Route Origin Authorization

$ rpki-client -vvvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e33362e302f32342d3234203d3e203136323736.roa
File:                     36322e3134342e33362e302f32342d3234203d3e203136323736.roa (raw, json)
Hash identifier:          7jzinPB2uvyEMzhK9ZPOSkk8AWu8rkvyefbV1QWG0FU=
Subject key identifier:   E9:4B:71:E9:E6:46:AD:3B:C0:A3:5F:F7:11:8C:A2:04:A4:1C:14:55
Certificate issuer:       /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
Certificate serial:       09B4F92787B44DA856942F4A05741C6DE34C6210
Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e33362e302f32342d3234203d3e203136323736.roa
Signing time:             Fri 16 Oct 2026 09:16:43 +0000
ROA not before:           Fri 16 Oct 2026 09:11:43 +0000
ROA not after:            Fri 15 Oct 2027 09:16:43 +0000
asID:                     16276
IP address blocks:        62.144.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl
                          rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Nov 2026 15:54:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:b4:f9:27:87:b4:4d:a8:56:94:2f:4a:05:74:1c:6d:e3:4c:62:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
        Validity
            Not Before: Oct 16 09:11:43 2026 GMT
            Not After : Oct 15 09:16:43 2027 GMT
        Subject: CN=E94B71E9E646AD3BC0A35FF7118CA204A41C1455
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:d4:10:0f:83:b2:6f:3b:87:25:a1:c6:d4:ea:
                    59:15:73:b2:07:d6:08:2a:c1:a8:42:19:e0:ae:ae:
                    d6:ee:6d:90:25:e8:65:2c:f6:01:e3:c5:c5:da:3e:
                    ac:4f:85:cb:50:e3:67:63:11:c7:12:4b:3c:19:8c:
                    dd:15:73:27:95:05:e5:ea:2a:d0:0f:e8:e1:4c:c6:
                    e0:92:47:7d:1c:a3:91:53:97:29:94:c5:e4:0a:e9:
                    af:8d:3b:76:ef:55:81:aa:3f:02:03:cd:de:18:68:
                    49:37:42:8d:7d:02:3b:95:c2:15:e1:f4:e0:4b:fd:
                    2a:82:43:56:b9:7b:8a:1a:88:d0:8e:27:17:e3:96:
                    36:b6:43:90:a5:df:d0:8a:f9:db:da:63:7d:0f:d6:
                    82:91:b7:86:53:fe:d3:a6:e0:71:5c:ef:83:20:85:
                    9e:ea:f1:7b:b6:44:a8:b3:37:32:19:42:a8:8f:ce:
                    d9:f5:0b:58:b5:b4:35:08:f8:22:83:e9:fb:8b:f0:
                    2a:ec:6a:5b:70:4c:7f:6e:aa:2a:13:e6:33:f5:85:
                    9d:bf:00:b5:cb:c3:33:5a:1d:a5:d4:9e:ae:b7:e4:
                    7b:1f:89:0f:a1:0c:4f:61:a3:b6:4b:c9:87:bc:b7:
                    94:61:05:62:21:d0:6a:1e:bf:37:86:0e:b3:bd:cd:
                    2d:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:4B:71:E9:E6:46:AD:3B:C0:A3:5F:F7:11:8C:A2:04:A4:1C:14:55
            X509v3 Authority Key Identifier:
                keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e33362e302f32342d3234203d3e203136323736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.144.36.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bc:ee:09:c2:3b:92:06:ca:c2:18:7f:f5:85:7b:a7:dc:99:9d:
         35:c2:f2:4f:39:0c:a0:a2:c2:31:7f:83:ff:57:ce:e8:80:e7:
         c7:61:83:43:fa:55:d0:17:9e:af:7d:a0:97:79:22:31:be:69:
         c2:69:ab:57:1f:4b:05:b7:b9:81:40:df:9b:e0:06:24:ec:43:
         e7:1e:4b:94:d0:e1:7e:95:fc:cd:26:19:ba:57:4c:24:49:76:
         ef:00:f2:21:1a:9e:34:1f:c7:66:83:b4:b0:46:98:67:13:cd:
         32:35:23:92:74:df:b3:84:da:33:74:5f:ea:25:18:e8:4d:a8:
         32:b5:ee:6e:ed:59:1f:2e:87:e3:24:21:70:32:27:2a:90:70:
         f2:4c:cd:f4:2c:00:6d:de:c4:d2:ec:a5:25:99:f2:6b:e6:3e:
         92:e0:9b:96:94:47:87:10:ab:49:5d:4a:df:3c:55:6e:a6:a3:
         fb:a9:3b:db:6b:a0:47:46:52:1e:fe:ff:2e:24:90:2f:dd:0b:
         7c:54:00:c8:01:27:a1:b2:bc:09:c9:38:a7:34:d9:3f:00:7a:
         0f:f3:86:37:78:5d:49:2e:65:52:d2:c3:3d:30:8e:e8:05:a5:
         46:b8:d0:cf:8d:c1:6a:a0:2a:85:1c:b5:8e:8c:43:3d:82:44:
         29:f2:b5:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 06:56:25 2026 by rpki-client