Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e34392e302f32342d3234203d3e203133333437.roa
File:                     36322e3134342e34392e302f32342d3234203d3e203133333437.roa (raw, json)
Hash identifier:          a4fK1tGF3SN88JpWvSO5+TZMcyxR9JSJqvl5FvbqgZo=
Subject key identifier:   1D:85:49:89:5E:34:EE:91:F6:01:3A:CE:F6:5D:FE:F2:D1:DD:C9:16
Certificate issuer:       /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
Certificate serial:       4EC6B117916DF3608ECF0F70D139BA7A86593009
Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e34392e302f32342d3234203d3e203133333437.roa
Signing time:             Tue 28 Jul 2026 12:18:16 +0000
ROA not before:           Tue 28 Jul 2026 12:13:16 +0000
ROA not after:            Tue 27 Jul 2027 12:18:16 +0000
asID:                     13347
IP address blocks:        62.144.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl
                          rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:c6:b1:17:91:6d:f3:60:8e:cf:0f:70:d1:39:ba:7a:86:59:30:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
        Validity
            Not Before: Jul 28 12:13:16 2026 GMT
            Not After : Jul 27 12:18:16 2027 GMT
        Subject: CN=1D8549895E34EE91F6013ACEF65DFEF2D1DDC916
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:61:77:21:e0:8c:51:74:45:49:ba:e2:4e:b4:
                    e0:dd:ad:92:26:cb:8f:b9:34:4c:bd:55:4e:c5:4d:
                    12:3e:a5:57:b7:c6:c0:4a:c0:33:dd:af:7c:8e:1d:
                    60:16:bc:00:8c:cc:8e:17:09:cf:46:42:eb:27:13:
                    5c:00:e2:ab:4d:21:3e:7b:7e:fe:bb:8b:0d:f2:76:
                    83:05:b2:6d:34:88:9a:63:d9:b0:aa:b2:54:a7:f0:
                    53:71:96:11:7f:3d:7f:06:0c:3c:2e:b2:9a:27:e7:
                    1d:01:fa:d3:20:c8:aa:68:51:23:9c:d7:24:b9:f5:
                    b5:54:05:f2:74:45:da:57:69:fc:89:80:8d:8d:94:
                    8b:09:97:7d:8b:87:fb:03:09:cc:a0:15:56:bc:32:
                    a4:d5:76:6c:30:71:4b:2d:9a:18:09:63:90:19:5b:
                    7f:81:80:28:2d:b2:71:15:07:0a:0a:cf:61:68:56:
                    8d:ed:ef:8a:2a:c4:33:9e:53:41:bf:d2:01:e2:af:
                    76:45:40:a3:8b:e4:ce:b6:d7:b3:a7:68:7d:eb:25:
                    d4:26:b3:5a:17:18:57:6f:9f:de:f1:eb:53:0a:5d:
                    46:91:e9:c6:bd:b8:69:53:a4:c7:c7:83:d3:ad:3c:
                    22:07:91:e9:0c:4d:1c:85:40:69:1e:7d:8d:44:b0:
                    3e:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:85:49:89:5E:34:EE:91:F6:01:3A:CE:F6:5D:FE:F2:D1:DD:C9:16
            X509v3 Authority Key Identifier:
                keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e34392e302f32342d3234203d3e203133333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.144.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:19:c5:8b:62:75:91:1a:ee:9a:7f:f2:27:08:cf:f0:2d:a5:
         5a:af:6f:7e:1c:28:02:fd:b4:15:39:ec:26:e0:0c:a5:60:e6:
         77:ab:9f:9a:9c:92:13:f0:df:6d:2f:fc:70:8b:de:8e:d5:ce:
         ca:9e:bb:78:36:73:97:db:e9:01:a4:8f:79:2e:44:44:cb:ef:
         24:b3:64:70:fa:84:e6:ba:62:82:91:97:48:36:3e:a5:0e:30:
         0f:fa:56:25:82:0b:39:07:2d:46:7e:f8:15:24:5e:0c:59:1a:
         92:94:0d:47:df:b3:70:0d:16:9e:e5:a1:57:ff:e4:9b:5e:13:
         de:92:44:c6:98:db:cf:f1:25:e7:1b:78:56:cd:84:03:e3:9d:
         13:20:72:42:7d:d7:60:ee:7d:4d:ba:40:b8:66:eb:0d:8d:ac:
         8e:34:50:40:eb:ae:7f:cb:72:87:a9:c3:c0:13:9c:df:99:6a:
         cb:95:d6:42:8f:51:93:b3:52:9a:98:04:8f:76:4b:17:1f:3d:
         9b:e5:6d:b1:d8:e3:3a:72:9c:51:6a:13:9b:38:e4:80:b4:9f:
         d1:e4:69:6d:e1:62:3c:1a:28:e6:78:9c:af:26:2b:e5:2f:40:
         8f:16:66:93:82:fb:18:a4:dc:e4:88:ef:74:f5:44:e6:9a:25:
         5c:16:a1:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 17:15:43 2026 by rpki-client