Route Origin Authorization

$ rpki-client -vvvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e35302e302f32342d3234203d3e2037303239.roa
File:                     36322e3134342e35302e302f32342d3234203d3e2037303239.roa (raw, json)
Hash identifier:          vwIfBYnheWhMJEhQqPI2uGebLGicjC8iWrT91dLRh/0=
Subject key identifier:   8C:4A:9E:5E:28:3A:F9:CD:65:2D:60:C4:D4:B0:EE:B5:9B:9A:F7:5F
Certificate issuer:       /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
Certificate serial:       65B69E144163DD12A90A807B168F2E1B4F7652CF
Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e35302e302f32342d3234203d3e2037303239.roa
Signing time:             Mon 12 Oct 2026 00:02:10 +0000
ROA not before:           Sun 11 Oct 2026 23:57:10 +0000
ROA not after:            Mon 11 Oct 2027 00:02:10 +0000
asID:                     7029
IP address blocks:        62.144.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl
                          rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 18 Oct 2026 05:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:b6:9e:14:41:63:dd:12:a9:0a:80:7b:16:8f:2e:1b:4f:76:52:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
        Validity
            Not Before: Oct 11 23:57:10 2026 GMT
            Not After : Oct 11 00:02:10 2027 GMT
        Subject: CN=8C4A9E5E283AF9CD652D60C4D4B0EEB59B9AF75F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:5a:55:21:7e:b2:43:cf:9f:85:73:25:f7:48:
                    4a:8e:aa:23:fa:08:6e:1e:2c:63:9a:1b:8c:d3:15:
                    6e:3b:d1:6e:0d:4e:cb:bc:4a:7a:0b:5c:a8:bb:59:
                    0a:03:19:2a:b0:d0:21:c2:8b:8d:e4:93:cc:01:67:
                    44:c5:26:92:ff:65:37:9b:de:02:3a:92:1b:a1:ec:
                    fa:2c:3e:ae:4b:e2:73:bf:01:fa:a2:07:3e:fd:db:
                    e1:00:cc:69:55:21:d1:25:6b:08:7f:c5:d9:11:e5:
                    ae:58:47:6a:14:10:0c:65:d6:10:77:7d:b2:32:03:
                    d4:38:dd:88:01:fe:09:63:83:4e:49:9d:db:d9:aa:
                    0a:85:d8:08:c3:a1:90:5d:57:45:53:30:da:48:73:
                    02:60:1b:10:cd:9a:49:e1:e8:ec:70:69:f4:a4:27:
                    3b:17:8c:69:a1:df:06:bb:1a:29:b0:24:1a:47:7a:
                    6c:2c:16:47:6c:69:6c:1e:a3:4b:90:57:f2:40:9a:
                    1c:51:cb:94:58:9d:b4:2b:9c:76:77:db:e4:d0:2c:
                    a7:c2:7b:1f:1f:d5:48:ab:df:e5:cd:cb:22:cf:1f:
                    95:71:fd:b8:68:2a:87:93:f1:e1:99:5d:84:a8:55:
                    d8:97:4a:1b:3f:4e:0b:e8:83:0b:fa:3a:f6:2c:b6:
                    02:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:4A:9E:5E:28:3A:F9:CD:65:2D:60:C4:D4:B0:EE:B5:9B:9A:F7:5F
            X509v3 Authority Key Identifier:
                keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e35302e302f32342d3234203d3e2037303239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.144.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b4:ec:58:34:31:13:58:bc:6a:85:7a:5b:f1:90:87:3f:b6:70:
