Route Origin Authorization

$ rpki-client -vvvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e36322e302f32342d3234203d3e20323034343634.roa
File:                     36322e3134342e36322e302f32342d3234203d3e20323034343634.roa (raw, json)
Hash identifier:          ZSJU9ewuRQehtw0Z8S7XLmZOpWMHQOOAK0doYnHm5wk=
Subject key identifier:   48:C3:7A:5F:C0:6C:7C:18:D1:25:06:AB:88:98:58:3D:6C:2C:06:7F
Certificate issuer:       /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
Certificate serial:       13C5A4676056FBBF1988EC74A16DC0EA1F3B7464
Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e36322e302f32342d3234203d3e20323034343634.roa
Signing time:             Sat 17 Oct 2026 19:44:13 +0000
ROA not before:           Sat 17 Oct 2026 19:39:13 +0000
ROA not after:            Sat 16 Oct 2027 19:44:13 +0000
asID:                     204464
IP address blocks:        62.144.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl
                          rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Oct 2026 16:36:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:c5:a4:67:60:56:fb:bf:19:88:ec:74:a1:6d:c0:ea:1f:3b:74:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
        Validity
            Not Before: Oct 17 19:39:13 2026 GMT
            Not After : Oct 16 19:44:13 2027 GMT
        Subject: CN=48C37A5FC06C7C18D12506AB8898583D6C2C067F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:9d:90:d9:3c:b2:6c:8d:0a:20:ee:5d:42:fa:
                    97:e7:81:7f:9b:18:7f:b5:37:37:f2:15:27:c7:ee:
                    c8:43:11:df:3f:36:70:4b:02:46:de:91:97:67:4c:
                    58:59:a7:37:61:74:44:26:7a:7e:5c:3b:28:a3:b3:
                    9d:77:c1:e9:37:58:2b:84:64:e2:11:4d:99:f7:34:
                    22:f4:80:a2:8e:66:89:93:50:d9:97:eb:a9:c1:63:
                    93:97:bd:15:be:89:74:47:97:2d:b8:7d:7c:bf:de:
                    67:4c:64:cd:d8:a6:9f:e5:a0:44:35:10:ed:b6:17:
                    ed:c3:92:16:7c:be:f6:c2:fd:14:ee:0b:e7:cc:79:
                    19:db:36:d6:e6:e4:ea:2e:8f:58:67:6e:2a:6b:63:
                    5f:81:11:42:df:08:68:96:7b:cc:bf:56:02:bc:03:
                    7b:91:b1:66:8b:f9:ea:99:9d:35:a8:cc:25:90:90:
                    8c:76:54:cd:03:be:19:58:f7:11:52:e2:0e:c1:8b:
                    f9:d7:04:e2:d6:28:94:83:a8:2a:5f:d5:b4:32:3d:
                    3f:0c:17:bb:e0:29:a2:72:61:1e:88:c8:44:43:85:
                    08:e0:6b:ee:75:ee:8d:fc:5f:07:dc:bf:be:14:a6:
                    22:58:21:e6:a6:2e:ab:1a:87:a2:c0:14:b2:e3:05:
                    86:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:C3:7A:5F:C0:6C:7C:18:D1:25:06:AB:88:98:58:3D:6C:2C:06:7F
            X509v3 Authority Key Identifier:
                keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e36322e302f32342d3234203d3e20323034343634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.144.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:a2:bf:39:83:f1:f2:09:f7:06:c1:a1:5e:54:bd:42:c2:4f:
         57:f0:79:6f:47:cb:ed:fb:ce:40:03:d9:84:4d:2d:68:6e:b2:
         75:fa:96:8f:ed:da:f8:a0:92:94:0e:b3:35:e8:82:fa:1f:c9:
         21:b0:ec:f8:e1:99:b2:67:be:30:34:19:0b:67:e9:4a:91:e2:
         e3:93:fd:da:63:43:84:5c:af:0a:bd:da:91:9d:b2:82:41:d4:
         12:57:f8:7a:cc:bc:d2:33:52:9d:78:e5:f1:01:d9:e5:13:ab:
         31:90:f5:35:42:1b:07:5d:8e:c0:e0:1f:a0:91:6e:1e:97:0d:
         dd:7f:9e:b9:d3:03:31:35:73:f5:bf:8e:34:94:23:4f:fd:d7:
         5a:85:ce:24:55:04:4d:47:04:aa:be:1c:d3:68:3a:fb:ec:75:
         b8:42:ad:06:ad:b2:1a:7e:72:65:69:81:e7:3c:23:c0:b7:73:
         92:e6:37:08:a3:83:80:b6:7f:f3:b0:01:0d:a0:87:f1:01:64:
         a1:63:f4:e5:89:ae:26:46:8f:d5:f2:75:06:ce:da:60:df:a5:
         81:8b:9a:d7:aa:a7:bd:b8:86:71:87:38:99:af:ba:ad:0e:f2:
         9c:f9:ae:78:f7:15:3d:ba:02:f3:8c:ef:ca:81:ec:89:6c:0d:
         92:06:a9:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 03:34:14 2026 by rpki-client