Route Origin Authorization

$ rpki-client -vvvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e34322e302f32342d3234203d3e20323734303237.roa
File:                     36322e3134342e34322e302f32342d3234203d3e20323734303237.roa (raw, json)
Hash identifier:          irAb3Tz8N8H5c5BYY/XgZ/dJCKbWV/dsacVWrGQYtYA=
Subject key identifier:   D1:02:11:D8:F7:B7:AC:80:5E:33:B0:8D:54:13:13:C4:EC:B9:E2:D6
Certificate issuer:       /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
Certificate serial:       1B8A81E73954573647B44A5A2C3493ACD8993268
Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e34322e302f32342d3234203d3e20323734303237.roa
Signing time:             Mon 19 Oct 2026 18:21:22 +0000
ROA not before:           Mon 19 Oct 2026 18:16:22 +0000
ROA not after:            Mon 18 Oct 2027 18:21:22 +0000
asID:                     274027
IP address blocks:        62.144.42.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl
                          rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Oct 2026 17:04:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:8a:81:e7:39:54:57:36:47:b4:4a:5a:2c:34:93:ac:d8:99:32:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
        Validity
            Not Before: Oct 19 18:16:22 2026 GMT
            Not After : Oct 18 18:21:22 2027 GMT
        Subject: CN=D10211D8F7B7AC805E33B08D541313C4ECB9E2D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:06:63:b5:69:35:79:c7:a6:09:a3:35:d8:40:
                    03:ac:d7:f9:e1:34:90:b4:b5:ec:3b:af:a4:55:4f:
                    8a:70:ce:c5:a1:1e:d6:90:4b:50:42:a4:ec:a5:30:
                    74:78:01:29:c2:b6:35:0d:39:db:83:72:cc:b9:18:
                    cd:ee:f5:99:26:03:11:b0:57:00:f5:b5:69:f2:59:
                    9e:58:a4:30:6f:f6:f7:d1:6a:14:b9:85:34:66:c0:
                    de:cc:10:cc:1f:73:fe:67:2f:2d:87:9d:e4:00:37:
                    5d:14:f3:dd:87:e1:6c:a2:5d:9c:27:0b:73:4a:b2:
                    14:dd:b9:32:3c:33:30:55:92:22:b3:12:cc:9e:87:
                    b2:fd:e0:c0:e0:c5:7e:20:f3:86:20:34:cc:f6:e7:
                    89:24:d0:b2:45:fa:e4:30:09:dc:14:5a:57:c5:9f:
                    94:11:89:3b:7d:87:7d:ef:00:56:82:b2:30:ad:c0:
                    2b:2b:02:c4:cc:79:38:4d:b8:f6:07:14:44:f9:20:
                    aa:af:aa:df:fb:03:be:a0:94:95:5e:64:9f:d8:19:
                    da:25:e0:08:6d:67:f8:33:01:98:74:9f:d7:cf:d3:
                    33:8b:98:d7:3c:9d:98:e5:d1:f1:62:2d:cf:e7:17:
                    08:c5:cb:4e:c2:75:ee:62:46:a7:79:d3:6b:1e:05:
                    ba:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:02:11:D8:F7:B7:AC:80:5E:33:B0:8D:54:13:13:C4:EC:B9:E2:D6
            X509v3 Authority Key Identifier:
                keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e34322e302f32342d3234203d3e20323734303237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.144.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         be:3c:da:99:2a:2c:d8:ae:f3:76:e8:2d:cd:93:f9:17:00:be:
         7f:ba:c3:20:ed:48:70:8e:01:48:82:a1:e2:f1:c7:df:d0:a0:
         42:66:26:14:0e:cf:bc:b6:32:a8:d0:32:0a:78:49:5e:90:26:
         59:c4:4a:66:a1:d7:c3:14:21:4d:15:ab:75:b4:24:7e:83:06:
         f6:aa:f1:c8:6a:cb:8f:be:49:36:e2:84:b6:11:43:59:05:dc:
         0c:6d:8f:e8:b5:4f:ab:7e:8c:0a:6c:7a:4d:a0:dc:28:67:83:
         73:49:02:b8:11:60:c6:19:f4:66:83:62:f9:58:f2:34:28:f9:
         99:ee:24:79:d5:de:20:93:c6:ff:a5:14:c4:aa:a4:54:d0:10:
         11:bd:4e:df:8f:8d:c9:77:e3:e2:09:e6:30:9d:6f:45:28:93:
         08:73:f3:cb:12:db:74:06:f1:a4:46:e7:16:be:37:63:2d:d9:
         83:0c:32:d4:35:c3:ea:81:b6:af:fb:46:c6:72:a4:35:86:67:
         8e:27:9a:8a:89:01:af:df:86:32:7c:0e:0f:2b:d4:58:9a:3b:
         bf:3e:31:f1:64:ca:ca:38:2a:e8:64:eb:c9:6f:1e:d5:6f:b2:
         42:e0:43:62:16:b8:d9:92:cd:79:67:69:3e:d1:5f:e3:1c:75:
         1c:42:b1:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 07:57:43 2026 by rpki-client