Route Origin Authorization

$ rpki-client -vvvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e34302e302f32342d3234203d3e20383334.roa
File:                     36322e3134342e34302e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          VSkoGCGLEm5geiMfQRJ9f70UVwoFQ1YFKuHWezZmmoE=
Subject key identifier:   A0:A6:FE:A2:E0:08:B9:22:8A:16:0A:3D:DA:B5:80:17:8C:B4:E8:1A
Certificate issuer:       /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
Certificate serial:       5BE8421D2B0FA2AA37C5AD0E033B1B0571165987
Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e34302e302f32342d3234203d3e20383334.roa
Signing time:             Mon 19 Oct 2026 10:54:39 +0000
ROA not before:           Mon 19 Oct 2026 10:49:39 +0000
ROA not after:            Mon 18 Oct 2027 10:54:39 +0000
asID:                     834
IP address blocks:        62.144.40.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl
                          rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 22 Oct 2026 04:58:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:e8:42:1d:2b:0f:a2:aa:37:c5:ad:0e:03:3b:1b:05:71:16:59:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
        Validity
            Not Before: Oct 19 10:49:39 2026 GMT
            Not After : Oct 18 10:54:39 2027 GMT
        Subject: CN=A0A6FEA2E008B9228A160A3DDAB580178CB4E81A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:fe:a8:2e:66:aa:a1:3c:d8:9a:1b:92:c8:17:
                    0c:f1:dc:e9:9b:dc:9e:a8:e4:15:b3:34:ec:98:b8:
                    42:1d:1f:5e:44:67:0d:a3:dd:5b:71:ed:31:7a:2d:
                    a8:5f:35:27:8a:ee:c2:e2:a0:d4:df:58:20:e1:25:
                    c9:a6:e7:09:bd:59:06:f7:b6:d9:26:a7:1a:53:37:
                    57:14:de:d3:bc:a3:30:15:13:8f:4f:14:4c:46:b2:
                    ab:e0:0c:1c:36:0a:b1:94:03:e2:63:4c:ac:be:89:
                    7d:4b:77:93:d1:37:82:6c:3f:94:64:64:25:09:1d:
                    28:95:f1:2c:79:ad:97:f2:65:bc:5e:37:ba:e5:62:
                    35:2d:8b:66:d9:e4:a4:9d:2d:2d:37:e3:84:5e:c6:
                    de:a3:be:bb:1f:38:50:e1:54:8c:75:14:e4:69:17:
                    03:e9:7d:14:5d:d5:ca:62:57:17:83:31:c2:b3:04:
                    51:22:57:e2:f9:28:16:67:12:f9:9f:b8:d3:2d:ca:
                    28:4d:53:bc:b6:fd:d4:b4:2d:07:a6:38:07:3c:45:
                    e2:16:15:44:32:22:1a:9f:33:fe:b2:f7:84:d7:1a:
                    05:2f:13:f0:a9:36:de:c3:89:8d:b1:ac:4f:c4:c5:
                    fb:da:f5:8a:ee:07:79:d7:1d:2e:49:13:27:dd:8a:
                    86:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:A6:FE:A2:E0:08:B9:22:8A:16:0A:3D:DA:B5:80:17:8C:B4:E8:1A
            X509v3 Authority Key Identifier:
                keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e34302e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.144.40.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:38:eb:37:8a:b1:2d:f8:10:7f:8a:f7:b3:a8:1e:bf:cf:b3:
