Route Origin Authorization

$ rpki-client -vvvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e33342e302f32342d3234203d3e20323033373538.roa
File:                     36322e3134342e33342e302f32342d3234203d3e20323033373538.roa (raw, json)
Hash identifier:          u5TnBirka8i7/S7E6pa5P6dHD4NYEQWJhjE5N6nk9qo=
Subject key identifier:   DF:43:BA:65:22:8B:53:10:B5:88:C2:09:91:41:4C:86:D6:61:19:28
Certificate issuer:       /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
Certificate serial:       6EB927CCF905213FF1FFBBE301F6C4A7CE2B01E8
Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e33342e302f32342d3234203d3e20323033373538.roa
Signing time:             Fri 16 Oct 2026 10:44:51 +0000
ROA not before:           Fri 16 Oct 2026 10:39:51 +0000
ROA not after:            Fri 15 Oct 2027 10:44:51 +0000
asID:                     203758
IP address blocks:        62.144.34.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl
                          rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 19 Oct 2026 22:20:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:b9:27:cc:f9:05:21:3f:f1:ff:bb:e3:01:f6:c4:a7:ce:2b:01:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
        Validity
            Not Before: Oct 16 10:39:51 2026 GMT
            Not After : Oct 15 10:44:51 2027 GMT
        Subject: CN=DF43BA65228B5310B588C20991414C86D6611928
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f6:c5:22:64:05:5f:11:8f:6f:22:2b:13:da:
                    ca:62:2a:cc:e2:2c:82:e5:19:22:7b:f1:bc:5b:91:
                    a1:f2:d3:51:13:ec:e9:f2:5f:67:4b:94:de:46:96:
                    0d:c9:db:e0:54:1c:80:8c:94:70:39:7a:7e:59:b4:
                    15:8c:95:29:b6:03:34:9c:a2:87:0b:24:c2:52:a5:
                    53:29:ec:e7:0f:1b:cb:55:69:10:f0:64:47:da:3e:
                    ee:1c:35:c2:f4:ae:b3:94:82:38:e2:59:c3:95:a9:
                    e2:70:40:41:f4:25:56:cf:3a:3f:51:ad:fd:3e:56:
                    8b:1c:b0:3c:a8:a6:4b:5b:de:82:3f:2a:1d:3c:6b:
                    6c:6f:7f:93:6e:f5:09:27:a6:a5:91:e5:8b:72:6b:
                    b4:76:32:50:59:a4:5e:24:24:ff:62:26:69:16:42:
                    14:64:5d:9c:c3:be:d6:32:cc:3d:ea:e4:64:2c:f5:
                    20:14:00:28:23:bd:25:01:5b:ac:2b:b4:30:f2:2c:
                    e8:6c:27:c5:31:ea:14:6a:94:c8:ed:0c:fa:3d:36:
                    09:68:a0:c5:d0:e3:5c:fd:f8:a3:49:30:18:61:41:
                    e7:16:1a:77:8d:2f:65:a8:10:ed:68:98:d8:03:0a:
                    2d:66:84:66:ad:04:12:fb:13:1b:fc:27:07:12:70:
                    9b:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:43:BA:65:22:8B:53:10:B5:88:C2:09:91:41:4C:86:D6:61:19:28
            X509v3 Authority Key Identifier:
                keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e33342e302f32342d3234203d3e20323033373538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.144.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:86:51:d2:96:27:04:b2:2e:72:b1:65:ac:6a:10:1d:0f:40:
