Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3231312e302f32342d3234203d3e20313334343934.roa
File:                     352e38332e3231312e302f32342d3234203d3e20313334343934.roa (raw, json)
Hash identifier:          Y0OwyqOhXH3qVuFFvcK188we8YGKj2dB4cbx5z80cq0=
Subject key identifier:   FA:D8:E9:94:55:C1:01:8D:B6:C1:AE:38:ED:C1:B3:EB:E9:BF:D5:D5
Certificate issuer:       /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial:       660D4C34375B6C835532374E5C5CF1413B0BD37A
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3231312e302f32342d3234203d3e20313334343934.roa
Signing time:             Thu 06 Aug 2026 09:02:22 +0000
ROA not before:           Thu 06 Aug 2026 08:57:22 +0000
ROA not after:            Thu 05 Aug 2027 09:02:22 +0000
asID:                     134494
IP address blocks:        5.83.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
                          rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Aug 2026 07:33:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:0d:4c:34:37:5b:6c:83:55:32:37:4e:5c:5c:f1:41:3b:0b:d3:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
        Validity
            Not Before: Aug  6 08:57:22 2026 GMT
            Not After : Aug  5 09:02:22 2027 GMT
        Subject: CN=FAD8E99455C1018DB6C1AE38EDC1B3EBE9BFD5D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:c3:70:55:22:2c:47:ab:4a:e6:46:e6:25:6d:
                    30:6d:6c:1e:b3:a9:69:3c:41:f8:ab:a1:61:94:96:
                    b3:7a:db:24:52:f7:00:9b:26:2f:d5:f9:f9:78:ef:
                    01:75:8a:48:f4:65:ce:8c:c3:84:a1:0a:6d:f3:cb:
                    84:11:be:57:e7:d7:da:e0:3f:27:ed:b5:10:1b:c4:
                    ab:85:03:68:b4:f0:7b:13:e8:f2:e1:13:a3:03:64:
                    33:b4:e6:2f:bf:1b:3a:79:8e:7c:d5:af:99:cb:00:
                    3e:86:13:72:25:a1:7d:dd:8e:34:95:68:c1:43:ae:
                    d2:3e:5c:69:de:fa:fc:99:ee:d9:08:43:db:a6:5a:
                    0c:2e:77:12:23:23:41:87:0b:32:1e:8f:ba:9a:da:
                    1c:2b:a1:ab:41:0d:52:40:1c:ce:3a:f7:e8:0a:db:
                    c1:3d:9c:24:0d:68:1d:22:5e:df:00:4a:e0:e1:4c:
                    40:cb:b9:f7:1e:2b:36:cc:3f:40:70:93:0b:22:17:
                    f8:90:d5:3d:65:74:24:ad:2e:1a:86:e2:79:24:21:
                    52:32:d9:13:29:ee:db:2b:60:11:99:3a:38:ad:a6:
                    2f:d2:90:91:5f:7f:0f:40:b8:77:82:fe:38:ca:22:
                    41:fb:bb:52:60:33:4b:37:d3:a7:6c:a7:ab:d8:84:
                    7e:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:D8:E9:94:55:C1:01:8D:B6:C1:AE:38:ED:C1:B3:EB:E9:BF:D5:D5
            X509v3 Authority Key Identifier:
                keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3231312e302f32342d3234203d3e20313334343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.83.211.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:6f:d7:ce:93:72:35:44:f3:a0:fc:77:a2:45:2e:c4:c5:a4:
         0b:cc:2d:ee:5a:54:1b:0a:73:6c:95:5e:0f:89:f9:1f:45:16:
         6d:b1:6f:10:54:75:71:66:ff:93:26:91:50:5c:9b:3e:a0:7a:
         e4:37:02:c6:5b:64:ec:27:e6:1b:2a:96:9c:93:0a:f1:71:69:
         10:cc:ff:a3:f6:5b:9b:6b:ca:6a:aa:a5:89:f4:d5:b1:36:fd:
         b0:51:74:80:d1:1f:4d:c5:33:c4:41:cc:13:02:99:10:61:e6:
         20:12:ea:db:db:d6:ec:e3:ed:85:02:7c:7c:ed:41:de:4a:11:
         e0:3e:24:04:7b:21:bf:0f:c2:39:95:63:8d:b9:66:d2:e4:f5:
         96:14:e9:85:41:a4:f3:70:1f:82:9b:79:ba:b6:ef:29:19:ad:
         89:e9:e8:99:fc:b6:e6:74:f6:39:10:98:87:fd:62:d5:8e:64:
         e3:0f:a4:9e:f5:39:22:67:66:7d:23:9d:e6:53:20:2e:37:69:
         f8:29:8d:df:ed:ec:b8:8a:7d:7c:48:ed:43:d6:49:d0:fe:43:
         d9:7b:0d:44:1b:2b:d2:1a:11:4f:84:5d:81:3e:dc:79:8d:1f:
         3e:ea:dc:3c:1e:19:34:2c:27:d3:01:5f:e6:b2:a5:04:fc:b0:
         3c:c6:d3:64
-----BEGIN CERTIFICATE-----
MIIFVjCCBD6gAwIBAgIUZg1MNDdbbINVMjdOXFzxQTsL03owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkEyRkI0REIwQUE0RDAwNjk1ODMxNjg3MkU0NjdCNTU0
RTBGRDBCRTAeFw0yNjA4MDYwODU3MjJaFw0yNzA4MDUwOTAyMjJaMDMxMTAvBgNV
BAMTKEZBRDhFOTk0NTVDMTAxOERCNkMxQUUzOEVEQzFCM0VCRTlCRkQ1RDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiw3BVIixHq0rmRuYlbTBtbB6z
qWk8QfiroWGUlrN62yRS9wCbJi/V+fl47wF1ikj0Zc6Mw4ShCm3zy4QRvlfn19rg
PyfttRAbxKuFA2i08HsT6PLhE6MDZDO05i+/Gzp5jnzVr5nLAD6GE3IloX3djjSV
aMFDrtI+XGne+vyZ7tkIQ9umWgwudxIjI0GHCzIej7qa2hwroatBDVJAHM469+gK
28E9nCQNaB0iXt8ASuDhTEDLufceKzbMP0BwkwsiF/iQ1T1ldCStLhqG4nkkIVIy
2RMp7tsrYBGZOjitpi/SkJFffw9AuHeC/jjKIkH7u1JgM0s306dsp6vYhH6xAgMB
AAGjggJgMIICXDAdBgNVHQ4EFgQU+tjplFXBAY22wa447cGz6+m/1dUwHwYDVR0j
BBgwFoAUKi+02wqk0AaVgxaHLkZ7VU4P0L4wDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
YTZmMjE0N2EtZGU4YS00NDQwLWJjYTItNmQ4YjdjODc2ZmRhLTAvMC8yQTJGQjRE
QjBBQTREMDA2OTU4MzE2ODcyRTQ2N0I1NTRFMEZEMEJFLmNybDCBngYIKwYBBQUH
AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5LzlkZjMzYTU3LTdlNGYtNDg0NC04NGUyLWI3MTUz
YjU1MTFiNC8wLzJBMkZCNERCMEFBNEQwMDY5NTgzMTY4NzJFNDY3QjU1NEUwRkQw
QkUuY2VyMIGiBggrBgEFBQcBCwSBlTCBkjCBjwYIKwYBBQUHMAuGgYJyc3luYzov
L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9hNmYyMTQ3YS1kZThhLTQ0NDAtYmNh
Mi02ZDhiN2M4NzZmZGEtMC8wLzM1MmUzODMzMmUzMjMxMzEyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzMTMzMzQzNDM5MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAFU9MwDQYJKoZIhvcN
AQELBQADggEBAC1v186TcjVE86D8d6JFLsTFpAvMLe5aVBsKc2yVXg+J+R9FFm2x
bxBUdXFm/5MmkVBcmz6geuQ3AsZbZOwn5hsqlpyTCvFxaRDM/6P2W5trymqqpYn0
1bE2/bBRdIDRH03FM8RBzBMCmRBh5iAS6tvb1uzj7YUCfHztQd5KEeA+JAR7Ib8P
wjmVY425ZtLk9ZYU6YVBpPNwH4Kbebq27ykZrYnp6Jn8tuZ09jkQmIf9YtWOZOMP
pJ71OSJnZn0jneZTIC43afgpjd/t7LiKfXxI7UPWSdD+Q9l7DUQbK9IaEU+EXYE+
3HmNHz7q3DweGTQsJ9MBX+aypQT8sDzG02Q=
-----END CERTIFICATE-----
Generated at Thu Aug 13 00:28:55 2026 by rpki-client