Route Origin Authorization

$ rpki-client -vvvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e33322e302f32342d3234203d3e20383334.roa
File:                     36322e3134342e33322e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          blcGk8NUTikkKvZ84GWJ5/FJqJPv6alAWU+Wy9pRmCc=
Subject key identifier:   CE:84:96:CF:2A:C0:27:2B:B0:28:74:F3:4D:C6:CA:C5:72:74:96:ED
Certificate issuer:       /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
Certificate serial:       4BB443C665397FD7F6B9EC19D8F55E29222A3AD7
Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e33322e302f32342d3234203d3e20383334.roa
Signing time:             Fri 16 Oct 2026 08:17:43 +0000
ROA not before:           Fri 16 Oct 2026 08:12:43 +0000
ROA not after:            Fri 15 Oct 2027 08:17:43 +0000
asID:                     834
IP address blocks:        62.144.32.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl
                          rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 21 Oct 2026 08:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:b4:43:c6:65:39:7f:d7:f6:b9:ec:19:d8:f5:5e:29:22:2a:3a:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
        Validity
            Not Before: Oct 16 08:12:43 2026 GMT
            Not After : Oct 15 08:17:43 2027 GMT
        Subject: CN=CE8496CF2AC0272BB02874F34DC6CAC5727496ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:73:28:85:a5:0a:9d:1c:f9:ce:6d:79:40:50:
                    d0:69:ee:79:d5:93:2b:bd:18:f2:81:59:0a:78:ff:
                    53:cf:b2:cd:4f:8f:f7:40:ac:94:43:01:f8:ad:9a:
                    ca:40:7c:99:15:bd:6a:dd:cb:bb:56:18:d9:08:1c:
                    b6:9d:cd:33:2d:80:7a:af:09:d5:a5:a1:6e:9e:f8:
                    8b:9d:e9:1a:9b:87:0b:67:d5:b8:12:e9:21:70:64:
                    7e:f7:32:85:0f:ff:b5:a0:26:ab:8e:a4:81:15:5e:
                    bb:6a:d3:d5:8f:e8:63:6f:b5:2c:88:a1:35:56:c3:
                    1e:10:2c:78:64:a5:cc:a6:74:07:dd:d6:95:73:f4:
                    66:70:63:47:98:9c:38:7d:24:0e:89:d4:99:f2:ea:
                    08:88:e6:ee:37:48:a3:c0:cf:78:6c:ab:ec:9e:0a:
                    a5:4d:4d:78:6d:a2:58:64:a4:74:77:1f:94:9b:10:
                    ce:c5:de:a3:1a:c8:40:55:2f:08:6a:cc:74:90:d1:
                    85:53:3d:9f:76:c6:86:ef:21:09:5d:64:1c:bd:6b:
                    83:03:4c:c2:ef:7d:8e:ff:d0:2a:d2:bb:3e:30:6c:
                    f6:cb:d7:6e:21:da:f9:6a:b8:e1:d0:b3:09:ce:27:
                    33:b4:14:9f:1f:64:e3:b5:95:67:9e:11:0e:69:f1:
                    85:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:84:96:CF:2A:C0:27:2B:B0:28:74:F3:4D:C6:CA:C5:72:74:96:ED
            X509v3 Authority Key Identifier:
                keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e33322e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.144.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:68:c3:5b:ed:67:09:f0:aa:96:2e:e3:26:58:c7:f2:11:00:
