Route Origin Authorization

$ rpki-client -vvvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e34312e302f32342d3234203d3e20313939393438.roa
File:                     36322e3134342e34312e302f32342d3234203d3e20313939393438.roa (raw, json)
Hash identifier:          jXd9aWn9wnBq4xZJtNkK9arP0M+Wdx1Ru3Dza+1aQGM=
Subject key identifier:   D6:BF:FE:92:3A:3C:31:C7:CD:8C:AC:6B:47:00:64:CA:45:75:70:68
Certificate issuer:       /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
Certificate serial:       30270ED10B3E7A0B95E763F92F8A5CFCB056F841
Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e34312e302f32342d3234203d3e20313939393438.roa
Signing time:             Mon 19 Oct 2026 10:53:32 +0000
ROA not before:           Mon 19 Oct 2026 10:48:32 +0000
ROA not after:            Mon 18 Oct 2027 10:53:32 +0000
asID:                     199948
IP address blocks:        62.144.41.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl
                          rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Oct 2026 05:19:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:27:0e:d1:0b:3e:7a:0b:95:e7:63:f9:2f:8a:5c:fc:b0:56:f8:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
        Validity
            Not Before: Oct 19 10:48:32 2026 GMT
            Not After : Oct 18 10:53:32 2027 GMT
        Subject: CN=D6BFFE923A3C31C7CD8CAC6B470064CA45757068
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:4f:c8:58:88:ed:6e:cb:30:01:62:02:e8:d5:
                    56:d5:32:23:65:9f:c3:81:fe:e9:c7:9b:40:35:9c:
                    ff:43:e9:00:42:e8:12:d1:23:ec:7f:b1:19:7e:55:
                    05:1c:df:73:f5:26:50:cb:fe:7e:57:77:43:46:ea:
                    73:4a:bf:e4:45:97:89:eb:e7:14:b4:29:f3:c4:b4:
                    4b:4e:71:fd:9a:03:1c:72:ee:98:c4:bf:89:16:d2:
                    1b:bb:ed:63:0d:20:15:0c:44:a7:df:f2:3e:1a:32:
                    68:a4:7e:2e:56:d6:00:94:4e:d5:01:68:9c:f6:f4:
                    93:97:8f:db:f8:d8:eb:c8:ea:67:cd:a0:58:f0:6c:
                    2b:d7:3a:20:34:51:66:ee:90:e4:62:65:79:53:da:
                    b7:eb:6f:b2:00:4a:ac:a5:3b:62:ce:98:a9:b4:c1:
                    18:80:3f:e9:3c:26:77:0f:eb:36:e4:21:21:0c:a0:
                    75:82:cc:78:3a:78:7e:2e:fd:00:0a:ee:58:9f:cc:
                    59:16:73:40:1a:fc:6f:6f:74:a2:98:2e:50:a7:8c:
                    64:7c:34:51:18:29:7c:5e:b4:e9:15:0c:60:3c:1e:
                    2b:8f:f8:af:f7:db:46:95:db:6a:46:62:c4:be:72:
                    03:c0:12:2a:23:71:fc:34:09:88:bd:67:b8:33:c3:
                    8b:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:BF:FE:92:3A:3C:31:C7:CD:8C:AC:6B:47:00:64:CA:45:75:70:68
            X509v3 Authority Key Identifier:
                keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e34312e302f32342d3234203d3e20313939393438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.144.41.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:61:4c:70:fe:2b:5b:f3:cf:55:4a:2d:9e:52:a0:7b:21:b3:
         11:3e:0a:6b:87:56:c3:b2:3b:6d:38:dd:ed:f0:fe:54:aa:44:
         b6:36:fb:ea:d2:1b:6d:92:6a:35:a7:4b:0b:98:e5:75:90:ad:
         95:c4:d4:2e:77:cc:43:bd:fa:2e:9c:ce:58:53:ab:0b:39:30:
         6b:ec:44:68:5a:8e:93:81:c7:a2:96:0a:f4:6d:97:59:54:68:
         c9:e6:ce:da:bd:99:fe:78:0d:dc:9e:13:e2:23:01:38:b9:47:
         b3:93:7f:b2:e4:50:73:c6:53:37:9d:84:cc:c4:67:8b:bd:c3:
         39:00:54:5c:64:2a:e5:c3:5e:2a:c8:69:5b:2c:ba:4f:91:ff:
         d3:8f:e1:37:9d:5e:87:2f:17:d6:e4:95:6f:e1:cb:10:a1:ad:
         42:a4:64:dc:b5:67:69:e8:b3:6e:5d:04:1f:e1:f1:94:39:31:
         eb:f3:91:4b:8e:87:5f:bb:f5:cf:90:dc:46:0f:28:b5:56:9b:
         77:43:36:e5:96:86:0e:a3:39:5d:09:4d:65:52:be:4b:ac:41:
         59:60:7c:bb:a7:47:0a:cd:8e:ca:c0:50:82:f1:22:21:a3:2c:
         ea:ee:6f:67:41:aa:69:2f:97:05:82:93:18:b9:a2:2b:91:4c:
         5a:e7:00:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 00:15:04 2026 by rpki-client