Route Origin Authorization

$ rpki-client -vvvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e35332e302f32342d3234203d3e2037303239.roa
File:                     36322e3134342e35332e302f32342d3234203d3e2037303239.roa (raw, json)
Hash identifier:          LqaE3MnHKYbQ6ngH/o2ApUKF7kuN5YF2OMzWLwvUtDU=
Subject key identifier:   38:86:20:A2:70:41:24:97:C5:5D:E8:C3:8A:CB:2F:D9:BB:34:31:97
Certificate issuer:       /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
Certificate serial:       3D49106A28E112CA3668468CA24A89974E5FFEF2
Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e35332e302f32342d3234203d3e2037303239.roa
Signing time:             Mon 12 Oct 2026 00:02:10 +0000
ROA not before:           Sun 11 Oct 2026 23:57:10 +0000
ROA not after:            Mon 11 Oct 2027 00:02:10 +0000
asID:                     7029
IP address blocks:        62.144.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl
                          rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 17 Oct 2026 15:26:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:49:10:6a:28:e1:12:ca:36:68:46:8c:a2:4a:89:97:4e:5f:fe:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
        Validity
            Not Before: Oct 11 23:57:10 2026 GMT
            Not After : Oct 11 00:02:10 2027 GMT
        Subject: CN=388620A270412497C55DE8C38ACB2FD9BB343197
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c8:d0:49:52:7e:3a:7c:9a:e8:15:6e:4f:70:
                    16:61:9c:9b:5d:de:3c:b7:8a:7e:1f:a0:b9:e5:61:
                    87:e5:3d:d4:ec:6e:65:38:be:d6:2b:77:30:a0:85:
                    fe:eb:51:9e:d6:72:ba:7d:69:cc:e2:c1:5c:b3:c9:
                    34:12:2a:37:97:e7:64:35:ce:87:2c:1f:26:b5:0b:
                    1e:26:52:75:03:73:86:f1:f8:ac:e4:45:e8:a4:04:
                    60:46:49:06:04:42:a2:b4:d3:7b:99:f3:9a:2a:7d:
                    b9:54:cf:c7:31:28:17:2a:12:44:e2:24:45:b4:d7:
                    b8:6d:8b:ba:6a:a7:09:35:9c:70:cc:56:62:c6:29:
                    e1:54:c8:2a:83:d2:0c:45:10:4d:58:53:4f:40:b5:
                    4c:a8:50:59:6a:65:ce:b0:35:bc:6f:2e:59:e0:d6:
                    71:4c:79:73:03:ed:9f:89:e0:33:72:50:9b:a3:db:
                    c2:23:1c:ec:d7:0e:b4:ae:f3:bd:79:2d:25:55:d0:
                    a5:45:88:b3:f7:19:14:4e:7f:b5:f8:10:d0:73:f9:
                    66:08:89:f0:50:d1:29:70:c2:98:c2:0d:17:0b:b0:
                    a6:55:a5:2a:c1:e3:2b:d8:4a:ed:a1:d1:76:d4:74:
                    99:05:a7:73:e0:8e:04:c0:71:29:b6:90:ef:ea:b0:
                    a2:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:86:20:A2:70:41:24:97:C5:5D:E8:C3:8A:CB:2F:D9:BB:34:31:97
            X509v3 Authority Key Identifier:
                keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e35332e302f32342d3234203d3e2037303239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.144.53.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:e8:e8:32:3f:03:97:0a:04:9f:d8:23:79:71:63:fc:a1:25:
         e2:e9:72:12:a1:e9:ad:b8:3f:43:66:41:a8:fb:e5:be:cd:e8:
         d5:15:66:0a:83:e5:df:a7:ef:97:53:50:73:45:78:5e:45:37:
         77:32:3a:eb:1b:c3:a6:fd:70:86:2c:02:bf:a1:3f:e6:e6:7a:
         22:6c:a0:c0:90:12:98:28:c7:7e:7e:4c:7d:45:23:0a:ea:15:
         2e:3b:96:91:af:a2:2f:c9:69:3a:8e:a2:b9:20:ff:4c:aa:8c:
         c6:96:a6:77:b9:b4:89:9e:52:30:43:cb:e1:88:e1:67:b2:1e:
         4b:90:08:be:97:5e:fe:b1:82:32:fd:07:02:65:d4:a8:a0:da:
         32:d5:d6:03:54:fc:b0:83:9c:5d:6d:10:a4:4b:93:c6:02:32:
         9b:e4:10:54:20:c1:1c:bc:cd:d6:2a:cc:37:b4:8f:81:35:28:
         d5:9f:5c:35:0a:ad:91:35:c6:0e:ae:26:12:ab:15:c7:a5:dc:
         21:a2:82:ba:2a:42:27:0a:a3:85:04:8b:57:69:1e:1e:a7:71:
         14:19:e1:f0:3b:d7:e6:ed:49:4d:2f:b5:92:38:8c:cb:52:8d:
         0e:72:9f:93:05:40:04:36:fc:c1:7f:e9:68:c6:5e:93:c5:86:
         ee:69:7e:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 04:08:26 2026 by rpki-client