Route Origin Authorization

$ rpki-client -vvvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e36302e302f32322d3234203d3e20343032313333.roa
File:                     36322e3134342e36302e302f32322d3234203d3e20343032313333.roa (raw, json)
Hash identifier:          d2mvs1NFQ0MIOwYhQDSrs+bCoVSZkUGNV3CBxXKCf/I=
Subject key identifier:   0E:70:FF:4D:37:F1:39:EA:90:EC:6D:33:98:4D:A2:61:4C:24:B5:FF
Certificate issuer:       /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
Certificate serial:       62982B14F91241D8C2DB772F16F5F666E6B319F8
Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e36302e302f32322d3234203d3e20343032313333.roa
Signing time:             Mon 17 Aug 2026 09:28:38 +0000
ROA not before:           Mon 17 Aug 2026 09:23:38 +0000
ROA not after:            Mon 16 Aug 2027 09:28:38 +0000
asID:                     402133
IP address blocks:        62.144.60.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl
                          rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 03 Sep 2026 18:02:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:98:2b:14:f9:12:41:d8:c2:db:77:2f:16:f5:f6:66:e6:b3:19:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
        Validity
            Not Before: Aug 17 09:23:38 2026 GMT
            Not After : Aug 16 09:28:38 2027 GMT
        Subject: CN=0E70FF4D37F139EA90EC6D33984DA2614C24B5FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:58:6f:50:e3:db:9b:27:ed:66:3a:14:8f:8e:
                    50:f3:3e:fc:64:23:d3:cc:56:53:79:8e:c6:c5:33:
                    8d:a8:04:a5:4a:30:b4:88:0b:d5:68:4b:d1:df:87:
                    65:b3:a7:56:28:21:a2:e6:ef:e9:ae:2c:03:76:0c:
                    e1:36:89:09:a9:28:b9:61:50:4a:3a:9e:90:8e:97:
                    ee:e6:81:af:6e:c3:29:5f:a6:18:7c:fb:26:da:05:
                    fb:be:90:b3:e3:d2:b1:18:17:7d:97:84:dc:c1:43:
                    9c:7a:8a:c1:d1:1a:63:87:89:db:6a:5f:16:28:db:
                    8a:7e:61:96:8d:a1:9a:c5:45:35:ae:c0:80:82:3d:
                    cb:f8:67:99:f5:71:76:fa:a4:3b:f4:6c:b3:68:bd:
                    6e:8e:ee:81:1b:28:9b:4c:88:0a:b1:0a:dd:40:8b:
                    e5:0c:10:37:1a:7e:07:3a:5a:91:4d:b2:43:49:ec:
                    81:49:4d:92:35:52:2a:b5:74:d9:65:11:71:d1:f0:
                    46:2c:e4:e1:bd:a6:64:76:bc:21:73:0e:83:f9:fa:
                    51:64:0e:e8:fa:54:70:1c:e6:53:ff:ce:f0:68:5f:
                    df:4b:62:34:6e:e3:b4:a0:e2:3f:ec:f1:cd:2d:0c:
                    70:91:94:9f:12:48:d8:6b:3a:8a:03:d2:dd:69:fc:
                    a0:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:70:FF:4D:37:F1:39:EA:90:EC:6D:33:98:4D:A2:61:4C:24:B5:FF
            X509v3 Authority Key Identifier:
                keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e36302e302f32322d3234203d3e20343032313333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.144.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a1:88:f5:de:3b:dd:8d:95:08:0a:59:0a:21:a6:4a:b9:5a:a9:
         4f:a4:c0:2b:b1:1b:0c:1e:ef:a0:d8:65:fa:2f:70:c6:45:41:
         9e:fd:f5:d8:e0:d8:19:32:2b:94:e2:1f:7f:b5:bd:c2:84:e6:
         89:11:38:e4:86:51:4a:1f:83:d0:75:ce:16:47:f3:3b:c9:94:
         c4:16:da:4a:00:4c:8f:18:0f:ba:96:ff:f1:46:14:de:0f:09:
         ac:1f:e9:ca:90:13:a4:38:cf:1b:e5:c0:d7:5e:f0:de:a9:92:
         66:ee:43:af:da:c4:81:ad:5c:5a:f9:bb:25:d1:66:55:86:29:
         45:b0:3a:06:f3:21:35:61:b4:d9:87:00:54:b7:23:f6:5a:09:
         81:ba:81:72:1c:0e:94:61:57:6c:3d:fe:1d:63:24:ba:df:24:
         60:98:60:1d:c0:24:b2:5b:fa:3b:e9:20:f2:57:8b:d0:75:46:
         d9:be:5a:4b:0e:7b:2c:5d:00:80:86:78:96:3f:a3:7b:6b:c7:
         6c:27:73:f3:e5:4c:50:63:3e:26:53:9c:59:46:4e:2c:58:46:
         87:64:00:8a:95:d7:6a:50:a8:5f:e8:c0:08:a1:e5:4e:2a:55:
         e6:58:ed:10:e4:9e:87:df:38:a7:80:e0:59:a6:06:76:e4:df:
         09:0f:bb:8d
-----BEGIN CERTIFICATE-----
MIIFWDCCBECgAwIBAgIUYpgrFPkSQdjC23cvFvX2ZuazGfgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjM1NEQzMjhDQkJGRDFFRjNDRDI5MjY4QTIzQjBGQ0M2
MEUzQTJDNTAeFw0yNjA4MTcwOTIzMzhaFw0yNzA4MTYwOTI4MzhaMDMxMTAvBgNV
BAMTKDBFNzBGRjREMzdGMTM5RUE5MEVDNkQzMzk4NERBMjYxNEMyNEI1RkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEWG9Q49ubJ+1mOhSPjlDzPvxk
I9PMVlN5jsbFM42oBKVKMLSIC9VoS9Hfh2Wzp1YoIaLm7+muLAN2DOE2iQmpKLlh
UEo6npCOl+7mga9uwylfphh8+ybaBfu+kLPj0rEYF32XhNzBQ5x6isHRGmOHidtq
XxYo24p+YZaNoZrFRTWuwICCPcv4Z5n1cXb6pDv0bLNovW6O7oEbKJtMiAqxCt1A
i+UMEDcafgc6WpFNskNJ7IFJTZI1Uiq1dNllEXHR8EYs5OG9pmR2vCFzDoP5+lFk
Duj6VHAc5lP/zvBoX99LYjRu47Sg4j/s8c0tDHCRlJ8SSNhrOooD0t1p/KBfAgMB
AAGjggJiMIICXjAdBgNVHQ4EFgQUDnD/TTfxOeqQ7G0zmE2iYUwktf8wHwYDVR0j
BBgwFoAUs1TTKMu/0e880pJoojsPzGDjosUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
YTAzNzViMzktZjk0OS00Y2I1LWI1MTktZjk0MDA4YjE2NTRjLTAvMC9CMzU0RDMy
OENCQkZEMUVGM0NEMjkyNjhBMjNCMEZDQzYwRTNBMkM1LmNybDCBngYIKwYBBQUH
AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5LzYxNzA4YTZiLTZjM2EtNDBhMC1hMzAyLTU5NWVj
YzE3ODQ4Yy8wL0IzNTREMzI4Q0JCRkQxRUYzQ0QyOTI2OEEyM0IwRkNDNjBFM0Ey
QzUuY2VyMIGkBggrBgEFBQcBCwSBlzCBlDCBkQYIKwYBBQUHMAuGgYRyc3luYzov
L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9hMDM3NWIzOS1mOTQ5LTRjYjUtYjUx
OS1mOTQwMDhiMTY1NGMtMC8wLzM2MzIyZTMxMzQzNDJlMzYzMDJlMzAyZjMyMzIy
ZDMyMzQyMDNkM2UyMDM0MzAzMjMxMzMzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAj6QPDANBgkqhkiG
9w0BAQsFAAOCAQEAoYj13jvdjZUIClkKIaZKuVqpT6TAK7EbDB7voNhl+i9wxkVB
nv312ODYGTIrlOIff7W9woTmiRE45IZRSh+D0HXOFkfzO8mUxBbaSgBMjxgPupb/
8UYU3g8JrB/pypATpDjPG+XA117w3qmSZu5Dr9rEga1cWvm7JdFmVYYpRbA6BvMh
NWG02YcAVLcj9loJgbqBchwOlGFXbD3+HWMkut8kYJhgHcAkslv6O+kg8leL0HVG
2b5aSw57LF0AgIZ4lj+je2vHbCdz8+VMUGM+JlOcWUZOLFhGh2QAipXXalCoX+jA
CKHlTipV5ljtEOSeh984p4DgWaYGduTfCQ+7jQ==
-----END CERTIFICATE-----
Generated at Thu Sep 3 09:22:01 2026 by rpki-client