         f2:ab:f3:b4:00:f5:93:d2:bf:e4:ac:3c:5a:5d:73:70:92:56:
         a2:0d:70:cf:be:6a:62:6d:24:29:f8:1e:5c:25:99:ca:36:a5:
         aa:8e:13:08:d5:70:8c:15:be:23:58:fd:b1:d5:c7:4e:76:e6:
         bb:51:8d:19:31:83:26:4a:67:68:5f:cb:1b:50:fa:b5:96:79:
         46:dc:47:d6:90:81:97:09:ab:59:f3:51:a4:41:8a:d7:83:ee:
         93:2a:87:2c:06:12:bf:32:8c:83:83:b9:93:fc:23:8d:55:73:
         0e:a3:e1:67:84:69:9f:ab:50:92:67:12:72:0a:d4:e8:bd:0e:
         2a:ed:cc:58:cc:a2:88:85:80:4f:ef:79:c6:e8:4a:b4:85:a7:
         46:4b:56:e0:ee:1f:55:fb:5e:d2:92:c4:85:63:dd:8e:af:5d:
         81:7d:16:da:d0:c7:b9:1f:3c:fb:e6:4c:dc:0b:11:19:fd:06:
         a7:9d:78:7e:f3:da:61:fd:18:82:ff:0b:05:fc:70:7f:5f:cd:
         76:4e:15:60:7c:e5:c2:1c:ba:76:ca:36:80:fe:2a:00:68:39:
         4f:05:c8:4d:1b:44:74:f4:a9:77:6e:77:c3:64:ee:d3:3e:68:
         ca:e1:14:33
-----BEGIN CERTIFICATE-----
MIIFVDCCBDygAwIBAgIUZbaeFEFj3RKpCoB7Fo8uG092Us8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjM1NEQzMjhDQkJGRDFFRjNDRDI5MjY4QTIzQjBGQ0M2
MEUzQTJDNTAeFw0yNjEwMTEyMzU3MTBaFw0yNzEwMTEwMDAyMTBaMDMxMTAvBgNV
BAMTKDhDNEE5RTVFMjgzQUY5Q0Q2NTJENjBDNEQ0QjBFRUI1OUI5QUY3NUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWWlUhfrJDz5+FcyX3SEqOqiP6
CG4eLGOaG4zTFW470W4NTsu8SnoLXKi7WQoDGSqw0CHCi43kk8wBZ0TFJpL/ZTeb
3gI6khuh7PosPq5L4nO/AfqiBz792+EAzGlVIdElawh/xdkR5a5YR2oUEAxl1hB3
fbIyA9Q43YgB/gljg05JndvZqgqF2AjDoZBdV0VTMNpIcwJgGxDNmknh6OxwafSk
JzsXjGmh3wa7GimwJBpHemwsFkdsaWweo0uQV/JAmhxRy5RYnbQrnHZ32+TQLKfC
ex8f1Uir3+XNyyLPH5Vx/bhoKoeT8eGZXYSoVdiXShs/Tgvogwv6OvYstgJ1AgMB
AAGjggJeMIICWjAdBgNVHQ4EFgQUjEqeXig6+c1lLWDE1LDutZua918wHwYDVR0j
BBgwFoAUs1TTKMu/0e880pJoojsPzGDjosUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
YTAzNzViMzktZjk0OS00Y2I1LWI1MTktZjk0MDA4YjE2NTRjLTAvMC9CMzU0RDMy
OENCQkZEMUVGM0NEMjkyNjhBMjNCMEZDQzYwRTNBMkM1LmNybDCBngYIKwYBBQUH
AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5LzYxNzA4YTZiLTZjM2EtNDBhMC1hMzAyLTU5NWVj
YzE3ODQ4Yy8wL0IzNTREMzI4Q0JCRkQxRUYzQ0QyOTI2OEEyM0IwRkNDNjBFM0Ey
QzUuY2VyMIGgBggrBgEFBQcBCwSBkzCBkDCBjQYIKwYBBQUHMAuGgYByc3luYzov
L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9hMDM3NWIzOS1mOTQ5LTRjYjUtYjUx
OS1mOTQwMDhiMTY1NGMtMC8wLzM2MzIyZTMxMzQzNDJlMzUzMDJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDM3MzAzMjM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPpAyMA0GCSqGSIb3DQEB
CwUAA4IBAQC07Fg0MRNYvGqFelvxkIc/tnDyq/O0APWT0r/krDxaXXNwklaiDXDP
vmpibSQp+B5cJZnKNqWqjhMI1XCMFb4jWP2x1cdOdua7UY0ZMYMmSmdoX8sbUPq1
lnlG3EfWkIGXCatZ81GkQYrXg+6TKocsBhK/MoyDg7mT/CONVXMOo+FnhGmfq1CS
ZxJyCtTovQ4q7cxYzKKIhYBP73nG6Eq0hadGS1bg7h9V+17SksSFY92Or12BfRba
0Me5Hzz75kzcCxEZ/QannXh+89ph/RiC/wsF/HB/X812ThVgfOXCHLp2yjaA/ioA
aDlPBchNG0R09Kl3bnfDZO7TPmjK4RQz
-----END CERTIFICATE-----
Generated at Sat Oct 17 13:04:09 2026 by rpki-client