Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e34302e302f32322d3234203d3e2037303239.roa
File:                     36322e3134342e34302e302f32322d3234203d3e2037303239.roa (raw, json)
Hash identifier:          8l/Oxojvo8HsPu+8wVqhSFSXTneOt+pMb53yy+k6bKw=
Subject key identifier:   64:74:6A:BF:B1:F2:31:70:51:E7:58:89:9A:4A:81:2B:16:D3:69:33
Certificate issuer:       /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
Certificate serial:       79500E28D630A20C0A7EB9F090D91B5777A22EF9
Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e34302e302f32322d3234203d3e2037303239.roa
Signing time:             Tue 28 Jul 2026 12:18:15 +0000
ROA not before:           Tue 28 Jul 2026 12:13:15 +0000
ROA not after:            Tue 27 Jul 2027 12:18:15 +0000
asID:                     7029
IP address blocks:        62.144.40.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl
                          rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:50:0e:28:d6:30:a2:0c:0a:7e:b9:f0:90:d9:1b:57:77:a2:2e:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
        Validity
            Not Before: Jul 28 12:13:15 2026 GMT
            Not After : Jul 27 12:18:15 2027 GMT
        Subject: CN=64746ABFB1F2317051E758899A4A812B16D36933
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:a1:68:ea:9d:94:14:00:5c:a6:4b:3f:fa:1c:
                    af:23:49:a9:93:a3:81:68:3c:a2:b1:25:f5:85:8e:
                    19:6c:19:16:64:17:aa:22:ef:e5:42:fb:3c:c7:d7:
                    d8:7e:98:37:6c:27:34:c5:6a:47:5e:d9:f6:5c:fd:
                    15:7a:96:23:aa:6f:27:81:47:29:a7:7b:3a:80:be:
                    d6:27:a8:99:95:c1:fb:0f:44:5a:a7:a5:10:f2:a1:
                    e6:1b:a1:cc:c2:35:f4:ef:59:0e:68:9d:97:40:a4:
                    53:dd:0d:4f:27:9e:c8:4b:8e:18:44:c4:40:b6:74:
                    c6:c1:27:44:59:8b:2b:cd:21:1e:33:e1:a0:b0:f6:
                    53:c3:7f:ef:4c:4d:0d:6c:90:98:72:e2:e7:0e:0c:
                    f4:e4:63:42:d0:7e:a1:f5:02:12:cd:fb:05:fd:af:
                    18:9e:a7:8b:35:69:8f:00:12:8a:f1:62:42:c2:d6:
                    b9:29:ed:24:a1:5c:fc:ee:ae:aa:df:29:41:39:6d:
                    0a:e4:1c:30:10:c3:e4:14:8f:af:c1:2a:fd:63:ca:
                    a8:78:7b:c3:7e:59:a1:5d:5c:0c:3c:cf:96:29:79:
                    b7:a7:99:94:8e:79:b8:00:19:bc:d6:ad:e0:0d:6e:
                    81:41:09:55:02:22:4d:b5:89:ed:5c:5a:a6:cb:96:
                    b8:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:74:6A:BF:B1:F2:31:70:51:E7:58:89:9A:4A:81:2B:16:D3:69:33
            X509v3 Authority Key Identifier:
                keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e34302e302f32322d3234203d3e2037303239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.144.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b9:70:fb:db:0b:55:f2:4b:56:82:a8:93:ae:a5:df:d4:80:6d:
         eb:86:af:c1:86:10:8e:47:ef:80:70:69:69:5a:2d:7b:06:e3:
         9d:e0:a2:41:ae:97:fd:08:96:fc:99:46:7b:49:ac:82:7c:5d:
         0b:f7:60:e9:70:e4:90:50:30:4b:63:c1:f1:0c:c8:86:02:29:
         e2:c0:98:d6:9a:ca:3d:9b:de:be:f2:48:89:ea:86:9c:2e:f8:
         d0:aa:ec:d7:65:2d:fc:f1:56:3d:e4:14:6c:8a:07:af:d9:10:
         50:35:f0:05:c2:a2:0c:e7:9c:1d:8d:37:e4:d7:b9:da:6c:4c:
         12:4f:0b:14:ec:74:2b:ff:ca:76:c1:e2:e5:71:8d:b9:de:98:
         9a:dd:1a:99:b2:83:7b:76:02:8b:af:07:11:b5:cb:1e:4f:d9:
         1e:64:50:dd:21:ba:7c:a0:ca:ca:2d:69:db:08:c4:ca:66:39:
         d7:94:f0:e0:88:3f:86:0f:93:1f:d0:01:84:6d:e7:a7:a4:4c:
         e0:35:a1:00:d2:fa:a7:0c:88:76:7a:02:cd:5c:eb:8c:4d:67:
         88:3a:de:d9:3c:99:da:97:6c:ab:30:52:24:82:c4:c4:f5:77:
         7f:57:48:6c:89:4f:a3:95:83:cd:4b:e0:d1:1b:fe:ad:c9:ff:
         05:d2:b1:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:20:20 2026 by rpki-client