Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/AS12083.roa
File:                     AS12083.roa (raw, json)
Hash identifier:          8kH+VonWqycAeWTH9LD8oN6LIvtGbTyKxBhgc6Q0Lvw=
Subject key identifier:   3F:BB:2B:25:42:C8:BF:48:D7:62:4D:06:7F:84:FF:C0:37:B0:3E:D2
Certificate issuer:       /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
Certificate serial:       6CE785F52B0A1A6DC2FE5F54902B225BE1CE8391
Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/AS12083.roa
Signing time:             Fri 10 Jul 2026 20:25:17 +0000
ROA not before:           Fri 10 Jul 2026 20:20:17 +0000
ROA not after:            Fri 09 Jul 2027 20:25:17 +0000
asID:                     12083
IP address blocks:        62.144.32.0/22 maxlen: 24
                          62.144.36.0/22 maxlen: 24
                          62.144.40.0/22 maxlen: 24
                          62.144.44.0/22 maxlen: 24
                          62.144.48.0/24 maxlen: 24
                          62.144.49.0/24 maxlen: 24
                          62.144.50.0/24 maxlen: 24
                          62.144.51.0/24 maxlen: 24
                          62.144.52.0/24 maxlen: 24
                          62.144.53.0/24 maxlen: 24
                          62.144.54.0/24 maxlen: 24
                          62.144.55.0/24 maxlen: 24
                          62.144.56.0/24 maxlen: 24
                          62.144.57.0/24 maxlen: 24
                          62.144.58.0/24 maxlen: 24
                          62.144.59.0/24 maxlen: 24
                          62.144.60.0/24 maxlen: 24
                          62.144.61.0/24 maxlen: 24
                          62.144.62.0/24 maxlen: 24
                          62.144.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl
                          rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Jul 2026 15:41:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:e7:85:f5:2b:0a:1a:6d:c2:fe:5f:54:90:2b:22:5b:e1:ce:83:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
        Validity
            Not Before: Jul 10 20:20:17 2026 GMT
            Not After : Jul  9 20:25:17 2027 GMT
        Subject: CN=3FBB2B2542C8BF48D7624D067F84FFC037B03ED2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:51:0a:28:6d:86:20:7b:0f:ba:04:08:6d:af:
                    ec:76:2e:a9:09:a7:d7:06:01:72:27:09:3b:86:8a:
                    51:f1:80:9d:05:e7:71:72:f8:4c:3a:75:1e:c3:e6:
                    97:2b:7c:59:12:a1:9e:26:40:99:46:7e:c0:25:56:
                    1a:34:9d:d9:63:d6:6e:d7:9e:bf:5f:f3:3c:7f:0c:
                    a8:cd:99:73:76:10:52:4d:a1:25:a1:61:b3:9f:51:
                    aa:85:d3:59:0f:49:15:74:0f:e7:bc:ca:f2:5b:e0:
                    89:65:20:d8:9a:07:4d:1a:37:e3:2d:93:1a:c5:de:
                    ea:89:2d:39:82:5e:f6:00:ea:7c:91:10:00:8e:fb:
                    a1:c0:49:03:6a:34:e2:90:40:10:d5:4c:c3:87:86:
                    f7:c4:20:c9:03:c7:15:e5:b3:5a:cc:da:27:d8:9b:
                    6c:57:aa:b2:ce:b8:7a:3d:02:b5:06:3e:4a:62:8b:
                    e9:64:a8:9b:f1:96:b1:1e:6b:0a:84:0e:49:e2:84:
                    90:93:ea:a6:c9:1e:a3:d7:4a:dc:dc:eb:9a:a7:c8:
                    67:d7:20:1a:59:bb:ba:ee:fc:dc:ea:da:15:0c:37:
