Route Origin Authorization

$ rpki-client -vvvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3231372e302f32342d3234203d3e20383334.roa
File:                     352e38332e3231372e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          BkSk3fbdJa3C3ikSR09/MtVr0vL/lgTb6W7y8zwemIo=
Subject key identifier:   D6:24:2C:E1:06:5C:25:F0:D6:59:FB:8B:5D:2D:A8:32:D1:F2:33:EA
Certificate issuer:       /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial:       2F499BC6295FDAF36F0AE451DF776CBDB271477B
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3231372e302f32342d3234203d3e20383334.roa
Signing time:             Thu 08 Oct 2026 06:11:16 +0000
ROA not before:           Thu 08 Oct 2026 06:06:16 +0000
ROA not after:            Thu 07 Oct 2027 06:11:16 +0000
asID:                     834
IP address blocks:        5.83.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
                          rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Oct 2026 17:30:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:49:9b:c6:29:5f:da:f3:6f:0a:e4:51:df:77:6c:bd:b2:71:47:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
        Validity
            Not Before: Oct  8 06:06:16 2026 GMT
            Not After : Oct  7 06:11:16 2027 GMT
        Subject: CN=D6242CE1065C25F0D659FB8B5D2DA832D1F233EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:fc:d8:7a:45:bc:c1:e1:04:f4:2f:7d:b3:69:
                    e9:a8:c3:ff:c6:e4:46:95:53:b9:6a:bc:41:47:0a:
                    2a:82:b9:9f:5f:ff:3e:51:d7:92:57:a8:61:0c:4a:
                    b2:d5:25:12:17:59:00:96:c8:6d:e5:85:d6:1a:3e:
                    fd:8f:07:1f:e4:0a:fc:eb:03:d1:80:9a:44:cf:91:
                    a2:ab:e2:c7:58:16:35:c9:ce:58:5d:90:24:66:c4:
                    3a:a7:66:72:b9:d7:b1:9d:a8:4e:57:9e:18:a7:3e:
                    46:ea:07:dc:77:1e:ef:db:8d:2b:2d:f8:a3:82:8b:
                    3e:ea:7c:1b:c2:74:20:49:7e:96:6b:ee:6c:0f:ce:
                    3f:a4:74:46:c4:71:c2:89:73:02:31:ca:75:c4:dc:
                    7a:88:b5:f4:2d:01:4d:b2:20:e4:ac:a9:7f:7e:85:
                    29:27:7a:19:30:5e:c4:c5:40:b3:9b:73:0d:24:9a:
                    ff:07:d1:9f:8b:84:44:15:f2:3b:f1:27:30:f2:d8:
                    2f:b9:37:31:f7:4a:9b:9b:c2:3a:77:24:81:16:5a:
                    d8:b8:d2:06:d6:b1:da:76:a3:20:d7:89:eb:a7:bd:
                    d9:85:61:c9:5a:c9:ab:73:74:90:42:7f:c3:b8:ba:
                    bd:d8:78:d6:52:dc:63:ae:da:9d:60:14:40:c2:82:
                    98:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:24:2C:E1:06:5C:25:F0:D6:59:FB:8B:5D:2D:A8:32:D1:F2:33:EA
            X509v3 Authority Key Identifier:
                keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3231372e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.83.217.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:fe:d9:1d:55:2e:6c:23:21:74:9a:ff:7f:6b:1e:27:70:0c:
         89:49:18:67:6a:78:de:f0:62:c2:bc:8d:a4:6e:ab:59:be:4d:
         d1:c0:c8:10:02:35:c0:51:96:09:dc:9f:af:97:66:13:ad:71:
         62:e7:41:63:d9:dd:7f:83:d1:2b:e9:3b:15:e9:07:34:77:56:
         9b:7f:02:7c:e6:69:d4:4a:de:81:be:a8:c4:de:55:7f:e1:05:
         ca:bf:01:59:b3:3e:0e:f8:97:13:e5:55:0c:c7:26:0a:c1:da:
         47:e2:c1:b4:51:b7:97:6c:1a:4a:8b:03:98:38:65:78:36:4a:
         53:1f:20:5f:af:ef:c4:cc:3e:c4:30:78:c1:7c:21:75:ab:18:
         43:73:00:0f:3f:fe:8a:63:4e:c0:84:49:4e:4b:bc:29:80:5a:
         9e:e8:c1:3d:c9:5a:b0:d2:a7:be:40:df:71:48:68:d8:71:a0:
         15:8b:4e:b7:7b:5c:65:a5:54:9f:74:17:97:fd:54:a2:1f:8c:
         67:03:23:0d:a6:01:a6:99:f0:39:de:cc:fb:29:be:09:75:e2:
         47:fb:4a:30:43:f9:4b:fe:c5:b5:9c:7a:f2:1b:b3:49:79:b0:
         ab:a1:5a:0e:d8:21:c7:45:b5:d0:15:68:87:3b:a1:ce:72:4c:
         03:8d:8d:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----