Route Origin Authorization

$ rpki-client -vvvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3231342e302f32342d3234203d3e20323033333633.roa
File:                     352e38332e3231342e302f32342d3234203d3e20323033333633.roa (raw, json)
Hash identifier:          NE6pROxmEFV9+ZwljN3JWTQzQDu5ssIWuLg4r1IT4ik=
Subject key identifier:   E8:2F:B3:79:25:69:71:0C:B9:25:30:FA:22:8E:66:ED:87:7E:36:33
Certificate issuer:       /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial:       59020CB3467F21F601F2B16D15BA28DCEA6C0C19
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3231342e302f32342d3234203d3e20323033333633.roa
Signing time:             Tue 06 Oct 2026 20:49:35 +0000
ROA not before:           Tue 06 Oct 2026 20:44:35 +0000
ROA not after:            Tue 05 Oct 2027 20:49:35 +0000
asID:                     203363
IP address blocks:        5.83.214.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
                          rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Oct 2026 05:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:02:0c:b3:46:7f:21:f6:01:f2:b1:6d:15:ba:28:dc:ea:6c:0c:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
        Validity
            Not Before: Oct  6 20:44:35 2026 GMT
            Not After : Oct  5 20:49:35 2027 GMT
        Subject: CN=E82FB3792569710CB92530FA228E66ED877E3633
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:e9:2b:de:28:33:89:25:52:0d:45:ae:fb:1e:
                    fc:47:80:35:49:8e:47:3f:2b:56:01:a4:99:e4:8b:
                    68:36:f3:94:0c:5a:e5:78:21:10:b1:58:ce:d8:c4:
                    9b:7e:b4:ee:5f:d6:33:19:2d:bc:d7:45:2e:77:8a:
                    49:4a:9f:65:d8:6d:a7:f0:19:28:05:bc:0a:45:5d:
                    36:2d:cc:e0:d2:58:16:4f:c6:7b:64:ad:91:71:d9:
                    1c:21:57:ed:3e:b8:25:3c:3f:8b:e0:d2:65:5e:4c:
                    39:50:da:f9:a0:3e:a8:ab:b6:b0:4a:16:eb:7c:e1:
                    1f:68:c8:bc:df:ef:8d:d6:9f:e6:31:c4:3c:5a:a4:
                    cc:6e:d9:6d:9a:85:68:17:8f:6c:29:cc:24:a6:16:
                    fc:b4:53:97:1b:71:e0:1d:62:a0:24:47:e0:08:7c:
                    b5:7b:f5:8e:63:d1:6b:a2:15:39:95:9b:71:d7:d8:
                    3c:a4:6c:da:04:31:5c:99:79:de:34:6a:34:35:68:
                    56:93:c6:4d:9e:f6:8a:f5:39:e6:84:19:49:f9:e0:
                    fc:e2:90:7b:0b:e1:41:8e:75:a0:bc:c8:35:cd:1e:
                    a6:78:ff:e7:2a:dd:2d:55:c2:03:03:f1:bb:f7:3c:
                    d8:59:58:39:b8:77:29:a2:76:54:c5:3f:35:f4:76:
                    c5:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:2F:B3:79:25:69:71:0C:B9:25:30:FA:22:8E:66:ED:87:7E:36:33
            X509v3 Authority Key Identifier:
                keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3231342e302f32342d3234203d3e20323033333633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.83.214.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:e9:f7:06:41:6a:15:a6:fd:c8:c8:de:b5:7f:c1:6a:26:cd:
         23:12:34:67:f3:30:d5:60:00:51:b4:56:84:94:57:b4:f9:30:
         96:77:2a:cf:37:3b:75:c3:63:9b:40:d6:3a:4a:6a:8f:9d:aa:
         fb:2f:e5:c7:70:7f:54:1c:fd:c3:df:2f:07:c2:3a:cf:37:97:
         fd:82:19:5f:f2:cd:dd:ca:93:59:9e:17:36:00:d7:0c:59:0a:
         ac:94:71:ff:10:16:78:68:fb:ba:93:d2:5b:17:9f:18:ad:71:
         1b:f9:7a:4a:b1:79:ba:73:77:75:a8:3c:eb:0a:e3:21:fc:40:
         02:4f:fa:ee:8d:3c:cc:7d:c5:19:cc:45:4b:a8:c2:3e:21:36:
         4d:4b:cf:2f:9f:d6:75:3b:eb:5e:70:e1:b4:d8:52:9d:da:b3:
         df:f8:b9:d6:7c:e9:23:2f:a0:0a:55:e2:bc:d2:f9:ae:3f:48:
         ed:fe:92:0f:62:eb:37:56:2b:e5:b4:60:ad:b3:cd:cd:b0:f6:
         49:20:e3:2d:fd:e2:66:7b:24:a2:5a:c4:a2:d6:06:83:66:d9:
         3e:16:78:5d:67:3b:03:0a:e0:e3:0b:08:fd:c9:c8:ab:24:0b:
         78:91:22:05:05:3b:25:9c:9e:a7:20:35:30:23:15:75:f9:18:
         e6:2c:bc:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----