Route Origin Authorization

$ rpki-client -vvvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e34392e302f32342d3234203d3e20323138373032.roa
File:                     36322e3134342e34392e302f32342d3234203d3e20323138373032.roa (raw, json)
Hash identifier:          q4U3fMWYfpLk21lEZvUKyDxgYoaQNa5F0oS7gTR+uuc=
Subject key identifier:   9C:71:B9:F0:25:E9:BA:CA:8A:8F:5D:D3:76:8D:36:66:4A:B4:7E:12
Certificate issuer:       /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
Certificate serial:       5C147C8CD9470A0E9EBEAB4ADC90ED85F59639CC
Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e34392e302f32342d3234203d3e20323138373032.roa
Signing time:             Tue 13 Oct 2026 08:10:59 +0000
ROA not before:           Tue 13 Oct 2026 08:05:59 +0000
ROA not after:            Tue 12 Oct 2027 08:10:59 +0000
asID:                     218702
IP address blocks:        62.144.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl
                          rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 24 Oct 2026 21:53:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:14:7c:8c:d9:47:0a:0e:9e:be:ab:4a:dc:90:ed:85:f5:96:39:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
        Validity
            Not Before: Oct 13 08:05:59 2026 GMT
            Not After : Oct 12 08:10:59 2027 GMT
        Subject: CN=9C71B9F025E9BACA8A8F5DD3768D36664AB47E12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:be:df:54:9f:83:14:db:18:9b:d6:76:91:ed:
                    df:58:5f:d4:ff:db:41:6f:7e:61:27:31:34:fa:0f:
                    ae:3d:79:f5:da:7c:7f:ea:0c:e2:fc:c0:ec:8f:6c:
                    18:4e:3e:67:28:f2:92:94:95:c5:8d:0b:93:22:71:
                    61:a3:d0:f3:35:1a:b1:c0:aa:79:15:40:9e:de:15:
                    f0:43:63:00:ff:cb:59:d4:88:ba:1a:41:aa:ac:63:
                    86:4c:d6:6b:f4:fb:84:e2:ee:cc:94:83:e6:1d:93:
                    b2:ae:1c:98:db:fa:b6:a3:9e:0d:fd:c0:86:25:0d:
                    3d:20:cb:53:a4:84:22:72:21:2e:3b:95:d6:ed:12:
                    a8:10:28:b1:45:4e:ba:ab:88:fb:05:10:c0:80:96:
                    ba:37:32:11:b4:64:59:a4:7b:5b:03:e8:5b:1d:ac:
                    78:56:bb:d9:14:0f:ce:28:43:52:b1:5b:3b:ad:24:
                    03:b8:da:bf:cc:e7:43:8d:7a:cf:30:9c:44:88:e0:
                    58:f8:4b:f6:2c:1a:67:6e:1d:05:42:e0:fd:de:90:
                    fb:b4:03:d8:ce:2f:64:20:8f:97:d7:b6:6a:ea:13:
                    f0:7b:a9:90:17:ad:78:3b:a9:68:46:bb:e1:f2:23:
                    b1:67:c8:91:15:ff:e6:b2:dd:6e:0a:58:d2:65:65:
                    81:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:71:B9:F0:25:E9:BA:CA:8A:8F:5D:D3:76:8D:36:66:4A:B4:7E:12
            X509v3 Authority Key Identifier:
                keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e34392e302f32342d3234203d3e20323138373032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.144.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:bf:3e:a9:6c:59:16:9d:19:ca:85:87:20:b7:fd:dd:15:b0:
         87:90:ff:c0:33:8a:6e:e6:44:e4:52:7a:6e:d1:64:6b:17:a2:
         42:0c:b8:c5:17:0a:c4:b7:bf:73:79:a4:6a:c3:c5:f8:8e:40:
         dc:05:a7:17:4e:3f:f6:e5:28:cd:23:b5:d0:2d:a4:8d:78:e7:
         cd:16:ec:29:ff:da:11:5a:a5:2d:60:0f:bb:53:50:2d:4a:8c:
         d1:b8:9d:a4:bb:5f:d7:32:f9:af:50:16:2b:6c:97:a1:18:4f:
         af:b7:89:70:25:9e:5f:f4:1c:61:81:dd:9e:0b:78:a2:8d:75:
         06:74:37:98:9a:ca:73:c8:c5:8d:5d:0b:9f:cb:f3:1c:e8:85:
         97:9a:9c:56:09:b7:eb:8e:65:00:4a:1f:8c:90:45:d4:97:de:
         36:8d:46:cc:29:23:b9:30:ad:8d:ea:68:52:1f:30:58:ff:ad:
         da:8d:6c:d5:9b:95:14:ce:cd:ba:3a:29:3e:93:ca:3b:4b:62:
         bb:14:c6:b8:91:17:86:79:f2:b6:f0:54:57:58:43:81:c6:a2:
         db:c0:40:8c:04:78:73:79:7b:9f:89:4e:30:d7:45:1a:8c:3a:
         d8:3d:65:69:ea:25:f2:52:cd:17:0c:b3:9e:d3:3e:25:6a:90:
         5a:c6:90:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 11:24:25 2026 by rpki-client