Route Origin Authorization

$ rpki-client -vvvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e35342e302f32342d3234203d3e20323138393434.roa
File:                     36322e3134342e35342e302f32342d3234203d3e20323138393434.roa (raw, json)
Hash identifier:          KrUeZKM1x/faftSw9kMYslAvtWlhjBMiVPmR5qNDaHE=
Subject key identifier:   E0:0C:D7:8F:76:9C:4E:D7:D7:42:4F:3C:75:C9:7B:CD:02:50:49:B3
Certificate issuer:       /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
Certificate serial:       6B41BC88634E1C55B4E2D311403F4E0368236F4E
Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e35342e302f32342d3234203d3e20323138393434.roa
Signing time:             Mon 12 Oct 2026 21:58:54 +0000
ROA not before:           Mon 12 Oct 2026 21:53:54 +0000
ROA not after:            Mon 11 Oct 2027 21:58:54 +0000
asID:                     218944
IP address blocks:        62.144.54.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl
                          rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 29 Oct 2026 10:48:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:41:bc:88:63:4e:1c:55:b4:e2:d3:11:40:3f:4e:03:68:23:6f:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
        Validity
            Not Before: Oct 12 21:53:54 2026 GMT
            Not After : Oct 11 21:58:54 2027 GMT
        Subject: CN=E00CD78F769C4ED7D7424F3C75C97BCD025049B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:fb:ee:23:c1:29:ed:71:5d:5f:e2:56:95:ae:
                    c2:aa:22:3a:06:84:e4:05:ce:5d:d5:80:36:1f:b3:
                    c7:33:30:28:01:d7:37:1b:6c:c5:f4:08:3d:c7:79:
                    74:df:aa:b4:48:a5:24:ef:81:12:3e:ed:dd:cb:ad:
                    09:dd:0f:41:1f:80:3e:f2:30:e9:01:95:c0:c4:f1:
                    b5:a7:bd:37:07:41:94:cb:43:51:0b:4a:cb:7e:47:
                    99:fa:48:ec:a0:b9:5d:e6:6a:73:64:2d:98:7e:01:
                    15:13:29:ea:49:c5:db:b7:43:e2:49:6c:2a:7f:31:
                    b6:af:91:81:9c:ab:d2:60:29:36:29:35:c8:c9:f3:
                    12:7d:a1:9a:78:9f:7d:90:a6:d9:11:26:5c:c0:f3:
                    cd:d6:5d:24:19:3f:21:50:fd:42:15:a8:6b:b7:e6:
                    6c:d1:ff:72:54:73:1d:b7:83:f1:2b:a7:4d:69:be:
                    2e:24:3d:2f:6c:27:ab:1a:e0:a7:39:0d:ee:01:2a:
                    88:a1:5f:81:85:f2:ad:8d:81:c4:45:37:89:0a:48:
                    90:fb:71:09:08:7a:12:ef:f9:07:68:0d:b4:5c:6e:
                    70:fb:57:8e:23:af:5c:21:2e:c8:1f:81:6f:dd:63:
                    19:67:1b:ba:09:8c:ae:c4:5c:a6:c8:f1:90:a2:56:
                    d5:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:0C:D7:8F:76:9C:4E:D7:D7:42:4F:3C:75:C9:7B:CD:02:50:49:B3
            X509v3 Authority Key Identifier:
                keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e35342e302f32342d3234203d3e20323138393434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.144.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:73:ab:97:f2:3b:95:fe:89:63:0e:5c:9a:7a:92:d7:ee:5f:
         50:be:a5:51:ca:52:99:df:9b:67:c2:3e:86:a3:56:e0:50:cd:
         a5:9b:a2:08:af:54:6a:95:1b:23:90:88:bb:2d:3e:45:84:7f:
         60:14:ed:38:e0:84:d7:1f:52:86:2a:2f:ad:d3:4f:d8:bf:40:
         35:37:24:e7:cf:16:fb:2f:4b:95:94:85:b7:1c:15:75:1a:b2:
         48:96:12:0b:d8:42:32:12:3a:93:94:fd:75:7c:63:1f:63:f4:
         02:c9:d7:a0:f5:2e:47:95:2b:96:8f:57:be:59:a9:3f:a5:cf:
         7c:fc:c4:f8:4d:dc:03:ad:8a:48:17:0e:d4:5e:a0:58:b5:c7:
         41:4a:b3:8d:14:a7:2b:bb:c2:ca:08:c1:80:71:36:b5:d1:68:
         db:85:7f:be:74:2e:ea:d1:43:07:12:c4:02:54:08:ad:87:a9:
         39:76:a5:45:86:b3:de:e8:f1:e7:13:c4:82:7a:f4:39:98:67:
         af:4f:51:82:19:48:6a:52:ab:0a:bc:3a:8f:8c:e4:b0:07:1b:
         47:d6:62:42:7e:7c:6e:1a:73:9b:08:49:de:04:78:a9:cf:af:
         6b:17:b5:ff:94:95:fa:82:aa:f1:2c:2b:e7:42:20:c6:13:2a:
         01:9a:4d:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 18:57:43 2026 by rpki-client