         0d:c7:c9:1b:32:2f:2a:66:4a:55:73:03:a5:a8:4a:f2:7d:ae:
         7e:22:10:10:ca:51:33:97:8a:4b:dd:2a:01:6a:5d:0d:79:3f:
         a7:d6:7c:5c:32:14:09:30:c5:3f:c7:e9:f9:62:98:ce:1e:1b:
         48:2b:15:da:3d:36:6e:22:68:19:c8:0d:81:cb:ee:74:95:8e:
         05:f3:5d:8c:a2:cc:95:6f:e5:f8:68:35:61:13:cc:97:74:63:
         dd:0c:91:ed:39:62:99:c1:b7:3f:89:a8:08:71:15:bb:17:42:
         08:b5:36:5c:59:4e:f8:1f:14:b7:c8:9b:8b:d4:db:63:d0:43:
         cd:1f:f0:2b:53:1f:c3:85:c2:a3:e2:d9:27:a4:18:d0:df:b4:
         5d:72:0c:17:e1:83:8f:82:4b:b2:06:0a:4b:87:e1:13:8c:ab:
         7e:72:9b:dc:57:a6:b6:7a:35:18:d4:0c:a2:0e:9b:c1:9c:45:
         d8:07:52:20:62:70:ad:65:74:47:d1:dc:36:62:1b:7b:f3:84:
         8c:af:cd:24:87:7f:28:a6:09:ae:cb:e4:40:16:c4:f4:59:06:
         a3:76:6f:1c:0a:3d:c8:07:d7:09:2a:64:e7:0e:f8:17:da:a7:
         05:ca:2c:f2
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUS7RDxmU5f9f2uewZ2PVeKSIqOtcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjM1NEQzMjhDQkJGRDFFRjNDRDI5MjY4QTIzQjBGQ0M2
MEUzQTJDNTAeFw0yNjEwMTYwODEyNDNaFw0yNzEwMTUwODE3NDNaMDMxMTAvBgNV
BAMTKENFODQ5NkNGMkFDMDI3MkJCMDI4NzRGMzREQzZDQUM1NzI3NDk2RUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCScyiFpQqdHPnObXlAUNBp7nnV
kyu9GPKBWQp4/1PPss1Pj/dArJRDAfitmspAfJkVvWrdy7tWGNkIHLadzTMtgHqv
CdWloW6e+Iud6Rqbhwtn1bgS6SFwZH73MoUP/7WgJquOpIEVXrtq09WP6GNvtSyI
oTVWwx4QLHhkpcymdAfd1pVz9GZwY0eYnDh9JA6J1Jny6giI5u43SKPAz3hsq+ye
CqVNTXhtolhkpHR3H5SbEM7F3qMayEBVLwhqzHSQ0YVTPZ92xobvIQldZBy9a4MD
TMLvfY7/0CrSuz4wbPbL124h2vlquOHQswnOJzO0FJ8fZOO1lWeeEQ5p8YVBAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUzoSWzyrAJyuwKHTzTcbKxXJ0lu0wHwYDVR0j
BBgwFoAUs1TTKMu/0e880pJoojsPzGDjosUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
YTAzNzViMzktZjk0OS00Y2I1LWI1MTktZjk0MDA4YjE2NTRjLTAvMC9CMzU0RDMy
OENCQkZEMUVGM0NEMjkyNjhBMjNCMEZDQzYwRTNBMkM1LmNybDCBngYIKwYBBQUH
AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5LzYxNzA4YTZiLTZjM2EtNDBhMC1hMzAyLTU5NWVj
YzE3ODQ4Yy8wL0IzNTREMzI4Q0JCRkQxRUYzQ0QyOTI2OEEyM0IwRkNDNjBFM0Ey
QzUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCBigYIKwYBBQUHMAuGfnJzeW5jOi8v
ci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvL2EwMzc1YjM5LWY5NDktNGNiNS1iNTE5
LWY5NDAwOGIxNjU0Yy0wLzAvMzYzMjJlMzEzNDM0MmUzMzMyMmUzMDJmMzIzNDJk
MzIzNDIwM2QzZTIwMzgzMzM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPpAgMA0GCSqGSIb3DQEBCwUA
A4IBAQA3aMNb7WcJ8KqWLuMmWMfyEQANx8kbMi8qZkpVcwOlqEryfa5+IhAQylEz
l4pL3SoBal0NeT+n1nxcMhQJMMU/x+n5YpjOHhtIKxXaPTZuImgZyA2By+50lY4F
812MosyVb+X4aDVhE8yXdGPdDJHtOWKZwbc/iagIcRW7F0IItTZcWU74HxS3yJuL
1Ntj0EPNH/ArUx/DhcKj4tknpBjQ37RdcgwX4YOPgkuyBgpLh+ETjKt+cpvcV6a2
ejUY1AyiDpvBnEXYB1IgYnCtZXRH0dw2Yht784SMr80kh38opgmuy+RAFsT0WQaj
dm8cCj3IB9cJKmTnDvgX2qcFyizy
-----END CERTIFICATE-----
Generated at Tue Oct 20 13:08:39 2026 by rpki-client