Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e34302e302f32322d3234203d3e2035363530.roa
File:                     36322e3134342e34302e302f32322d3234203d3e2035363530.roa (raw, json)
Hash identifier:          8odc+HlZ+kZ01yPboqOLevLCVjYf2o9Yn3YEBQSDNeo=
Subject key identifier:   C5:8D:50:8F:55:57:38:69:79:76:D1:C7:94:67:EB:88:38:15:6D:AB
Certificate issuer:       /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
Certificate serial:       3E37706C2E87E49268A3B6A94DFDFC071177BC5E
Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e34302e302f32322d3234203d3e2035363530.roa
Signing time:             Tue 28 Jul 2026 12:18:18 +0000
ROA not before:           Tue 28 Jul 2026 12:13:18 +0000
ROA not after:            Tue 27 Jul 2027 12:18:18 +0000
asID:                     5650
IP address blocks:        62.144.40.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl
                          rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:37:70:6c:2e:87:e4:92:68:a3:b6:a9:4d:fd:fc:07:11:77:bc:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
        Validity
            Not Before: Jul 28 12:13:18 2026 GMT
            Not After : Jul 27 12:18:18 2027 GMT
        Subject: CN=C58D508F555738697976D1C79467EB8838156DAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:6c:cb:b1:d1:fe:b5:9e:30:cf:be:5b:c3:e3:
                    36:ca:1b:a3:28:ee:5b:92:06:e7:c5:a6:3a:8f:80:
                    64:ca:b6:c0:55:ab:57:58:5d:72:88:d7:32:56:2e:
                    21:0b:25:68:53:10:e4:f5:1e:47:1b:76:64:64:b6:
                    39:06:b8:be:8d:c1:0f:71:32:7f:e3:59:cc:26:0a:
                    00:1d:74:f0:dd:b4:4b:5f:02:5a:20:ea:15:2a:25:
                    85:06:c9:1b:ce:85:ff:95:18:4f:7c:d9:24:33:44:
                    70:1e:44:72:1e:96:db:73:92:71:e8:ce:1c:86:0c:
                    34:d2:e8:17:66:8d:0c:a5:00:70:f8:69:f3:00:76:
                    01:93:4a:0b:a0:b5:8e:1f:72:ef:9a:04:78:a6:ed:
                    b9:70:10:cf:ff:4b:f3:2a:63:6f:80:1b:89:da:db:
                    03:99:64:61:77:de:61:95:d8:c5:cf:1d:d4:99:a4:
                    4f:58:9f:99:74:4a:c5:0d:41:b9:6f:29:31:2f:1e:
                    08:70:56:b4:f9:72:a7:fc:e7:99:0c:f5:f4:e5:28:
                    71:07:35:6d:72:82:ee:1f:4e:00:7a:8a:d7:24:97:
                    02:53:4f:2e:7f:81:36:43:79:57:c6:b2:65:31:99:
                    f9:b2:d8:21:e9:bb:f1:e1:cb:06:57:75:7b:1f:42:
                    7b:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:8D:50:8F:55:57:38:69:79:76:D1:C7:94:67:EB:88:38:15:6D:AB
            X509v3 Authority Key Identifier:
                keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e34302e302f32322d3234203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.144.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         85:c1:53:d0:6b:07:fd:4d:6f:d5:46:dc:e4:c1:b1:5b:c7:77:
         d6:53:f9:86:c7:32:99:b5:f2:df:d3:2c:85:7c:10:a0:ce:4c:
         fa:dd:80:08:44:dd:c8:8c:b8:78:dd:0c:5a:de:7a:6f:f7:f3:
         0d:53:1e:c9:a9:d7:fa:20:3e:67:76:ad:ee:90:17:87:90:6d:
         99:2a:49:f4:09:5f:dc:3b:69:7b:76:23:59:96:b1:2c:6c:cb:
         50:fa:a3:c6:c9:4a:cf:77:a0:61:2e:68:5c:5a:18:9a:e8:7a:
         db:87:ce:ec:45:56:bb:2e:ab:09:fd:b4:0d:e3:66:b4:11:1a:
         6d:89:46:23:bf:5c:20:d6:7f:ec:77:7d:30:c9:dd:10:7a:61:
         db:e6:c5:34:28:99:c2:a2:67:3f:95:4f:d3:e8:b3:25:fe:55:
         4a:6c:54:66:07:b4:77:69:a6:2a:d4:0d:13:60:02:e5:c5:30:
         c5:54:0b:10:ac:ba:7a:71:d4:ad:93:bb:11:ea:47:6d:64:10:
         21:e0:34:76:13:05:13:e9:63:15:b7:8e:ec:7a:f4:62:9f:0c:
         e5:f1:fe:30:b7:1b:a5:60:73:8b:97:a5:65:e7:bb:43:80:c1:
         fc:40:f5:27:3b:b4:1b:69:87:2c:d1:fe:57:fb:35:bb:5a:95:
         c2:8f:e2:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:18:39 2026 by rpki-client