Route Origin Authorization

$ rpki-client -vvvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e33392e302f32342d3234203d3e20313337323335.roa
File:                     36322e3134342e33392e302f32342d3234203d3e20313337323335.roa (raw, json)
Hash identifier:          5Xa1+1xVbppuE0+xVEvH7HGkaiQczj85Hyt0jUhrHe8=
Subject key identifier:   44:7D:CC:49:33:D8:A1:7C:F5:3D:F5:7E:38:59:DD:C9:A0:47:41:20
Certificate issuer:       /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
Certificate serial:       4389ED35AE8402144345B5931974956087173D21
Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e33392e302f32342d3234203d3e20313337323335.roa
Signing time:             Mon 19 Oct 2026 07:59:24 +0000
ROA not before:           Mon 19 Oct 2026 07:54:24 +0000
ROA not after:            Mon 18 Oct 2027 07:59:24 +0000
asID:                     137235
IP address blocks:        62.144.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl
                          rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Nov 2026 09:31:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:89:ed:35:ae:84:02:14:43:45:b5:93:19:74:95:60:87:17:3d:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
        Validity
            Not Before: Oct 19 07:54:24 2026 GMT
            Not After : Oct 18 07:59:24 2027 GMT
        Subject: CN=447DCC4933D8A17CF53DF57E3859DDC9A0474120
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:69:33:f1:ce:8d:d8:9a:4c:c6:df:c8:30:64:
                    03:92:a9:41:b3:4c:96:c3:65:4d:d8:04:3a:9c:6c:
                    a5:a9:a6:cf:fe:58:25:c7:57:b1:be:f1:a1:9e:92:
                    c3:0f:8f:0b:c6:c2:88:b6:93:90:76:45:d5:f0:f3:
                    7e:99:8e:31:5d:96:b9:61:f5:65:1f:8b:7f:57:60:
                    e7:58:a3:53:35:85:d9:8a:a4:f8:18:71:f9:22:73:
                    e4:e2:16:a2:4f:3a:64:3f:eb:43:45:7c:e1:a1:c2:
                    ba:66:ad:53:31:dc:c3:46:5b:69:f5:a8:4e:f3:42:
                    2d:c4:38:6d:ef:da:1d:c0:73:08:3e:ab:a5:d9:35:
                    dd:b2:7d:5b:10:e7:fc:57:17:12:2d:55:03:6e:4a:
                    86:4b:38:35:29:7a:db:20:02:b6:ef:f4:7a:5b:24:
                    65:98:2b:4a:85:16:6c:1d:6e:22:e3:63:af:33:13:
                    f7:6c:7a:b4:ad:d6:7a:4c:4e:69:9e:10:56:82:af:
                    41:5c:35:1a:55:e7:2c:b7:87:a4:8e:cb:88:62:3e:
                    0b:87:45:a3:35:50:cf:6c:d5:d7:f7:a7:75:08:08:
                    58:81:ef:7b:08:59:01:37:82:49:16:31:94:83:d8:
                    cb:b5:fd:31:03:73:19:aa:48:e7:9e:8c:1f:23:e0:
                    c9:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:7D:CC:49:33:D8:A1:7C:F5:3D:F5:7E:38:59:DD:C9:A0:47:41:20
            X509v3 Authority Key Identifier:
                keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e33392e302f32342d3234203d3e20313337323335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.144.39.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:8a:0e:d4:82:bc:6d:0e:87:b7:1e:30:79:21:29:f6:80:b9:
         15:37:59:a6:4b:fd:98:46:0b:ef:e6:73:7b:0f:2d:ae:19:db:
         5c:9a:a2:17:01:cf:39:66:ef:1a:fb:6d:df:0e:51:dc:e4:81:
         3e:3a:d4:15:fb:1e:34:30:04:16:06:95:0f:f7:47:08:0f:76:
         a7:0b:70:cf:89:55:b3:d6:b1:6a:bc:f9:18:8d:3d:03:bf:60:
         bf:77:ed:43:24:c6:be:34:f0:2c:d6:44:51:75:ae:d0:72:02:
         93:c1:a0:5a:cc:65:9d:39:48:40:78:71:e8:02:39:93:ef:55:
         46:65:cb:04:2c:f3:e9:f7:8d:05:2c:5b:46:21:a4:82:73:64:
         58:3b:d7:fd:e3:e9:ae:a2:11:08:78:4f:92:a0:62:b2:56:a2:
         3b:6d:85:44:d8:d2:46:3a:32:ef:32:58:f6:62:7a:b9:fa:f4:
         5e:58:2b:32:ea:c0:67:eb:8a:d1:fc:64:27:f0:5d:68:ac:72:
         20:9f:fb:67:3d:b1:ee:6b:b7:ea:f1:0c:53:d3:62:75:99:16:
         90:88:11:5d:91:b9:9e:b3:51:80:59:b8:fb:89:60:79:fc:d7:
         58:cc:40:e5:91:88:c7:88:a0:36:0c:70:cd:b2:89:00:83:2a:
         41:ef:41:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 22:09:08 2026 by rpki-client