Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e34342e302f32322d3234203d3e2037303239.roa
File:                     36322e3134342e34342e302f32322d3234203d3e2037303239.roa (raw, json)
Hash identifier:          P4G82s1JtU08NNVMrI4wrQsobXGdt2FU+46I9jOeIys=
Subject key identifier:   F6:F2:67:75:38:22:FD:F6:E7:F5:1C:4D:A0:86:82:7D:00:F3:F0:8E
Certificate issuer:       /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
Certificate serial:       60EB360DFE14F254E68F22B5DDA7F33C1F8F96B6
Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e34342e302f32322d3234203d3e2037303239.roa
Signing time:             Tue 28 Jul 2026 12:18:14 +0000
ROA not before:           Tue 28 Jul 2026 12:13:14 +0000
ROA not after:            Tue 27 Jul 2027 12:18:14 +0000
asID:                     7029
IP address blocks:        62.144.44.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl
                          rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:eb:36:0d:fe:14:f2:54:e6:8f:22:b5:dd:a7:f3:3c:1f:8f:96:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
        Validity
            Not Before: Jul 28 12:13:14 2026 GMT
            Not After : Jul 27 12:18:14 2027 GMT
        Subject: CN=F6F267753822FDF6E7F51C4DA086827D00F3F08E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:1c:1e:c9:9c:97:45:7b:28:73:e1:bf:8a:fc:
                    0c:18:34:de:e1:36:a6:c1:31:fe:bf:2c:95:e6:be:
                    f0:a6:57:e7:bc:c6:8b:31:e6:21:f1:34:72:9c:2a:
                    8f:49:aa:18:42:2c:b6:ab:99:cd:2b:f0:e9:c0:cb:
                    0c:10:f5:17:66:84:66:8f:38:88:d9:98:24:85:f8:
                    e7:29:f8:39:fb:13:27:0d:27:4b:40:61:00:b0:83:
                    5a:2b:96:a2:63:2a:a8:12:6a:4c:e0:68:50:a5:e7:
                    ac:e4:77:a0:7e:53:ea:39:75:5d:35:8d:8b:0d:ee:
                    fa:15:36:15:6c:00:dd:68:67:bb:6d:36:80:94:8b:
                    a6:9d:0f:ae:b3:34:4b:47:8a:d7:86:c9:30:9f:71:
                    2f:ef:f7:c7:90:6b:94:7c:33:96:48:00:c9:f8:3f:
                    f2:32:16:77:c0:05:59:e4:f4:af:60:eb:09:ef:c2:
                    ac:6f:83:75:34:6d:10:e3:a8:a5:aa:fb:6c:9f:9e:
                    a7:fe:8d:64:71:db:d1:cd:b5:92:74:cc:6c:83:d5:
                    86:06:2f:6f:a5:7c:2c:be:78:fa:ea:a1:a2:ab:b2:
                    44:2a:e0:29:37:ea:9c:4e:8a:0c:ed:ef:f7:4b:a2:
                    a5:69:e7:fc:bd:3b:43:93:15:79:63:0d:bc:35:fc:
                    21:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:F2:67:75:38:22:FD:F6:E7:F5:1C:4D:A0:86:82:7D:00:F3:F0:8E
            X509v3 Authority Key Identifier:
                keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e34342e302f32322d3234203d3e2037303239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.144.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3c:d1:2d:d1:15:e0:00:0f:c3:cd:59:4d:a3:e7:1a:dc:11:8e:
         eb:02:7c:58:8c:d6:52:ca:26:29:3e:80:a0:81:57:ef:0d:74:
         8a:e7:04:b5:22:41:d1:61:db:68:33:37:7e:f1:6f:a5:f3:32:
         81:01:28:0c:58:3a:25:52:01:d4:f8:45:71:f0:ab:0a:5b:0a:
         9f:3c:ed:6f:34:8c:81:51:ed:66:68:db:51:5d:4c:cb:92:7f:
         a5:14:f4:11:fd:1c:f7:1c:53:eb:3f:b8:2c:f1:76:ec:2c:e7:
         1e:f9:1a:6d:c9:5a:b4:64:51:c2:43:05:86:68:51:91:57:a6:
         8a:c8:fa:58:bb:0b:e9:99:2a:42:27:06:12:98:fe:a5:8e:1d:
         62:97:52:f7:aa:d6:26:b3:8e:7b:03:53:eb:bf:64:49:a3:73:
         ad:a0:ef:5a:9b:3c:5c:d8:10:e1:bf:a3:ce:1f:e2:ed:d4:b9:
         81:15:6a:3a:91:b4:eb:ef:fe:32:49:e3:60:e9:60:d6:7c:d8:
         89:f7:fe:de:c1:fd:17:6f:70:64:6b:8d:15:2a:5b:a1:75:c0:
         3d:7a:6b:57:1e:24:f2:d6:7e:5b:cc:3a:f3:2a:13:4a:62:48:
         9b:65:89:96:6d:e8:c1:67:bd:9d:62:40:fe:2b:47:22:fe:26:
         1b:ce:7c:38
-----BEGIN CERTIFICATE-----
MIIFVDCCBDygAwIBAgIUYOs2Df4U8lTmjyK13afzPB+PlrYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjM1NEQzMjhDQkJGRDFFRjNDRDI5MjY4QTIzQjBGQ0M2
MEUzQTJDNTAeFw0yNjA3MjgxMjEzMTRaFw0yNzA3MjcxMjE4MTRaMDMxMTAvBgNV
BAMTKEY2RjI2Nzc1MzgyMkZERjZFN0Y1MUM0REEwODY4MjdEMDBGM0YwOEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhHB7JnJdFeyhz4b+K/AwYNN7h
NqbBMf6/LJXmvvCmV+e8xosx5iHxNHKcKo9JqhhCLLarmc0r8OnAywwQ9RdmhGaP
OIjZmCSF+Ocp+Dn7EycNJ0tAYQCwg1orlqJjKqgSakzgaFCl56zkd6B+U+o5dV01
jYsN7voVNhVsAN1oZ7ttNoCUi6adD66zNEtHiteGyTCfcS/v98eQa5R8M5ZIAMn4
P/IyFnfABVnk9K9g6wnvwqxvg3U0bRDjqKWq+2yfnqf+jWRx29HNtZJ0zGyD1YYG
L2+lfCy+ePrqoaKrskQq4Ck36pxOigzt7/dLoqVp5/y9O0OTFXljDbw1/CFTAgMB
AAGjggJeMIICWjAdBgNVHQ4EFgQU9vJndTgi/fbn9RxNoIaCfQDz8I4wHwYDVR0j
BBgwFoAUs1TTKMu/0e880pJoojsPzGDjosUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
YTAzNzViMzktZjk0OS00Y2I1LWI1MTktZjk0MDA4YjE2NTRjLTAvMC9CMzU0RDMy
OENCQkZEMUVGM0NEMjkyNjhBMjNCMEZDQzYwRTNBMkM1LmNybDCBngYIKwYBBQUH
AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5LzYxNzA4YTZiLTZjM2EtNDBhMC1hMzAyLTU5NWVj
YzE3ODQ4Yy8wL0IzNTREMzI4Q0JCRkQxRUYzQ0QyOTI2OEEyM0IwRkNDNjBFM0Ey
QzUuY2VyMIGgBggrBgEFBQcBCwSBkzCBkDCBjQYIKwYBBQUHMAuGgYByc3luYzov
L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9hMDM3NWIzOS1mOTQ5LTRjYjUtYjUx
OS1mOTQwMDhiMTY1NGMtMC8wLzM2MzIyZTMxMzQzNDJlMzQzNDJlMzAyZjMyMzIy
ZDMyMzQyMDNkM2UyMDM3MzAzMjM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCPpAsMA0GCSqGSIb3DQEB
CwUAA4IBAQA80S3RFeAAD8PNWU2j5xrcEY7rAnxYjNZSyiYpPoCggVfvDXSK5wS1
IkHRYdtoMzd+8W+l8zKBASgMWDolUgHU+EVx8KsKWwqfPO1vNIyBUe1maNtRXUzL
kn+lFPQR/Rz3HFPrP7gs8XbsLOce+RptyVq0ZFHCQwWGaFGRV6aKyPpYuwvpmSpC
JwYSmP6ljh1il1L3qtYms457A1Prv2RJo3OtoO9amzxc2BDhv6POH+Lt1LmBFWo6
kbTr7/4ySeNg6WDWfNiJ9/7ewf0Xb3Bka40VKluhdcA9emtXHiTy1n5bzDrzKhNK
YkibZYmWbejBZ72dYkD+K0ci/iYbznw4
-----END CERTIFICATE-----
Generated at Tue Jul 28 18:20:15 2026 by rpki-client