                    be:53:2e:fb:12:9a:c2:02:c9:d6:81:a9:67:29:34:
                    52:40:c9:4d:85:dd:7a:63:f4:80:0c:23:10:cb:bf:
                    ee:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:BB:2B:25:42:C8:BF:48:D7:62:4D:06:7F:84:FF:C0:37:B0:3E:D2
            X509v3 Authority Key Identifier:
                keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/AS12083.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.144.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         98:81:dc:07:7a:0d:3f:00:42:c3:62:2b:86:66:dd:aa:ab:f6:
         5f:82:41:c8:90:e8:a7:6b:b3:84:6f:d7:2b:fb:56:23:dc:61:
         ab:14:67:f1:16:c3:69:87:d0:9f:27:de:84:97:90:d3:cb:94:
         33:45:c4:c7:3b:a7:07:3e:b1:f9:ee:25:12:46:f2:54:9b:5d:
         58:5f:3d:9d:77:09:e1:ac:0d:a4:2b:6a:d7:e4:2c:0c:f7:a7:
         d1:bb:6a:31:ef:b6:be:65:15:93:f1:3d:eb:a6:06:8c:f0:fc:
         c6:dd:c0:36:7e:59:09:cc:8e:c6:bb:9c:ed:05:84:90:a0:cb:
         1d:59:a4:81:54:fb:a3:78:d1:c1:c6:f8:a5:80:55:0c:cc:b9:
         74:3f:bb:a3:2a:38:fb:a3:fa:b8:91:71:33:27:32:a6:b9:af:
         79:72:17:f6:92:43:ad:87:da:f7:13:2c:6a:2b:06:41:fe:6d:
         c8:3e:50:07:23:f4:b8:9f:1d:82:78:12:00:c0:a1:df:57:8e:
         96:e4:4d:55:07:c6:47:f0:21:af:78:17:10:6a:89:a7:37:61:
         23:49:40:48:a2:5c:ae:4a:ee:7e:4f:a1:62:8e:0d:57:06:f1:
         f1:3e:8d:4c:13:1c:75:e9:8e:b7:95:cd:ee:9f:bc:58:87:82:
         b8:5b:c3:60
-----BEGIN CERTIFICATE-----
MIIFJDCCBAygAwIBAgIUbOeF9SsKGm3C/l9UkCsiW+HOg5EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjM1NEQzMjhDQkJGRDFFRjNDRDI5MjY4QTIzQjBGQ0M2
MEUzQTJDNTAeFw0yNjA3MTAyMDIwMTdaFw0yNzA3MDkyMDI1MTdaMDMxMTAvBgNV
BAMTKDNGQkIyQjI1NDJDOEJGNDhENzYyNEQwNjdGODRGRkMwMzdCMDNFRDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSUQoobYYgew+6BAhtr+x2LqkJ
p9cGAXInCTuGilHxgJ0F53Fy+Ew6dR7D5pcrfFkSoZ4mQJlGfsAlVho0ndlj1m7X
nr9f8zx/DKjNmXN2EFJNoSWhYbOfUaqF01kPSRV0D+e8yvJb4IllINiaB00aN+Mt
kxrF3uqJLTmCXvYA6nyREACO+6HASQNqNOKQQBDVTMOHhvfEIMkDxxXls1rM2ifY
m2xXqrLOuHo9ArUGPkpii+lkqJvxlrEeawqEDknihJCT6qbJHqPXStzc65qnyGfX
IBpZu7ru/Nzq2hUMN75TLvsSmsICydaBqWcpNFJAyU2F3Xpj9IAMIxDLv+4lAgMB
AAGjggIuMIICKjAdBgNVHQ4EFgQUP7srJULIv0jXYk0Gf4T/wDewPtIwHwYDVR0j
BBgwFoAUs1TTKMu/0e880pJoojsPzGDjosUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
YTAzNzViMzktZjk0OS00Y2I1LWI1MTktZjk0MDA4YjE2NTRjLTAvMC9CMzU0RDMy
OENCQkZEMUVGM0NEMjkyNjhBMjNCMEZDQzYwRTNBMkM1LmNybDCBngYIKwYBBQUH
AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5LzYxNzA4YTZiLTZjM2EtNDBhMC1hMzAyLTU5NWVj
YzE3ODQ4Yy8wL0IzNTREMzI4Q0JCRkQxRUYzQ0QyOTI2OEEyM0IwRkNDNjBFM0Ey
QzUuY2VyMHEGCCsGAQUFBwELBGUwYzBhBggrBgEFBQcwC4ZVcnN5bmM6Ly9yLm1h
Z2VsbGFuLmlweG8uY29tL3JlcG8vYTAzNzViMzktZjk0OS00Y2I1LWI1MTktZjk0
MDA4YjE2NTRjLTAvMC9BUzEyMDgzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFPpAgMA0GCSqGSIb3DQEB
CwUAA4IBAQCYgdwHeg0/AELDYiuGZt2qq/ZfgkHIkOina7OEb9cr+1Yj3GGrFGfx
FsNph9CfJ96El5DTy5QzRcTHO6cHPrH57iUSRvJUm11YXz2ddwnhrA2kK2rX5CwM
96fRu2ox77a+ZRWT8T3rpgaM8PzG3cA2flkJzI7Gu5ztBYSQoMsdWaSBVPujeNHB
xvilgFUMzLl0P7ujKjj7o/q4kXEzJzKmua95chf2kkOth9r3EyxqKwZB/m3IPlAH
I/S4nx2CeBIAwKHfV46W5E1VB8ZH8CGveBcQaomnN2EjSUBIolyuSu5+T6Fijg1X
BvHxPo1MExx16Y63lc3un7xYh4K4W8Ng
-----END CERTIFICATE-----
Generated at Sat Jul 18 03:24:20 2026 by rpki-client