Route Origin Authorization

$ rpki-client -vvvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3231312e302f32342d3234203d3e20383334.roa
File:                     352e38332e3231312e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          EumSLnB4O3JjTzaCNlGwSlssbyolOeMckg188oNy8e4=
Subject key identifier:   EE:E3:9E:F7:77:56:04:D6:FD:42:00:4D:BE:BE:E2:16:54:57:86:99
Certificate issuer:       /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial:       23159AB4A27E40EADB4692639B67A746086CBCCA
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3231312e302f32342d3234203d3e20383334.roa
Signing time:             Thu 08 Oct 2026 06:11:16 +0000
ROA not before:           Thu 08 Oct 2026 06:06:16 +0000
ROA not after:            Thu 07 Oct 2027 06:11:16 +0000
asID:                     834
IP address blocks:        5.83.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
                          rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Oct 2026 04:50:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:15:9a:b4:a2:7e:40:ea:db:46:92:63:9b:67:a7:46:08:6c:bc:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
        Validity
            Not Before: Oct  8 06:06:16 2026 GMT
            Not After : Oct  7 06:11:16 2027 GMT
        Subject: CN=EEE39EF7775604D6FD42004DBEBEE21654578699
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:02:15:9b:e5:f7:b0:e6:a1:bd:56:17:b4:72:
                    0d:1f:16:24:29:d4:df:12:bc:f6:06:ba:b7:db:3f:
                    a6:4c:9d:7f:34:aa:93:52:1f:ab:eb:b8:a2:60:b6:
                    6f:dc:de:31:8a:3c:5e:f9:62:b2:7f:8f:02:27:2e:
                    ce:df:aa:6e:f5:42:c6:04:f0:56:8b:a1:2f:f2:61:
                    a6:f1:2f:c9:ad:73:f0:f1:14:fd:63:1e:af:f9:43:
                    17:35:4d:27:03:78:d4:9e:24:fc:56:53:5d:52:30:
                    57:34:c1:cb:16:aa:1f:ff:88:d9:98:a3:c5:3c:2f:
                    34:22:dd:50:49:24:c9:86:ca:97:51:e5:8f:18:e7:
                    3c:28:fd:3c:1b:42:09:1d:fc:6a:3b:1e:68:c6:27:
                    5a:73:ca:6b:da:1a:06:c5:66:2b:bc:ec:9d:a0:b6:
                    5c:46:e9:5a:28:68:59:89:d8:02:85:59:f9:da:cb:
                    e4:e7:26:6b:6f:6a:59:82:2e:8a:08:a0:a9:d3:dc:
                    14:af:20:9e:56:56:7b:c2:1c:05:6a:c8:24:66:56:
                    bc:ef:56:1f:f2:21:a9:14:53:81:3c:bc:cd:3b:88:
                    83:6d:3e:dc:4b:ce:dc:50:65:09:ce:83:f9:ad:34:
                    66:3a:9c:a0:81:c2:c9:db:1e:e1:0f:4a:fb:ed:4c:
                    81:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:E3:9E:F7:77:56:04:D6:FD:42:00:4D:BE:BE:E2:16:54:57:86:99
            X509v3 Authority Key Identifier:
                keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3231312e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.83.211.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:57:c5:2b:06:93:e4:42:68:59:42:a1:ea:d1:83:61:1a:d0:
         08:59:f5:fd:6e:88:34:52:f3:3b:7d:8b:70:1a:f2:d2:6d:b4:
         3f:25:ac:32:90:24:b9:6d:29:cd:b1:b2:37:24:05:de:27:e6:
         54:7f:c9:3e:55:d8:6f:0f:73:ee:2e:15:e1:ad:45:df:fc:87:
         d8:87:d4:75:4a:11:78:00:9d:a8:1f:6e:ee:73:a5:24:78:7d:
         23:86:e8:eb:1b:91:91:40:ee:50:80:59:e2:50:ef:ff:14:4e:
         f8:1b:54:1b:66:98:c9:42:9d:7e:b7:14:a6:57:93:a7:e5:e3:
         6e:bd:a7:02:74:c0:e2:80:b8:10:7a:02:6b:4e:4b:2f:03:d6:
         fd:30:a0:56:11:05:7e:e3:22:79:bf:0f:cc:5e:57:3e:0b:1d:
         4e:2e:c0:fa:49:4a:7e:49:1b:09:5d:73:37:80:82:03:4f:9c:
         d2:9d:0f:8b:e7:c3:ae:e7:b0:22:85:1f:5a:bb:37:95:4a:7d:
         2f:29:f9:1f:2e:c9:1b:90:39:53:bd:89:95:ef:4f:77:4b:3b:
         f2:47:c7:9d:ec:49:97:d8:f1:15:cb:80:69:bb:e5:25:18:39:
         4b:36:dd:58:b2:b5:af:cc:37:e5:e0:79:25:59:a6:2b:2a:e0:
         33:b6:bb:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----