Route Origin Authorization

$ rpki-client -vvvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3231312e302f32342d3234203d3e20343032323135.roa
File:                     352e38332e3231312e302f32342d3234203d3e20343032323135.roa (raw, json)
Hash identifier:          Jcipj8nftNEaczX8Bxbl/sdEw/0I3j1DwzYyDN9K0gc=
Subject key identifier:   3D:BA:2D:4E:C8:C2:13:01:7B:E4:02:97:E4:6A:CA:00:C2:93:75:99
Certificate issuer:       /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial:       35289A779A0E136FAB4E3EF60EB3EF6D8E9A3918
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3231312e302f32342d3234203d3e20343032323135.roa
Signing time:             Sat 08 Aug 2026 11:17:41 +0000
ROA not before:           Sat 08 Aug 2026 11:12:41 +0000
ROA not after:            Sat 07 Aug 2027 11:17:41 +0000
asID:                     402215
IP address blocks:        5.83.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
                          rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 01 Sep 2026 10:57:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:28:9a:77:9a:0e:13:6f:ab:4e:3e:f6:0e:b3:ef:6d:8e:9a:39:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
        Validity
            Not Before: Aug  8 11:12:41 2026 GMT
            Not After : Aug  7 11:17:41 2027 GMT
        Subject: CN=3DBA2D4EC8C213017BE40297E46ACA00C2937599
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:1a:a6:e8:9d:9b:fb:11:37:60:cb:23:bb:a2:
                    db:8c:d7:36:f5:c1:00:ee:a9:ab:d8:1b:a6:95:56:
                    54:ea:b9:f0:ac:0c:47:a4:01:5b:09:93:b4:9a:28:
                    97:f9:85:31:f8:82:2a:35:98:96:db:3a:c5:b1:21:
                    99:e5:3b:d1:d4:e0:05:f7:72:80:f4:0e:14:9e:27:
                    4c:0b:cc:46:3b:b3:6b:75:a3:58:37:5d:d6:89:14:
                    48:93:f5:a6:1f:e5:dd:ac:e4:5c:0c:73:1a:d0:66:
                    91:47:13:4d:2d:d3:0f:66:06:6c:f4:4c:82:d1:df:
                    b5:ae:93:0d:ea:86:f6:50:f2:bb:92:44:87:ec:c9:
                    f6:09:2c:c4:27:37:da:2b:2f:64:c5:7b:84:c5:31:
                    26:ca:8f:d6:59:33:f8:ae:6a:f2:55:c6:e5:80:97:
                    d7:44:b1:ff:71:1e:a7:4d:05:ba:bf:d7:71:6b:a3:
                    b0:f2:0c:3f:f7:e2:73:e3:ac:40:b8:c6:70:57:07:
                    93:65:a1:f7:e8:47:23:a9:47:a8:13:fb:5a:d9:3a:
                    73:4e:73:3b:eb:f7:96:7b:cd:fe:4f:0d:09:38:1a:
                    ac:4d:e4:87:76:00:57:b7:b0:eb:f2:3e:c7:17:34:
                    55:0d:79:78:0a:1b:ce:94:c7:51:98:4e:c4:f9:e1:
                    55:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:BA:2D:4E:C8:C2:13:01:7B:E4:02:97:E4:6A:CA:00:C2:93:75:99
            X509v3 Authority Key Identifier:
                keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3231312e302f32342d3234203d3e20343032323135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.83.211.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:1e:73:2b:fb:04:71:6a:7d:96:56:fc:be:6c:af:b8:2e:c7:
         b4:c6:bb:90:ea:73:ea:95:ef:6b:93:d8:f9:13:01:0e:6d:6b:
         a8:dd:b5:22:9e:9d:61:31:62:64:27:7d:d1:a4:67:25:a0:fe:
         87:48:df:a5:9d:cb:9e:31:15:1f:14:90:5f:fd:cc:b7:b0:0c:
         cb:36:59:86:07:0c:1d:7f:a2:7c:67:ef:f0:fa:e6:19:2e:f0:
         b1:d0:9d:a4:0d:cb:86:7f:00:31:41:17:32:7f:da:2c:3f:c5:
         60:61:57:2f:d9:38:ff:7d:95:60:77:c0:b3:a4:03:fc:9f:f5:
         d5:65:fd:c1:f7:98:6b:5f:0f:aa:b3:3f:3f:6a:0a:5d:67:13:
         44:3e:23:dc:5a:e2:fe:c9:43:64:16:9c:82:dc:01:ae:c6:f9:
         35:60:0a:ae:f3:f6:06:59:c7:da:a9:c7:08:27:01:f2:ac:40:
         d3:43:2f:2d:f9:bb:1d:e6:b9:e9:38:cd:d9:ac:60:6c:9b:91:
         13:bf:0d:4a:81:b9:ff:cf:98:b0:fd:ec:8e:4b:d9:bb:22:24:
         d8:8b:4b:e0:c7:2f:8a:49:b3:d5:9d:0e:09:aa:91:d6:b2:47:
         a0:65:49:89:32:85:58:f1:67:76:bc:9a:c4:1d:f0:fa:5e:06:
         c8:3f:ef:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 02:34:39 2026 by rpki-client