Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3139322e302f32302d3230203d3e20323037363435.roa
File:                     352e38332e3139322e302f32302d3230203d3e20323037363435.roa (raw, json)
Hash identifier:          w6VPNWnRmvlSa+81SKrcw+uv7+BVdin3BVbGPkv1X9U=
Subject key identifier:   9C:FA:EA:A6:79:B3:7B:84:76:C8:B6:31:2A:A7:B1:83:DD:53:E9:61
Certificate issuer:       /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial:       412800CA7F89B26F3940A147E5AAD8D36901F848
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3139322e302f32302d3230203d3e20323037363435.roa
Signing time:             Thu 13 Aug 2026 17:49:28 +0000
ROA not before:           Thu 13 Aug 2026 17:44:28 +0000
ROA not after:            Thu 12 Aug 2027 17:49:28 +0000
asID:                     207645
IP address blocks:        5.83.192.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
                          rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 18 Aug 2026 14:17:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:28:00:ca:7f:89:b2:6f:39:40:a1:47:e5:aa:d8:d3:69:01:f8:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
        Validity
            Not Before: Aug 13 17:44:28 2026 GMT
            Not After : Aug 12 17:49:28 2027 GMT
        Subject: CN=9CFAEAA679B37B8476C8B6312AA7B183DD53E961
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:4b:8d:ff:0a:d0:29:1e:41:b8:cc:0e:bc:18:
                    3d:d4:b2:53:eb:fe:29:e6:47:42:f8:48:73:93:26:
                    0c:60:47:81:0e:7e:06:bf:da:df:59:16:0d:5f:38:
                    ae:90:2a:8b:b4:02:5c:90:43:e3:4f:ef:2f:64:f5:
                    4c:2d:81:1a:50:62:c9:8d:3a:78:da:72:9c:cb:f5:
                    13:3e:d1:49:bc:ff:53:9f:14:1f:f0:72:8a:68:93:
                    64:7f:3e:07:df:89:46:7f:d7:b5:13:a7:0a:76:91:
                    16:af:1e:6d:5e:17:75:f8:fc:52:13:cd:ed:47:5b:
                    c1:cc:23:02:f3:f3:5a:a5:60:c9:48:d5:c9:f8:de:
                    1e:88:45:fe:32:fe:24:92:c8:46:7d:38:38:16:b8:
                    ba:8c:6d:b7:79:e6:87:78:95:95:b7:7d:5f:bb:8e:
                    13:c1:24:4c:8c:fc:36:3b:3d:02:1f:8d:ea:d7:82:
                    f6:57:eb:eb:4b:01:65:72:fe:e3:db:05:2d:75:9e:
                    f2:6a:ee:ac:a0:c5:6b:40:93:82:d8:fe:41:09:72:
                    73:3d:19:cd:a9:43:62:80:68:ca:f6:f9:36:80:dd:
                    b3:9e:f3:7c:35:c8:5b:55:87:e0:fb:3a:0d:aa:d7:
                    80:d2:04:0a:7f:b2:8c:ed:ce:6c:43:f4:c8:98:b8:
                    26:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:FA:EA:A6:79:B3:7B:84:76:C8:B6:31:2A:A7:B1:83:DD:53:E9:61
            X509v3 Authority Key Identifier:
                keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3139322e302f32302d3230203d3e20323037363435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.83.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         88:a9:c1:e1:75:44:70:39:98:59:5b:23:10:4e:82:56:58:25:
         61:f2:9c:d3:61:d9:d8:d3:4b:83:8a:5c:c2:21:0f:27:6c:f6:
         af:dc:b4:f6:ad:ba:e8:90:4f:af:2e:c0:34:d4:e6:17:10:31:
         d8:a3:cd:a5:95:6a:8c:66:ba:53:a1:9c:5e:49:a1:7e:76:8d:
         3b:89:16:ef:63:20:64:21:3f:2c:8f:fc:74:2e:da:d2:5c:d5:
         95:2b:01:21:86:42:44:05:93:d0:fe:a1:0f:22:0e:d5:a4:f4:
         a2:9d:ac:ee:33:7f:f1:a5:43:09:61:54:f1:66:97:d1:1d:64:
         48:55:eb:47:5a:97:c1:fe:07:95:6d:f5:a1:d4:57:1c:cc:d4:
         a4:18:1f:5b:63:fe:c6:4a:5b:86:61:72:d3:fe:62:d9:fc:5a:
         e6:28:71:73:43:fe:c5:e6:38:2a:7a:70:3a:d8:2b:d8:58:c4:
         6c:7d:71:eb:4b:ea:5b:35:b5:be:d1:8b:2c:5c:a5:5a:ed:47:
         55:88:a5:8d:13:da:3d:4c:a7:cb:30:87:cd:61:f1:79:94:bb:
         d6:bb:d8:70:79:1f:4d:d4:ea:25:38:7f:f4:7e:08:15:ea:05:
         c4:7b:84:f9:6f:29:f6:a5:95:29:33:54:00:6b:81:6f:ab:9d:
         4e:d8:fe:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 18 00:09:28 2026 by rpki-client