Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e33322e302f32322d3234203d3e2035363530.roa
File:                     36322e3134342e33322e302f32322d3234203d3e2035363530.roa (raw, json)
Hash identifier:          XQJ4Sbx2suVbfZZs8xN8JSfuEdv/gMkUgN5EA3Fu664=
Subject key identifier:   07:D3:80:31:4D:BA:73:CC:D6:83:E6:41:68:7D:40:BF:48:00:11:E3
Certificate issuer:       /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
Certificate serial:       6C3EB721A6B4F4A499B02C22E5CFCF330A5E0587
Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e33322e302f32322d3234203d3e2035363530.roa
Signing time:             Tue 28 Jul 2026 12:18:16 +0000
ROA not before:           Tue 28 Jul 2026 12:13:16 +0000
ROA not after:            Tue 27 Jul 2027 12:18:16 +0000
asID:                     5650
IP address blocks:        62.144.32.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl
                          rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:3e:b7:21:a6:b4:f4:a4:99:b0:2c:22:e5:cf:cf:33:0a:5e:05:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
        Validity
            Not Before: Jul 28 12:13:16 2026 GMT
            Not After : Jul 27 12:18:16 2027 GMT
        Subject: CN=07D380314DBA73CCD683E641687D40BF480011E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:39:6a:04:7d:f6:16:2b:de:e6:e2:07:a3:2e:
                    94:c6:1f:65:26:fc:9b:03:08:58:55:0c:d3:37:23:
                    e3:f2:dd:41:7d:24:58:6a:5a:de:e5:36:88:1c:d1:
                    76:0e:21:7a:dc:87:28:64:80:d4:68:c1:e1:77:3f:
                    e9:5d:41:05:ed:fe:a8:3c:7c:63:cc:df:b9:a7:4a:
                    34:91:07:fd:8e:46:db:b0:08:dc:86:46:e5:b6:9c:
                    51:65:bf:5f:dc:6d:43:58:ce:f8:40:1e:ca:df:3e:
                    aa:81:cd:6d:b2:62:35:7b:b6:e8:fe:00:52:96:25:
                    92:69:f3:66:5e:e7:4b:28:ef:9d:13:8f:9c:2d:ce:
                    2f:f8:12:b9:8c:1c:3c:55:c9:41:03:be:6a:6d:dc:
                    fd:17:a1:d4:52:bb:2f:c0:a7:da:48:06:d8:44:82:
                    8c:62:fb:b5:fc:58:dc:b8:c4:8b:cd:d1:4f:5e:89:
                    38:a4:a0:b6:45:a9:88:74:43:1d:48:bd:75:cd:75:
                    df:3d:9c:61:6d:20:9a:24:2b:77:48:48:b1:16:95:
                    bc:25:b7:d0:34:e9:91:a6:48:da:d9:eb:4b:bc:f5:
                    78:08:14:f9:54:d4:13:bc:5e:73:04:79:4c:f0:df:
                    e3:c5:1c:9c:be:ca:16:79:4c:c7:68:e6:29:cd:74:
                    06:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:D3:80:31:4D:BA:73:CC:D6:83:E6:41:68:7D:40:BF:48:00:11:E3
            X509v3 Authority Key Identifier:
                keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e33322e302f32322d3234203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.144.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         72:53:d2:fa:ac:f2:64:97:cb:c3:1c:69:5f:84:5f:67:44:8b:
         36:e7:2f:98:ab:bc:35:d4:9d:80:1e:fa:18:fb:f3:49:7c:30:
         9f:12:8e:03:dd:4f:41:50:b0:07:1a:0c:27:da:45:3f:9c:8c:
         d2:52:4c:ce:61:f2:b2:62:9e:8d:68:cb:43:38:44:77:d2:57:
         82:7f:bf:9d:d0:56:ab:70:e7:c0:cf:8c:cc:33:b6:f8:48:45:
         cf:30:a9:82:1a:c6:85:7e:0a:1c:19:ce:89:07:5b:32:f2:dc:
         60:b6:0b:9d:dc:d6:b7:ae:0a:78:62:fb:6d:62:0e:81:da:7e:
         df:91:90:c9:e9:63:1b:83:94:f4:98:08:58:d5:7e:3b:cd:c0:
         1b:78:b7:49:3a:e9:19:30:55:db:3f:37:14:21:6b:f2:a5:50:
         38:14:0d:94:d1:13:35:dc:5d:0b:84:42:79:7d:55:2a:7b:e5:
         ee:45:b9:f2:05:5c:56:0e:e0:9b:17:b9:c6:60:9e:69:9f:41:
         c3:6c:9c:fa:17:2e:12:02:ec:5c:ff:69:6b:52:07:53:9e:8f:
         6b:f8:a6:01:e0:60:5b:da:93:2f:a3:16:c7:b6:56:c7:09:4f:
         7e:74:de:4d:de:0e:d4:6c:17:b1:b7:a8:4e:f7:67:53:d7:95:
         5c:d8:86:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:39:10 2026 by rpki-client