Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e35302e302f32342d3234203d3e2037303239.roa
File:                     36322e3134342e35302e302f32342d3234203d3e2037303239.roa (raw, json)
Hash identifier:          mNIhgpN0StpDzWKRZc1jHOQLPjKZCw16QB0eZqfYsZU=
Subject key identifier:   D6:BD:ED:96:14:88:39:26:1E:DA:25:CB:4E:B1:E3:EE:A6:84:0D:EA
Certificate issuer:       /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
Certificate serial:       07F3A4B43247E8E3B5FDB940EF09059E104D465B
Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e35302e302f32342d3234203d3e2037303239.roa
Signing time:             Wed 25 Feb 2026 12:40:46 +0000
ROA not before:           Wed 25 Feb 2026 12:35:46 +0000
ROA not after:            Wed 24 Feb 2027 12:40:46 +0000
asID:                     7029
IP address blocks:        62.144.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl
                          rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 23:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:f3:a4:b4:32:47:e8:e3:b5:fd:b9:40:ef:09:05:9e:10:4d:46:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
        Validity
            Not Before: Feb 25 12:35:46 2026 GMT
            Not After : Feb 24 12:40:46 2027 GMT
        Subject: CN=D6BDED96148839261EDA25CB4EB1E3EEA6840DEA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:b2:01:10:0c:f1:7c:92:c5:f7:05:30:41:a2:
                    ca:a4:8d:d7:07:50:34:cf:4c:20:7d:01:58:06:78:
                    f4:aa:93:10:9e:97:c9:dd:70:5a:fd:d2:b3:5d:1a:
                    7c:c1:c1:19:5a:87:04:04:27:b7:a7:39:e1:b4:2e:
                    c5:e9:dd:ca:f4:17:e7:1f:87:62:bc:b1:e4:6a:ad:
                    44:60:69:0d:f2:7f:27:41:45:e6:c1:b9:9e:76:ff:
                    53:57:53:e8:15:54:bc:42:1c:26:01:41:cc:a2:44:
                    76:bd:f2:62:8d:08:46:a4:3f:f9:3c:f1:58:cf:dd:
                    27:d7:36:44:fc:cf:1b:f8:19:27:98:fe:e9:06:1d:
                    94:fc:b0:b0:2f:3f:bb:00:22:40:ce:4b:23:18:44:
                    82:92:5d:16:a4:d6:38:02:c2:0e:be:6d:49:4d:30:
                    d8:b2:c0:af:f9:e1:c0:41:7b:0b:7e:15:d4:26:44:
                    82:0a:17:b3:69:5e:a5:da:0e:17:f2:ad:78:45:d1:
                    63:bb:86:b4:9c:d1:dc:b8:e7:30:0d:47:bb:cf:8e:
                    bd:0a:a6:ce:23:05:f2:e8:b3:b5:cc:f2:7c:44:ea:
                    93:83:54:1b:46:c5:f3:05:33:2a:61:ae:fd:e7:ce:
                    65:10:84:a7:84:f4:22:73:bd:87:f5:5e:07:b8:d4:
                    69:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:BD:ED:96:14:88:39:26:1E:DA:25:CB:4E:B1:E3:EE:A6:84:0D:EA
            X509v3 Authority Key Identifier:
                keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e35302e302f32342d3234203d3e2037303239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.144.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:37:c4:4a:b3:ca:22:66:90:f8:b7:b0:b6:12:a9:ff:d3:2b:
         fe:69:18:f4:b7:58:11:82:e8:dd:d9:ea:be:1f:37:30:53:1e:
         c1:ad:7a:3f:8d:6f:a0:4e:97:4b:cf:0b:d4:57:60:cd:01:23:
         61:c7:5e:ed:db:90:75:6f:28:c3:75:84:74:62:28:a8:e8:8a:
         5d:3b:66:2e:d3:8d:c7:13:d7:54:5a:9c:48:6a:bd:cc:54:75:
         a7:28:55:64:13:b7:17:b9:aa:95:b6:26:f7:26:ec:a7:6b:06:
         3c:82:03:bc:29:b0:83:a4:c2:94:a4:fb:8f:78:06:39:d0:1d:
         f8:91:e6:7e:20:6d:0e:71:00:6e:16:8a:f0:fd:da:89:88:47:
         e9:63:b9:5c:f3:d1:fb:78:91:54:3b:41:ea:0f:35:08:ea:02:
         c4:15:df:b0:40:51:61:ce:db:bb:76:2e:24:48:ef:81:b4:63:
         81:fb:fd:1f:bc:ff:e0:e2:5a:af:6f:7e:c8:ec:7a:c2:f1:1d:
         21:9c:04:8a:63:d5:c6:00:8e:79:1f:22:f0:fd:14:7a:b8:77:
         99:47:24:a3:ab:ee:0c:dd:37:af:a0:c0:d4:90:d6:1f:86:41:
         5e:45:09:18:51:65:0f:9a:a4:08:30:0a:fd:fb:df:52:29:a4:
         79:ee:03:40
-----BEGIN CERTIFICATE-----
MIIFVDCCBDygAwIBAgIUB/OktDJH6OO1/blA7wkFnhBNRlswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjM1NEQzMjhDQkJGRDFFRjNDRDI5MjY4QTIzQjBGQ0M2
MEUzQTJDNTAeFw0yNjAyMjUxMjM1NDZaFw0yNzAyMjQxMjQwNDZaMDMxMTAvBgNV
BAMTKEQ2QkRFRDk2MTQ4ODM5MjYxRURBMjVDQjRFQjFFM0VFQTY4NDBERUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnsgEQDPF8ksX3BTBBosqkjdcH
UDTPTCB9AVgGePSqkxCel8ndcFr90rNdGnzBwRlahwQEJ7enOeG0LsXp3cr0F+cf
h2K8seRqrURgaQ3yfydBRebBuZ52/1NXU+gVVLxCHCYBQcyiRHa98mKNCEakP/k8
8VjP3SfXNkT8zxv4GSeY/ukGHZT8sLAvP7sAIkDOSyMYRIKSXRak1jgCwg6+bUlN
MNiywK/54cBBewt+FdQmRIIKF7NpXqXaDhfyrXhF0WO7hrSc0dy45zANR7vPjr0K
ps4jBfLos7XM8nxE6pODVBtGxfMFMyphrv3nzmUQhKeE9CJzvYf1Xge41GmjAgMB
AAGjggJeMIICWjAdBgNVHQ4EFgQU1r3tlhSIOSYe2iXLTrHj7qaEDeowHwYDVR0j
BBgwFoAUs1TTKMu/0e880pJoojsPzGDjosUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
YTAzNzViMzktZjk0OS00Y2I1LWI1MTktZjk0MDA4YjE2NTRjLTAvMC9CMzU0RDMy
OENCQkZEMUVGM0NEMjkyNjhBMjNCMEZDQzYwRTNBMkM1LmNybDCBngYIKwYBBQUH
AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5LzYxNzA4YTZiLTZjM2EtNDBhMC1hMzAyLTU5NWVj
YzE3ODQ4Yy8wL0IzNTREMzI4Q0JCRkQxRUYzQ0QyOTI2OEEyM0IwRkNDNjBFM0Ey
QzUuY2VyMIGgBggrBgEFBQcBCwSBkzCBkDCBjQYIKwYBBQUHMAuGgYByc3luYzov
L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9hMDM3NWIzOS1mOTQ5LTRjYjUtYjUx
OS1mOTQwMDhiMTY1NGMtMC8wLzM2MzIyZTMxMzQzNDJlMzUzMDJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDM3MzAzMjM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPpAyMA0GCSqGSIb3DQEB
CwUAA4IBAQCXN8RKs8oiZpD4t7C2Eqn/0yv+aRj0t1gRgujd2eq+HzcwUx7BrXo/
jW+gTpdLzwvUV2DNASNhx17t25B1byjDdYR0Yiio6IpdO2Yu043HE9dUWpxIar3M
VHWnKFVkE7cXuaqVtib3JuynawY8ggO8KbCDpMKUpPuPeAY50B34keZ+IG0OcQBu
Forw/dqJiEfpY7lc89H7eJFUO0HqDzUI6gLEFd+wQFFhztu7di4kSO+BtGOB+/0f
vP/g4lqvb37I7HrC8R0hnASKY9XGAI55HyLw/RR6uHeZRySjq+4M3TevoMDUkNYf
hkFeRQkYUWUPmqQIMAr9+99SKaR57gNA
-----END CERTIFICATE-----
Generated at Mon Mar 2 12:45:51 2026 by rpki-client