Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e35312e302f32342d3234203d3e203133333437.roa
File:                     36322e3134342e35312e302f32342d3234203d3e203133333437.roa (raw, json)
Hash identifier:          i7sgEYSz/SokPR1i4dt63Fn14536F2ybAfxitkdIE/w=
Subject key identifier:   FC:78:B4:60:71:AE:CF:91:46:4D:73:E7:64:2A:36:E6:B0:F4:24:22
Certificate issuer:       /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
Certificate serial:       7D62753A20964858BF4C24491C6A260826C8884A
Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e35312e302f32342d3234203d3e203133333437.roa
Signing time:             Tue 28 Jul 2026 12:18:16 +0000
ROA not before:           Tue 28 Jul 2026 12:13:16 +0000
ROA not after:            Tue 27 Jul 2027 12:18:16 +0000
asID:                     13347
IP address blocks:        62.144.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl
                          rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:62:75:3a:20:96:48:58:bf:4c:24:49:1c:6a:26:08:26:c8:88:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
        Validity
            Not Before: Jul 28 12:13:16 2026 GMT
            Not After : Jul 27 12:18:16 2027 GMT
        Subject: CN=FC78B46071AECF91464D73E7642A36E6B0F42422
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:24:5a:cc:04:5d:64:05:81:dd:7a:ce:37:4b:
                    69:e0:1d:c9:d6:37:08:9e:01:34:29:b4:04:d1:9c:
                    bb:ff:6e:96:fa:14:65:7d:ad:7d:1d:ac:42:b4:0c:
                    dc:14:ea:a2:c7:5e:26:c5:72:9f:91:ad:64:95:a8:
                    a1:87:31:f1:f0:9c:91:ec:38:a8:0a:aa:d1:43:31:
                    90:ff:c7:71:47:93:58:ff:0e:71:f3:e4:bd:55:ef:
                    b6:41:8a:37:38:cc:1d:02:8f:b6:ef:89:b1:7d:95:
                    68:34:b8:df:4d:6e:ab:7e:9f:5e:1e:b3:49:6d:07:
                    1e:a3:aa:89:96:ca:2a:e2:02:51:fa:b1:de:e7:42:
                    d1:59:51:2e:a7:1b:19:9e:41:80:e7:23:fe:68:c2:
                    1f:d9:28:08:6f:de:ee:8d:d8:f1:b3:f2:fd:d4:4c:
                    ea:3b:88:7a:ff:1f:3e:fb:93:6b:b2:2f:65:44:76:
                    bb:17:ba:70:3f:9d:71:72:a2:bc:95:bf:ee:89:6d:
                    63:1b:e5:c2:6a:51:95:2f:26:10:19:e9:e4:a2:bf:
                    ea:a4:4b:c2:30:29:8e:99:80:7c:9d:64:5b:59:6b:
                    e9:82:ff:ac:19:c6:64:f5:c4:d0:8e:eb:c2:61:50:
                    4c:88:ce:e4:ac:3f:42:78:6e:00:a1:fb:80:c3:ec:
                    0e:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:78:B4:60:71:AE:CF:91:46:4D:73:E7:64:2A:36:E6:B0:F4:24:22
            X509v3 Authority Key Identifier:
                keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e35312e302f32342d3234203d3e203133333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.144.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:6b:d0:c6:e6:03:49:dd:da:7f:e7:2c:6d:d3:64:92:bb:f1:
         5b:60:98:a8:65:64:b0:a2:9e:d0:a4:68:52:74:2f:21:e7:e5:
         b2:51:f7:e9:3c:65:01:6d:b7:58:f5:21:7a:d6:e8:46:5c:ca:
         e7:78:c3:de:22:21:a4:f9:d2:45:8b:63:d6:f7:02:df:38:a1:
         af:e1:0a:3a:29:10:2f:59:9b:56:e9:33:c9:b0:b2:66:b2:ce:
         41:ea:62:c0:c0:26:40:5b:25:cc:04:03:ad:51:54:e7:39:8d:
         c8:30:b3:8f:cc:1d:31:a9:ba:e6:ac:c8:16:b4:e0:ec:b4:3e:
         c9:f7:b2:3f:62:a4:a6:9d:4a:79:a4:6a:c4:db:81:35:ca:e9:
         ca:61:2a:f1:e2:80:5d:da:90:94:f4:da:1f:47:d6:6c:5f:8c:
         d2:3c:0e:19:ab:e8:21:b7:40:93:44:fc:95:58:7e:8a:4a:cd:
         2c:98:21:5f:47:87:6e:68:3f:1f:83:0b:4a:5e:9f:7f:3f:dd:
         11:25:9f:68:28:e0:4b:26:5d:d2:da:86:72:0c:10:f7:19:69:
         cc:ad:0f:ef:8f:19:06:08:8d:c6:16:6b:ae:ad:99:d2:01:45:
         c6:66:b7:ab:3d:2c:91:85:d4:63:84:7c:2b:e9:7a:02:b0:9d:
         9a:55:c9:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 17:16:00 2026 by rpki-client