Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/9/326130353a646663313a3530303a3a2f34302d3430203d3e203532303235.roa
File:                     326130353a646663313a3530303a3a2f34302d3430203d3e203532303235.roa (raw, json)
Hash identifier:          UGie01quQbQdcJkNVO3Pf0x1mB1AjygJgxtp4wb9o5Q=
Subject key identifier:   A6:97:CD:4E:AD:BA:94:E0:73:83:AC:3B:BC:7B:E0:C0:E2:F9:D3:85
Certificate issuer:       /CN=46EF3896348D5F15EAE53B1980903A18328E4126
Certificate serial:       1C62A9104D019C1983F96F3746E92B0C4CE71BAB
Authority key identifier: 46:EF:38:96:34:8D:5F:15:EA:E5:3B:19:80:90:3A:18:32:8E:41:26
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/46EF3896348D5F15EAE53B1980903A18328E4126.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/9/326130353a646663313a3530303a3a2f34302d3430203d3e203532303235.roa
Signing time:             Fri 05 Jun 2026 17:33:13 +0000
ROA not before:           Fri 05 Jun 2026 17:28:13 +0000
ROA not after:            Fri 04 Jun 2027 17:33:13 +0000
asID:                     52025
IP address blocks:        2a05:dfc1:500::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/9/46EF3896348D5F15EAE53B1980903A18328E4126.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/9/46EF3896348D5F15EAE53B1980903A18328E4126.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/46EF3896348D5F15EAE53B1980903A18328E4126.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 16:26:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:62:a9:10:4d:01:9c:19:83:f9:6f:37:46:e9:2b:0c:4c:e7:1b:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46EF3896348D5F15EAE53B1980903A18328E4126
        Validity
            Not Before: Jun  5 17:28:13 2026 GMT
            Not After : Jun  4 17:33:13 2027 GMT
        Subject: CN=A697CD4EADBA94E07383AC3BBC7BE0C0E2F9D385
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:96:68:1b:d7:dc:a7:69:1b:ec:75:ce:c0:da:
                    ee:e8:64:f6:68:14:f4:2a:41:05:09:a1:1a:e2:8f:
                    1f:06:78:e8:7e:62:3e:dd:3c:eb:d1:ef:06:d5:36:
                    50:6c:c5:ca:19:4e:89:05:55:30:12:10:8b:d5:cf:
                    33:10:99:fd:ee:fb:a3:64:b1:20:88:d4:26:fe:c2:
                    5e:4c:cf:fe:91:38:2c:7a:35:5a:81:53:c1:e2:9c:
                    dc:e2:7d:2b:f0:e6:67:ae:d4:f4:74:81:6c:8e:aa:
                    1a:aa:54:29:ef:3d:c3:0d:04:3b:b6:1c:c8:5b:70:
                    75:2d:bc:dc:dc:99:db:c7:ef:24:9a:e3:a0:29:4d:
                    59:29:0b:6b:e8:be:17:f5:a6:f7:5c:6e:d9:d7:cb:
                    d1:1d:c1:47:97:27:9b:77:c1:5d:40:52:55:60:67:
                    60:2e:9a:3e:2c:d7:be:d2:e4:c5:32:db:0b:14:2d:
                    a7:f1:02:01:61:36:90:af:3f:a2:69:c4:62:d8:af:
                    18:6e:24:08:da:4e:a0:6f:dd:c1:2c:da:d0:f9:40:
                    21:bc:98:0d:61:77:ca:61:a8:2f:e1:f0:c6:1b:18:
                    21:a2:9f:58:e6:4d:c3:27:51:5c:53:f3:b7:07:8f:
                    0a:d4:1f:53:b0:0b:dc:bd:36:94:fd:29:53:a8:3d:
                    cd:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:97:CD:4E:AD:BA:94:E0:73:83:AC:3B:BC:7B:E0:C0:E2:F9:D3:85
            X509v3 Authority Key Identifier:
                keyid:46:EF:38:96:34:8D:5F:15:EA:E5:3B:19:80:90:3A:18:32:8E:41:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/9/46EF3896348D5F15EAE53B1980903A18328E4126.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/46EF3896348D5F15EAE53B1980903A18328E4126.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/9/326130353a646663313a3530303a3a2f34302d3430203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:500::/40

    Signature Algorithm: sha256WithRSAEncryption
         9a:47:c4:a2:8c:e4:d2:65:13:36:ff:17:ac:5f:e0:dd:f5:34:
         e7:b9:27:40:7d:16:36:c2:fb:7b:b4:3f:3e:0a:49:16:96:a1:
         c0:d0:df:59:b1:c0:22:40:b1:aa:53:9b:f5:54:55:f8:49:f1:
         8c:a1:eb:07:91:91:65:73:9c:c7:d5:ad:ab:ed:6b:ca:84:64:
         f8:b2:3c:0d:a8:c8:ba:17:a2:ae:c8:50:0a:8e:d1:4f:51:52:
         7a:13:0f:c5:d2:25:08:fc:43:55:cb:39:68:79:06:38:ad:00:
         7b:21:1a:a1:43:4b:55:c3:86:7a:bf:b7:40:66:91:a7:ed:34:
         d3:e8:a9:52:ac:11:bc:b8:76:06:a4:70:f4:c4:50:a9:ab:51:
         32:24:59:24:5e:1f:2c:bb:e0:f4:71:e8:f5:05:aa:f4:13:97:
         dd:4c:5d:76:b0:27:f1:9e:4a:0f:e7:36:e6:eb:d5:13:e2:fa:
         58:39:20:a0:cb:98:87:3c:de:0e:6d:23:7a:1d:4f:b5:04:67:
         8f:7a:ee:1b:5b:59:56:dd:00:1d:f8:e5:6c:a6:b5:2e:6d:60:
         7e:d4:8e:81:79:a0:93:63:a8:ff:31:d8:49:0e:13:1a:52:f1:
         7a:22:f7:05:b0:49:eb:93:13:f0:2d:63:3b:a9:b0:b3:1d:68:
         3d:f8:98:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:13:32 2026 by rpki-client