Route Origin Authorization

$ rpki-client -vvvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e35362e302f32342d3234203d3e20323139313035.roa
File:                     36322e3134342e35362e302f32342d3234203d3e20323139313035.roa (raw, json)
Hash identifier:          yk4VheaIKr9cBliF8bJZh3ignggwsLMDZIp37Pk74LY=
Subject key identifier:   0F:EB:93:20:E9:87:0A:B3:50:04:4E:A4:6E:57:18:CC:E7:C5:86:0D
Certificate issuer:       /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
Certificate serial:       153A817A57E666A848873F04BEF1DB903A3D746A
Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e35362e302f32342d3234203d3e20323139313035.roa
Signing time:             Sun 16 Aug 2026 15:16:00 +0000
ROA not before:           Sun 16 Aug 2026 15:11:00 +0000
ROA not after:            Sun 15 Aug 2027 15:16:00 +0000
asID:                     219105
IP address blocks:        62.144.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl
                          rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 03 Sep 2026 18:02:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:3a:81:7a:57:e6:66:a8:48:87:3f:04:be:f1:db:90:3a:3d:74:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
        Validity
            Not Before: Aug 16 15:11:00 2026 GMT
            Not After : Aug 15 15:16:00 2027 GMT
        Subject: CN=0FEB9320E9870AB350044EA46E5718CCE7C5860D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:39:81:3c:07:7e:e9:e0:10:2c:3a:a2:92:c8:
                    31:9d:89:7b:11:55:53:e9:f4:4e:a6:f2:6b:16:b0:
                    1b:a6:20:6c:49:0c:3d:60:b1:71:67:71:bd:23:be:
                    ad:e6:db:50:fe:61:27:23:13:8c:77:13:21:8a:03:
                    dd:ed:be:21:c5:68:38:e0:b6:36:63:3f:4a:5c:bb:
                    e2:49:b8:94:9f:4a:da:44:1a:c9:71:b2:d3:06:cf:
                    d6:0c:26:74:36:0c:b3:ff:0e:43:3d:c8:ee:26:d4:
                    c9:db:bb:a9:ad:db:47:10:d3:83:ce:9f:3f:eb:da:
                    a0:80:38:9d:fb:d6:56:96:61:db:0a:51:75:c2:d8:
                    2b:cd:e8:7d:d4:29:52:38:78:84:1d:9f:40:6a:80:
                    c6:2b:96:fb:57:ed:f1:80:de:29:d0:ae:7d:a7:de:
                    44:cc:ea:ba:86:1c:22:7b:23:b3:32:11:a8:dd:32:
                    81:a1:a9:a3:19:8e:61:77:2f:fa:63:f4:9f:46:9b:
                    68:94:d1:d6:6f:31:7a:3d:8d:46:78:8f:ab:e1:2a:
                    90:23:fb:e6:15:3e:cf:b8:7a:1c:5e:14:5f:71:b0:
                    87:00:ee:af:18:88:d0:d1:2c:6d:43:1e:09:da:c2:
                    2f:a1:97:f2:d5:67:26:ad:1b:9f:23:ce:80:ff:64:
                    2a:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:EB:93:20:E9:87:0A:B3:50:04:4E:A4:6E:57:18:CC:E7:C5:86:0D
            X509v3 Authority Key Identifier:
                keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e35362e302f32342d3234203d3e20323139313035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.144.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:7d:ce:17:16:88:01:b3:04:0a:a1:84:99:ca:da:bb:10:40:
         ea:23:20:18:8a:2f:27:1b:49:52:48:a7:97:01:69:95:5d:7e:
         c5:5a:a4:e8:c0:09:70:5d:3c:fb:8b:4c:0f:fb:4b:32:7e:51:
         e0:a7:e1:23:3a:56:78:79:26:93:95:92:16:d4:d7:16:8b:8c:
         79:e3:d5:88:1c:cc:d2:98:d0:99:19:57:e8:3f:eb:cd:b4:b5:
         6f:c1:45:c0:6c:f6:41:6f:e0:27:8d:c9:8d:11:bc:4c:40:4d:
         4a:84:7f:8d:64:76:d1:1a:53:a4:12:9b:1c:20:6e:19:65:86:
         84:72:91:78:d9:f6:09:9e:ba:ae:05:2c:b9:2d:f1:39:0f:f0:
         85:39:e8:2e:3b:43:8f:84:48:7b:02:93:81:26:e1:12:9f:65:
         f7:b4:32:b1:2a:09:0d:96:b0:7d:fb:f7:1f:89:66:d7:4b:7c:
         09:e9:e9:3b:5b:b1:d9:07:38:4b:75:55:65:2e:b5:f5:7f:49:
         c6:c6:eb:8d:54:35:4c:f9:b6:b9:06:52:62:0b:46:8b:1a:70:
         8e:4f:cd:97:b4:f0:e0:77:d7:57:db:aa:f8:17:7c:a0:6d:01:
         23:4c:bf:0d:9d:10:09:93:6a:e7:35:75:d7:26:99:0d:ea:04:
         4c:32:2e:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 09:21:58 2026 by rpki-client