Route Origin Authorization

$ rpki-client -vvvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3232302e302f32332d3234203d3e20383334.roa
File:                     352e38332e3232302e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier:          B86OPHuCAbG/f0QoXXi7dtZ8pZdZZ8Tbfjq4C2JxXoI=
Subject key identifier:   B9:B4:E6:5B:E8:A9:8D:C6:C1:FA:5E:A5:08:3E:4B:A6:2D:FA:C2:32
Certificate issuer:       /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial:       660D9788EBE2667E8CAE0B13BB3CFC329B58E929
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3232302e302f32332d3234203d3e20383334.roa
Signing time:             Fri 13 Nov 2026 00:10:52 +0000
ROA not before:           Fri 13 Nov 2026 00:05:52 +0000
ROA not after:            Fri 12 Nov 2027 00:10:52 +0000
asID:                     834
IP address blocks:        5.83.220.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
                          rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Nov 2026 09:59:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:0d:97:88:eb:e2:66:7e:8c:ae:0b:13:bb:3c:fc:32:9b:58:e9:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
        Validity
            Not Before: Nov 13 00:05:52 2026 GMT
            Not After : Nov 12 00:10:52 2027 GMT
        Subject: CN=B9B4E65BE8A98DC6C1FA5EA5083E4BA62DFAC232
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:4f:57:51:17:9b:45:df:71:0a:ab:a9:2c:b1:
                    84:44:57:07:37:f4:ac:d4:01:a9:2f:f4:b1:ec:74:
                    fd:be:9b:70:ab:0d:d1:1c:7a:5b:cb:60:04:37:c9:
                    b9:b7:d3:f1:c2:be:97:ca:4e:dd:a5:40:91:a7:2d:
                    0f:88:e8:33:1c:aa:d1:8c:a3:5b:7d:e3:5e:eb:00:
                    ac:7e:cc:db:3b:55:59:ac:f5:cd:25:3a:c4:8c:d8:
                    26:9f:d5:f2:52:6c:0f:5a:16:a5:01:3a:49:4e:01:
                    ee:da:e4:f8:98:bc:8a:d6:7f:f4:4c:db:99:49:09:
                    f7:ad:ef:08:4d:cf:e3:c6:44:12:d3:f7:29:21:66:
                    47:66:21:6b:a9:2c:71:35:d1:08:42:eb:91:e3:bb:
                    4f:0f:15:20:47:dd:c9:c7:1a:b6:d9:66:14:05:a6:
                    f0:b3:91:76:0e:33:9d:9e:8d:c6:1f:3b:c1:86:dc:
                    45:4d:82:e8:59:4f:89:78:53:a3:78:87:8a:05:70:
                    c8:fb:00:01:60:1d:1b:88:bf:8c:9a:43:a3:46:46:
                    f6:dc:75:75:ee:dc:4b:04:6f:4f:a5:2b:8d:80:23:
                    e7:68:3a:d7:6b:84:26:b7:79:12:c4:24:a7:ea:b7:
                    32:c5:13:fc:29:59:48:0f:c1:30:9d:7d:ce:6a:75:
                    c1:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:B4:E6:5B:E8:A9:8D:C6:C1:FA:5E:A5:08:3E:4B:A6:2D:FA:C2:32
            X509v3 Authority Key Identifier:
                keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3232302e302f32332d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.83.220.0/23

