Route Origin Authorization

$ rpki-client -vvvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e35322e302f32342d3234203d3e20323139303438.roa
File:                     36322e3134342e35322e302f32342d3234203d3e20323139303438.roa (raw, json)
Hash identifier:          KIYYgeQs/Nj1g1mhzUuVvRqyBbxkpqvWDEvAf2j7F/E=
Subject key identifier:   E8:B1:8F:CB:9E:9D:30:E7:B8:5B:BB:67:20:16:46:7B:30:64:9B:D4
Certificate issuer:       /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
Certificate serial:       7F8C53DE97AE07DBC31B818C40EB1098F6E1292D
Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e35322e302f32342d3234203d3e20323139303438.roa
Signing time:             Mon 19 Oct 2026 15:19:15 +0000
ROA not before:           Mon 19 Oct 2026 15:14:15 +0000
ROA not after:            Mon 18 Oct 2027 15:19:15 +0000
asID:                     219048
IP address blocks:        62.144.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl
                          rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Oct 2026 05:19:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:8c:53:de:97:ae:07:db:c3:1b:81:8c:40:eb:10:98:f6:e1:29:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
        Validity
            Not Before: Oct 19 15:14:15 2026 GMT
            Not After : Oct 18 15:19:15 2027 GMT
        Subject: CN=E8B18FCB9E9D30E7B85BBB672016467B30649BD4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:8f:e1:93:cc:2b:a5:9a:0a:f2:78:3e:e5:07:
                    c5:e9:56:ae:1c:79:34:2c:16:7c:5d:0f:2a:bc:f1:
                    4c:60:a1:fa:8c:06:f3:f3:59:a7:85:04:c5:07:81:
                    af:d7:75:3b:14:a6:8f:2a:f5:34:10:c7:77:37:04:
                    0b:7c:26:c9:fd:4d:65:3d:7f:e2:52:68:a9:b1:f2:
                    88:b7:d5:0f:ab:ba:34:fa:20:fb:33:64:86:40:95:
                    37:e5:32:87:ba:51:27:5c:aa:42:9b:60:7c:f5:72:
                    a5:fd:3e:73:2d:aa:03:74:7e:17:e6:2d:68:26:70:
                    1c:e1:3d:76:50:56:09:6a:43:8c:41:fd:56:85:69:
                    03:59:3e:5a:a8:5c:31:d6:20:df:83:5b:a9:b2:28:
                    37:d6:2b:24:45:e3:a1:6e:49:5f:da:c7:4f:bf:d4:
                    dc:f1:ac:4b:b2:10:14:03:96:47:38:3f:ba:d8:fe:
                    09:db:96:2e:13:7f:8c:64:61:c1:98:05:b2:2a:9d:
                    7a:3c:18:4f:8e:2c:0d:d9:89:80:73:18:9e:8a:5f:
                    61:bd:2d:2b:2c:81:d8:ce:92:79:5b:3b:4f:18:81:
                    2e:79:88:f5:06:ad:13:04:67:92:c0:48:14:fb:13:
                    c4:4b:a7:b1:8e:ce:b2:83:a7:8c:2a:78:db:fd:7f:
                    2c:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:B1:8F:CB:9E:9D:30:E7:B8:5B:BB:67:20:16:46:7B:30:64:9B:D4
            X509v3 Authority Key Identifier:
                keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e35322e302f32342d3234203d3e20323139303438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.144.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:e9:63:b9:f0:65:53:95:89:22:19:89:a8:e1:7b:37:e2:c3:
         a6:44:a5:4c:88:1d:5f:43:0d:35:25:4c:e7:36:7f:72:70:2a:
         24:e1:77:43:a6:24:aa:61:a7:66:d9:26:a9:fb:aa:9a:61:ea:
         36:cc:50:7f:d7:63:70:2f:c5:fb:f2:b2:01:73:f0:85:83:b5:
         3d:00:54:e0:3a:ab:9e:cb:88:ad:45:66:29:93:84:87:06:25:
         e9:0d:c7:17:0a:06:53:12:ae:c5:9d:ce:3b:1e:85:f2:08:72:
         64:40:46:e7:1b:6c:89:ba:7e:2d:17:bc:36:ba:2f:6a:02:01:
         31:38:92:97:54:a7:b8:68:26:39:67:f4:f7:a8:a3:e0:4a:b6:
         4d:03:fc:44:da:0b:95:23:54:1e:ef:36:4b:e0:b3:8b:07:d9:
         83:27:7f:f9:2a:a4:5d:4b:65:26:1d:b3:85:67:bd:59:50:23:
         e8:21:52:ff:46:cf:bd:25:ce:f2:fe:72:ae:f1:9c:ba:b8:23:
         a7:7b:50:91:61:06:3d:f4:9a:6a:29:64:41:58:4c:66:40:c4:
         5d:a0:1f:a3:37:42:0d:f1:7e:79:60:47:e3:03:8f:78:ba:25:
         73:b9:f1:b6:73:21:87:a7:e3:0a:80:2b:bf:be:40:1b:92:35:
         56:b8:8a:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 21:09:48 2026 by rpki-client