvMIICKzAdBgNVHQ4EFgQUkR5U0CWvvoMq4wFICoab+jvZuDkwHwYDVR0j
BBgwFoAU9jhvq+o5IQtmWmpVrl2ma+Z0FZcwDgYDVR0PAQH/BAQDAgeAMG4GA1Ud
HwRnMGUwY6BhoF+GXXJzeW5jOi8vcnBraS0wMS5wZHhuZXQudWsvcmVwby9wYXJh
ZG94bmV0d29ya3MvOC9GNjM4NkZBQkVBMzkyMTBCNjY1QTZBNTVBRTVEQTY2QkU2
NzQxNTk3LmNybDCBkwYIKwYBBQUHAQEEgYYwgYMwgYAGCCsGAQUFBzAChnRyc3lu
YzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYz
ZTAxODU3NTVjOTFiZTNmOWQvNy9GNjM4NkZBQkVBMzkyMTBCNjY1QTZBNTVBRTVE
QTY2QkU2NzQxNTk3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzAL
hnVyc3luYzovL3Jwa2ktMDEucGR4bmV0LnVrL3JlcG8vcGFyYWRveG5ldHdvcmtz
LzgvMzI2MTMwMzUzYTY0NjY2MzM0M2EzMjY0MzM2MzNhM2EyZjM0MzgyZDMxMzIz
ODIwM2QzZTIwMzUzMjMwMzIzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF38QtPDANBgkqhkiG9w0B
AQsFAAOCAQEAHbUdnzD0D10ftgyrfpsmL6DR04butALkJkkDV1l0+gyRV6OgzpJR
X6rBhh4RFPaaVJvVP6EpBGW09JYUDXs00J6hSG/6O67XhahQpHbRd3bws+BFpWEZ
D4A4OEP81+Pb9PgCskho9CLGABASs6rzXA7loTYj8fMBGD9xJmLDjH2G0G7hBB1E
NfYj4+vpwTtimnoB1lae3UPs6obrHrnSJSB0Kh0gTtRGjQ8IjC95ZpY+AhiDaYLD
1hi3uNVV0dZtjN/+/JK6nASKkOrPx4w7I/fd+5PPT2bdC7+TP21yNp6Gxpy+LDR3
YSulfiVW5BDPsAcfGzOC1SoafZvGeGnVSQ==
-----END CERTIFICATE-----
Generated at Thu Nov 5 05:20:10 2026 by rpki-client