         fd:ca:eb:d0:f9:19:2b:f7:d1:49:41:f1:93:0f:65:39:9e:a4:
         9a:28:ec:fe:53:19:01:29:b6:c2:a7:0e:3d:61:bc:0e:b5:35:
         4d:55:b6:db:0f:66:a6:5b:62:70:d2:87:4c:8a:37:b5:92:57:
         f7:11:4d:cc:0a:b8:39:34:b7:c8:2c:b2:b4:1d:98:fe:46:7c:
         62:2c:77:b2:cf:8a:fe:9e:7a:ef:04:82:03:f1:91:63:3f:4b:
         fe:d9:44:87:88:a8:a3:b7:82:a4:ec:0c:03:2a:55:5f:e6:4c:
         b2:cd:61:83:de:25:02:23:20:2a:5a:59:39:bc:18:cd:2c:12:
         2a:f3:12:d4:06:66:3a:d4:56:b4:2f:b2:e8:cb:42:97:bf:31:
         19:c1:c5:82:59:9b:45:90:60:81:bf:84:30:98:10:4e:6b:f5:
         0b:ed:75:af:ad:09:39:63:dd:d5:1c:17:86:63:8d:1b:91:9b:
         c2:af:b3:3e:74:d6:e6:c7:85:1b:4a:83:03:c5:36:1a:d1:37:
         a1:3d:1d:08:f3:36:c3:39:5d:55:ae:14:27:80:db:3d:00:a6:
         fa:16:a5:50:c0:19:8b:00:84:44:ec:11:f8:08:5a:60:66:38:
         b0:a0:bb:45
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUW+hCHSsPoqo3xa0OAzsbBXEWWYcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjM1NEQzMjhDQkJGRDFFRjNDRDI5MjY4QTIzQjBGQ0M2
MEUzQTJDNTAeFw0yNjEwMTkxMDQ5MzlaFw0yNzEwMTgxMDU0MzlaMDMxMTAvBgNV
BAMTKEEwQTZGRUEyRTAwOEI5MjI4QTE2MEEzRERBQjU4MDE3OENCNEU4MUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz/qguZqqhPNiaG5LIFwzx3Omb
3J6o5BWzNOyYuEIdH15EZw2j3Vtx7TF6LahfNSeK7sLioNTfWCDhJcmm5wm9WQb3
ttkmpxpTN1cU3tO8ozAVE49PFExGsqvgDBw2CrGUA+JjTKy+iX1Ld5PRN4JsP5Rk
ZCUJHSiV8Sx5rZfyZbxeN7rlYjUti2bZ5KSdLS0344Rext6jvrsfOFDhVIx1FORp
FwPpfRRd1cpiVxeDMcKzBFEiV+L5KBZnEvmfuNMtyihNU7y2/dS0LQemOAc8ReIW
FUQyIhqfM/6y94TXGgUvE/CpNt7DiY2xrE/Exfva9YruB3nXHS5JEyfdiob/AgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUoKb+ouAIuSKKFgo92rWAF4y06BowHwYDVR0j
BBgwFoAUs1TTKMu/0e880pJoojsPzGDjosUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
YTAzNzViMzktZjk0OS00Y2I1LWI1MTktZjk0MDA4YjE2NTRjLTAvMC9CMzU0RDMy
OENCQkZEMUVGM0NEMjkyNjhBMjNCMEZDQzYwRTNBMkM1LmNybDCBngYIKwYBBQUH
AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5LzYxNzA4YTZiLTZjM2EtNDBhMC1hMzAyLTU5NWVj
YzE3ODQ4Yy8wL0IzNTREMzI4Q0JCRkQxRUYzQ0QyOTI2OEEyM0IwRkNDNjBFM0Ey
QzUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCBigYIKwYBBQUHMAuGfnJzeW5jOi8v
ci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvL2EwMzc1YjM5LWY5NDktNGNiNS1iNTE5
LWY5NDAwOGIxNjU0Yy0wLzAvMzYzMjJlMzEzNDM0MmUzNDMwMmUzMDJmMzIzNDJk
MzIzNDIwM2QzZTIwMzgzMzM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPpAoMA0GCSqGSIb3DQEBCwUA
A4IBAQCjOOs3irEt+BB/ivezqB6/z7P9yuvQ+Rkr99FJQfGTD2U5nqSaKOz+UxkB
KbbCpw49YbwOtTVNVbbbD2amW2Jw0odMije1klf3EU3MCrg5NLfILLK0HZj+Rnxi
LHeyz4r+nnrvBIID8ZFjP0v+2USHiKijt4Kk7AwDKlVf5kyyzWGD3iUCIyAqWlk5
vBjNLBIq8xLUBmY61Fa0L7Loy0KXvzEZwcWCWZtFkGCBv4QwmBBOa/UL7XWvrQk5
Y93VHBeGY40bkZvCr7M+dNbmx4UbSoMDxTYa0TehPR0I8zbDOV1VrhQngNs9AKb6
FqVQwBmLAIRE7BH4CFpgZjiwoLtF
-----END CERTIFICATE-----
Generated at Wed Oct 21 21:12:44 2026 by rpki-client