Route Origin Authorization

$ rpki-client -vvvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3232302e302f32342d3234203d3e20383334.roa
File:                     352e38332e3232302e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          pplmAiDTivysA+b2nsmxbYCRezi8E44i/BbsVHYZZac=
Subject key identifier:   2F:53:C7:16:A0:2F:24:A2:BE:5A:19:88:94:91:A2:EE:1D:8E:71:54
Certificate issuer:       /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial:       3AD5F2E1B52124F67CE63202270B328FCA304185
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3232302e302f32342d3234203d3e20383334.roa
Signing time:             Mon 12 Oct 2026 00:07:37 +0000
ROA not before:           Mon 12 Oct 2026 00:02:37 +0000
ROA not after:            Mon 11 Oct 2027 00:07:37 +0000
asID:                     834
IP address blocks:        5.83.220.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
                          rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Oct 2026 04:50:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:d5:f2:e1:b5:21:24:f6:7c:e6:32:02:27:0b:32:8f:ca:30:41:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
        Validity
            Not Before: Oct 12 00:02:37 2026 GMT
            Not After : Oct 11 00:07:37 2027 GMT
        Subject: CN=2F53C716A02F24A2BE5A19889491A2EE1D8E7154
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:c0:54:ba:99:a1:4f:7d:0b:e6:04:2e:d6:89:
                    c3:04:29:da:8a:e3:02:50:54:56:57:d2:6f:bf:1e:
                    1e:c5:ac:ad:37:21:a0:53:c5:cd:2d:88:20:45:6c:
                    e0:89:77:11:81:56:c7:6c:4e:05:07:46:f2:8c:d5:
                    86:c0:6f:d5:ac:5f:da:99:f1:bb:bf:d3:6d:d8:6f:
                    93:3f:d7:04:8b:4f:31:e9:36:5e:ba:a3:f1:49:95:
                    09:e6:14:0a:2a:ca:b4:60:f7:16:de:98:a8:db:5b:
                    c6:40:49:fb:b4:e0:ab:8e:37:83:2b:47:74:7c:11:
                    3a:82:1b:70:60:b2:f6:b7:54:ad:c7:a4:12:1b:4b:
                    c9:ef:ac:98:b4:17:8e:99:aa:96:c9:49:1d:34:13:
                    fe:64:15:8d:04:fd:b7:a4:b0:c4:6c:1b:3f:21:0a:
                    d4:61:e3:00:27:54:43:4a:7e:dd:54:f9:4a:07:c8:
                    e3:f3:0a:9b:5f:b1:71:0a:10:e0:4e:8a:b9:75:d4:
                    74:57:41:13:2c:80:16:cf:76:4b:70:fe:b9:69:64:
                    e8:ba:a2:d6:ef:20:c9:42:68:f1:8d:9d:5c:cb:0c:
                    02:0f:a8:da:0f:b9:84:e6:ef:cd:f4:3e:6e:28:86:
                    a0:47:62:b7:ae:a8:65:ec:ba:f8:e9:10:f8:f2:10:
                    cf:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:53:C7:16:A0:2F:24:A2:BE:5A:19:88:94:91:A2:EE:1D:8E:71:54
            X509v3 Authority Key Identifier:
                keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3232302e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.83.220.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:6d:77:2c:1f:13:87:92:63:91:a4:13:bb:43:cc:90:5c:e4:
         15:c6:15:4b:68:fb:83:9c:d7:9b:e0:93:00:3c:27:fa:44:97:
         d0:ed:04:c4:ff:b8:a9:0c:e5:fe:de:37:00:02:71:11:02:09:
         ee:6f:83:05:0e:52:29:e6:88:52:5f:e5:20:74:eb:5b:0c:42:
         51:dc:3f:70:f6:9d:24:dc:55:a4:61:a4:ae:c1:06:a7:b7:cb:
         aa:c1:fd:06:72:85:45:5f:f7:95:6b:57:84:a6:b1:b7:8a:fd:
         63:8a:28:eb:3f:21:b1:99:aa:c6:67:8a:da:7a:f7:d4:69:b3:
         38:04:b6:ab:4f:0d:01:bf:da:5a:b4:d0:39:a3:b9:5a:b9:76:
         73:0a:39:36:6a:a1:47:c5:47:ce:67:4d:bd:3c:7a:e5:cf:6c:
         5f:81:5d:60:cd:e2:52:d6:ee:db:c0:50:67:c1:89:06:cc:40:
         0d:ad:95:1d:c3:ba:ed:e8:4e:b1:7e:72:fd:34:0a:63:ee:25:
         b6:b9:dd:ba:9d:53:0b:85:c9:79:88:d1:3d:5c:91:74:95:f3:
         a7:86:b8:a6:7f:09:31:ce:f4:1f:39:37:23:8c:b3:ce:b4:ce:
         9b:3e:be:0c:8f:ba:a7:3b:c0:3d:3d:a0:86:2c:1c:2a:e2:4b:
         1a:65:cc:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----