         85:59:f0:8c:b3:e8:ab:c1:93:f2:71:30:14:95:60:da:9b:77:
         3b:68:08:07:50:da:92:87:dc:9a:73:72:d7:a1:db:c5:8e:db:
         35:53:7b:60:38:fd:5d:f9:8b:87:d3:85:3d:eb:e0:01:6d:63:
         8d:2c:64:13:c3:36:e6:66:61:7c:8f:63:1a:97:31:98:1b:a7:
         59:b2:49:ff:b4:68:0a:81:73:f1:a0:29:77:87:9a:1d:8c:73:
         0b:de:c4:13:d3:a6:95:9e:a0:08:30:70:6e:67:95:1b:f9:1c:
         4c:93:aa:76:b5:0a:e7:db:05:e4:ec:0d:1c:55:44:43:52:62:
         56:5a:06:57:05:8d:6f:44:f3:4e:5d:dd:37:f9:08:8c:19:26:
         6e:fb:99:54:66:6e:2f:98:ef:28:f7:2a:47:fc:83:f3:b3:b0:
         a0:08:5c:3e:d4:b4:42:03:82:53:12:f2:79:f2:18:75:c2:2d:
         bd:13:f5:e1:ab:33:2f:be:11:02:89:05:8f:e4:d6:62:c4:72:
         b3:83:15:ee:7b:54:13:47:5f:68:ef:be:fd:9e:be:51:f4:19:
         f1:3e:bd:47:f1:9c:64:d6:f2:df:41:19:3a:d4:24:ac:dd:97:
         a0:82:2a:7d
-----BEGIN CERTIFICATE-----
MIIFWDCCBECgAwIBAgIUbrknzPkFIT/x/7vjAfbEp84rAegwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjM1NEQzMjhDQkJGRDFFRjNDRDI5MjY4QTIzQjBGQ0M2
MEUzQTJDNTAeFw0yNjEwMTYxMDM5NTFaFw0yNzEwMTUxMDQ0NTFaMDMxMTAvBgNV
BAMTKERGNDNCQTY1MjI4QjUzMTBCNTg4QzIwOTkxNDE0Qzg2RDY2MTE5MjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv9sUiZAVfEY9vIisT2spiKszi
LILlGSJ78bxbkaHy01ET7OnyX2dLlN5Glg3J2+BUHICMlHA5en5ZtBWMlSm2AzSc
oocLJMJSpVMp7OcPG8tVaRDwZEfaPu4cNcL0rrOUgjjiWcOVqeJwQEH0JVbPOj9R
rf0+VoscsDyopktb3oI/Kh08a2xvf5Nu9QknpqWR5Ytya7R2MlBZpF4kJP9iJmkW
QhRkXZzDvtYyzD3q5GQs9SAUACgjvSUBW6wrtDDyLOhsJ8Ux6hRqlMjtDPo9Nglo
oMXQ41z9+KNJMBhhQecWGneNL2WoEO1omNgDCi1mhGatBBL7Exv8JwcScJtZAgMB
AAGjggJiMIICXjAdBgNVHQ4EFgQU30O6ZSKLUxC1iMIJkUFMhtZhGSgwHwYDVR0j
BBgwFoAUs1TTKMu/0e880pJoojsPzGDjosUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
YTAzNzViMzktZjk0OS00Y2I1LWI1MTktZjk0MDA4YjE2NTRjLTAvMC9CMzU0RDMy
OENCQkZEMUVGM0NEMjkyNjhBMjNCMEZDQzYwRTNBMkM1LmNybDCBngYIKwYBBQUH
AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5LzYxNzA4YTZiLTZjM2EtNDBhMC1hMzAyLTU5NWVj
YzE3ODQ4Yy8wL0IzNTREMzI4Q0JCRkQxRUYzQ0QyOTI2OEEyM0IwRkNDNjBFM0Ey
QzUuY2VyMIGkBggrBgEFBQcBCwSBlzCBlDCBkQYIKwYBBQUHMAuGgYRyc3luYzov
L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9hMDM3NWIzOS1mOTQ5LTRjYjUtYjUx
OS1mOTQwMDhiMTY1NGMtMC8wLzM2MzIyZTMxMzQzNDJlMzMzNDJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMyMzAzMzM3MzUzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAD6QIjANBgkqhkiG
9w0BAQsFAAOCAQEAaIZR0pYnBLIucrFlrGoQHQ9AhVnwjLPoq8GT8nEwFJVg2pt3
O2gIB1DakofcmnNy16HbxY7bNVN7YDj9XfmLh9OFPevgAW1jjSxkE8M25mZhfI9j
GpcxmBunWbJJ/7RoCoFz8aApd4eaHYxzC97EE9OmlZ6gCDBwbmeVG/kcTJOqdrUK
59sF5OwNHFVEQ1JiVloGVwWNb0TzTl3dN/kIjBkmbvuZVGZuL5jvKPcqR/yD87Ow
oAhcPtS0QgOCUxLyefIYdcItvRP14aszL74RAokFj+TWYsRys4MV7ntUE0dfaO++
/Z6+UfQZ8T69R/GcZNby30EZOtQkrN2XoIIqfQ==
-----END CERTIFICATE-----
Generated at Mon Oct 19 13:55:48 2026 by rpki-client