Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e34302e302f32322d3234203d3e203133333437.roa
File:                     36322e3134342e34302e302f32322d3234203d3e203133333437.roa (raw, json)
Hash identifier:          eMoNu9rh0H8+gBOcXRfGxst5sctzD3I45wmegZY2L3Y=
Subject key identifier:   C1:65:98:87:98:2D:3B:9B:79:EA:77:45:AA:40:26:FA:CA:32:54:05
Certificate issuer:       /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
Certificate serial:       26C528D3025E288769A9C0EB0D7B79525937F979
Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e34302e302f32322d3234203d3e203133333437.roa
Signing time:             Tue 28 Jul 2026 12:18:17 +0000
ROA not before:           Tue 28 Jul 2026 12:13:17 +0000
ROA not after:            Tue 27 Jul 2027 12:18:17 +0000
asID:                     13347
IP address blocks:        62.144.40.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl
                          rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:c5:28:d3:02:5e:28:87:69:a9:c0:eb:0d:7b:79:52:59:37:f9:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
        Validity
            Not Before: Jul 28 12:13:17 2026 GMT
            Not After : Jul 27 12:18:17 2027 GMT
        Subject: CN=C1659887982D3B9B79EA7745AA4026FACA325405
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:0c:72:d2:a4:b0:26:38:3c:cb:6f:7c:0a:be:
                    03:4d:68:ec:39:60:4d:54:17:4a:2f:77:ff:01:bb:
                    1d:b4:bf:be:ac:8f:1b:b8:c4:5c:ab:97:5d:36:8f:
                    d0:6f:43:0a:8d:2e:18:4d:18:1c:7f:41:ef:6a:21:
                    76:7e:fe:39:f3:0f:d4:be:88:71:2a:45:f9:a7:c0:
                    df:86:4b:a7:17:8e:f6:f9:b0:0a:30:d1:e3:7d:be:
                    fe:8b:2c:e5:78:bf:1d:76:b3:c1:b3:08:b4:6d:84:
                    ff:03:81:12:6e:31:b2:ce:18:4f:32:b2:f8:a3:0e:
                    27:ae:8b:76:a0:3e:29:66:98:a0:d1:f8:3d:9a:f3:
                    80:ca:d8:2d:57:61:0d:7d:05:de:c9:12:4d:4a:67:
                    a7:7c:06:a2:09:51:c5:7d:b3:50:26:ad:e1:8f:a2:
                    26:3f:3d:5e:11:3b:d0:d8:81:94:6a:af:94:75:49:
                    89:0c:95:75:43:3b:7a:7e:96:ff:56:dd:98:a7:ae:
                    84:46:35:94:72:41:9e:2c:fd:8b:0a:dc:c9:4a:bb:
                    cf:45:b3:63:79:cb:41:b1:aa:0d:ec:8c:45:92:4d:
                    d2:a2:e0:74:4c:a2:21:36:fa:53:b7:5f:0f:00:f4:
                    be:99:2e:36:c6:02:47:01:4c:ce:3b:0f:25:44:d3:
                    c0:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:65:98:87:98:2D:3B:9B:79:EA:77:45:AA:40:26:FA:CA:32:54:05
            X509v3 Authority Key Identifier:
                keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e34302e302f32322d3234203d3e203133333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.144.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b2:93:18:58:9c:cb:e2:61:e0:10:90:0c:07:dc:f0:7c:6a:94:
         09:f2:a1:85:8c:c2:46:71:df:bc:dd:99:25:e9:cc:84:9c:66:
         ca:dd:ef:c4:69:13:59:43:7d:8a:a9:1b:cb:74:80:5e:e0:c0:
         43:2f:8a:2b:cf:88:de:28:8e:0a:16:64:1c:ae:61:b4:87:2e:
         57:61:2f:f9:e5:d1:56:02:b5:84:08:f8:17:0c:cd:4c:b4:1b:
         a0:2c:32:29:1d:e5:c9:18:3b:75:3c:fa:d3:30:59:5a:f4:37:
         6a:c9:c3:2b:f5:97:c5:c8:44:27:c1:f1:67:75:86:3f:92:b8:
         c3:92:96:6f:b0:c6:54:6d:c9:0f:fc:d9:43:a3:15:35:1b:0f:
         6b:27:c0:8e:2b:3c:37:d5:50:24:0f:27:26:51:4a:98:a0:52:
         6c:aa:1a:4c:41:39:9d:ce:63:90:e4:fb:d8:17:19:8f:b8:97:
         68:7f:f4:c5:f6:dd:3a:c7:c9:3c:a5:d6:d5:03:46:4d:34:22:
         2e:2d:6f:90:3c:d9:0d:ef:81:75:36:ed:2c:21:76:f1:d7:54:
         74:f5:5b:d0:80:d8:db:60:07:b0:47:dd:31:d8:78:6e:d8:20:
         c8:98:ce:3b:7b:c7:de:47:39:92:96:69:ae:c5:79:08:db:fb:
         d3:61:38:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 17:16:02 2026 by rpki-client