Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e33362e302f32322d3234203d3e2035363530.roa
File:                     36322e3134342e33362e302f32322d3234203d3e2035363530.roa (raw, json)
Hash identifier:          eC9GQglY0CTeOAkm/hhNHyZTdXJT3D4Wy2AurSOnFDs=
Subject key identifier:   FE:EB:D3:D3:A1:61:36:DF:C6:48:BA:5E:0E:21:75:6D:CD:97:FA:E7
Certificate issuer:       /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
Certificate serial:       2AA0E326FC2239D92D809BB24D179A8B12626CE3
Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e33362e302f32322d3234203d3e2035363530.roa
Signing time:             Tue 28 Jul 2026 12:18:16 +0000
ROA not before:           Tue 28 Jul 2026 12:13:16 +0000
ROA not after:            Tue 27 Jul 2027 12:18:16 +0000
asID:                     5650
IP address blocks:        62.144.36.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl
                          rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:a0:e3:26:fc:22:39:d9:2d:80:9b:b2:4d:17:9a:8b:12:62:6c:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
        Validity
            Not Before: Jul 28 12:13:16 2026 GMT
            Not After : Jul 27 12:18:16 2027 GMT
        Subject: CN=FEEBD3D3A16136DFC648BA5E0E21756DCD97FAE7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:ce:3d:f7:54:d3:84:7b:12:5a:c9:f9:1d:a9:
                    b3:c2:60:db:10:92:f1:2c:e7:b5:e7:20:e3:99:63:
                    8b:d8:34:2f:a7:be:9d:f7:d1:13:6c:11:56:71:3c:
                    37:0b:8f:fb:63:db:16:35:97:4a:3a:a3:3c:33:d1:
                    10:61:98:04:e2:ee:93:c3:5e:bc:34:a5:16:41:83:
                    8c:b5:7e:71:bd:2f:b3:4c:71:37:5f:86:f5:d4:2b:
                    b4:9e:d1:14:ff:87:95:50:92:80:ca:26:ee:5e:a2:
                    54:b3:8a:3a:94:46:7b:1c:20:e5:0b:f4:ee:94:fd:
                    41:6b:05:d2:2c:85:00:6b:4f:3a:25:2b:f7:10:6e:
                    e1:81:ec:af:8d:b3:a4:ea:24:49:ba:b7:b5:9c:fa:
                    e7:bf:c3:ae:7c:a3:35:da:da:c0:ee:4a:db:61:56:
                    9f:1b:92:81:fc:61:07:5b:55:bf:af:4e:53:2a:f5:
                    ee:f9:da:d5:92:4d:b9:64:21:f3:2e:88:52:02:4d:
                    e3:eb:90:5d:4b:51:98:4b:f0:bd:c8:45:cb:3e:e4:
                    aa:dc:75:0f:98:3c:2d:78:a8:34:0a:9e:2c:98:3c:
                    ab:84:99:c8:ad:cf:e7:37:cc:db:0b:7d:27:49:78:
                    b9:e4:27:63:00:02:83:8f:b0:44:bc:42:c6:ed:55:
                    f9:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:EB:D3:D3:A1:61:36:DF:C6:48:BA:5E:0E:21:75:6D:CD:97:FA:E7
            X509v3 Authority Key Identifier:
                keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e33362e302f32322d3234203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.144.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ab:93:b3:49:1f:01:94:03:a8:34:56:37:ef:61:7d:d0:e2:f6:
         3a:d6:38:67:5f:b1:74:e6:c3:c0:87:e6:cd:1f:68:c4:52:bf:
         47:11:4e:8f:7b:f9:ab:f9:a5:c9:28:8e:0c:77:67:bf:06:c6:
         4c:b3:e9:a5:02:82:88:c2:c4:a1:fa:0a:1e:e9:ee:ac:1b:ff:
         5c:ee:b6:67:6d:51:95:55:84:5e:01:58:b0:98:58:de:20:f2:
         8f:f9:b3:b5:55:08:bb:5f:10:44:2d:d2:00:24:3b:9d:c6:41:
         12:d4:6e:71:eb:6c:a3:e8:3c:b9:43:ca:5c:b3:88:08:0c:2a:
         3a:a4:c3:3e:eb:41:f2:58:8d:2d:42:05:3a:a7:8a:91:65:26:
         bf:1b:19:a8:5f:23:0b:49:8a:00:86:ce:8e:f4:1b:01:90:e2:
         91:bf:78:70:f9:e4:0e:fb:3e:1f:de:f5:19:7a:f7:bf:af:fd:
         5b:f4:c7:df:be:cf:2e:b2:74:cf:a7:0c:b4:96:5d:9b:76:73:
         8b:6a:80:2a:4c:7e:c3:26:e1:b4:41:2b:cf:c9:a9:b5:9b:88:
         d3:0d:bf:f1:61:97:09:6d:6e:97:3f:b2:05:ea:98:e6:5f:52:
         d4:fa:67:c3:55:8c:36:9f:b8:08:2e:95:c6:19:57:60:46:ba:
         c8:40:51:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:18:05 2026 by rpki-client