    Signature Algorithm: sha256WithRSAEncryption
         89:8c:ed:f8:eb:61:d2:fe:e4:c4:6c:f6:ea:76:ad:eb:a2:16:
         7b:c0:4b:45:90:cc:c6:63:99:25:27:47:b8:af:04:77:36:34:
         60:9e:77:89:81:38:39:74:02:7c:81:48:14:f0:03:ec:41:29:
         2c:2c:c3:fd:7b:a0:12:f1:cc:22:0d:85:83:6b:39:23:86:d4:
         61:99:c7:bc:38:50:65:dd:7c:94:78:9c:ac:2b:55:90:c8:41:
         57:68:11:3c:89:28:23:7f:d3:02:56:bb:a8:b7:87:1c:55:67:
         2f:19:c0:0f:4b:54:d6:28:56:2d:67:98:12:79:82:fd:22:19:
         fb:77:66:ef:cd:fb:e0:3b:7e:a3:2a:93:dc:45:11:66:a5:5d:
         8b:f8:08:ec:a2:8c:4a:cc:03:f8:49:86:7f:1e:ef:85:ac:9c:
         d4:4d:52:27:21:ad:1f:7f:3b:62:a3:7e:af:23:e9:1e:d4:7f:
         15:58:d7:4a:91:05:99:7e:d7:cb:a7:e4:ad:3b:38:fd:17:79:
         98:5e:a4:53:a4:77:90:bd:24:25:38:94:a2:d0:34:d1:aa:1c:
         59:d1:42:7b:69:84:6b:c7:54:62:29:cb:ef:a9:f9:45:69:b3:
         50:03:7f:0b:bc:43:44:79:e6:bf:ab:7a:fa:7c:6b:2e:49:99:
         32:1c:f2:3c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUZg2XiOviZn6MrgsTuzz8MptY6SkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkEyRkI0REIwQUE0RDAwNjk1ODMxNjg3MkU0NjdCNTU0
RTBGRDBCRTAeFw0yNjExMTMwMDA1NTJaFw0yNzExMTIwMDEwNTJaMDMxMTAvBgNV
BAMTKEI5QjRFNjVCRThBOThEQzZDMUZBNUVBNTA4M0U0QkE2MkRGQUMyMzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmT1dRF5tF33EKq6kssYREVwc3
9KzUAakv9LHsdP2+m3CrDdEcelvLYAQ3ybm30/HCvpfKTt2lQJGnLQ+I6DMcqtGM
o1t9417rAKx+zNs7VVms9c0lOsSM2Caf1fJSbA9aFqUBOklOAe7a5PiYvIrWf/RM
25lJCfet7whNz+PGRBLT9ykhZkdmIWupLHE10QhC65Hju08PFSBH3cnHGrbZZhQF
pvCzkXYOM52ejcYfO8GG3EVNguhZT4l4U6N4h4oFcMj7AAFgHRuIv4yaQ6NGRvbc
dXXu3EsEb0+lK42AI+doOtdrhCa3eRLEJKfqtzLFE/wpWUgPwTCdfc5qdcEDAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUubTmW+ipjcbB+l6lCD5Lpi36wjIwHwYDVR0j
BBgwFoAUKi+02wqk0AaVgxaHLkZ7VU4P0L4wDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
YTZmMjE0N2EtZGU4YS00NDQwLWJjYTItNmQ4YjdjODc2ZmRhLTAvMC8yQTJGQjRE
QjBBQTREMDA2OTU4MzE2ODcyRTQ2N0I1NTRFMEZEMEJFLmNybDCBngYIKwYBBQUH
AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5LzlkZjMzYTU3LTdlNGYtNDg0NC04NGUyLWI3MTUz
YjU1MTFiNC8wLzJBMkZCNERCMEFBNEQwMDY5NTgzMTY4NzJFNDY3QjU1NEUwRkQw
QkUuY2VyMIGbBggrBgEFBQcBCwSBjjCBizCBiAYIKwYBBQUHMAuGfHJzeW5jOi8v
ci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvL2E2ZjIxNDdhLWRlOGEtNDQ0MC1iY2Ey
LTZkOGI3Yzg3NmZkYS0wLzAvMzUyZTM4MzMyZTMyMzIzMDJlMzAyZjMyMzMyZDMy
MzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAQVT3DANBgkqhkiG9w0BAQsFAAOC
AQEAiYzt+Oth0v7kxGz26nat66IWe8BLRZDMxmOZJSdHuK8EdzY0YJ53iYE4OXQC
fIFIFPAD7EEpLCzD/XugEvHMIg2Fg2s5I4bUYZnHvDhQZd18lHicrCtVkMhBV2gR
PIkoI3/TAla7qLeHHFVnLxnAD0tU1ihWLWeYEnmC/SIZ+3dm78374Dt+oyqT3EUR
ZqVdi/gI7KKMSswD+EmGfx7vhayc1E1SJyGtH387YqN+ryPpHtR/FVjXSpEFmX7X
y6fkrTs4/Rd5mF6kU6R3kL0kJTiUotA00aocWdFCe2mEa8dUYinL76n5RWmzUAN/
C7xDRHnmv6t6+nxrLkmZMhzyPA==
-----END CERTIFICATE-----