Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e35322e302f32342d3234203d3e203133333437.roa
File:                     36322e3134342e35322e302f32342d3234203d3e203133333437.roa (raw, json)
Hash identifier:          62Cf7A00IwQM3cSGttuWGsqnwXooJX5OUKFwzi6TLOc=
Subject key identifier:   F4:74:34:D9:04:B9:36:95:1C:D9:8D:E0:4B:08:42:58:D1:02:77:2D
Certificate issuer:       /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
Certificate serial:       638A7387F4E44B654459B0FD139CCBD78A41615F
Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e35322e302f32342d3234203d3e203133333437.roa
Signing time:             Tue 28 Jul 2026 12:18:17 +0000
ROA not before:           Tue 28 Jul 2026 12:13:17 +0000
ROA not after:            Tue 27 Jul 2027 12:18:17 +0000
asID:                     13347
IP address blocks:        62.144.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl
                          rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:8a:73:87:f4:e4:4b:65:44:59:b0:fd:13:9c:cb:d7:8a:41:61:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
        Validity
            Not Before: Jul 28 12:13:17 2026 GMT
            Not After : Jul 27 12:18:17 2027 GMT
        Subject: CN=F47434D904B936951CD98DE04B084258D102772D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:95:30:ff:77:22:5d:63:f6:bb:83:bb:27:16:
                    f0:21:c0:49:18:ab:59:a1:89:fa:18:e3:ee:51:6c:
                    95:18:c9:d4:99:3b:52:e9:9b:ef:46:a8:01:b6:ed:
                    5e:c3:6c:17:48:76:69:32:79:58:49:3e:18:99:58:
                    8c:f0:f6:d9:f6:77:cf:34:9a:48:f5:c6:c9:83:25:
                    dc:dd:29:5d:9c:44:89:07:c9:d0:b2:a5:23:fa:dc:
                    29:62:f0:16:96:55:2a:6d:33:e9:da:65:3c:c1:47:
                    31:43:2e:0f:f7:2f:3a:89:6e:25:cf:9d:58:bc:b0:
                    aa:ab:2f:1b:0f:e7:3b:b7:76:82:a0:dc:89:1f:f6:
                    90:df:09:d6:06:ca:7f:3a:2e:85:35:aa:68:c5:fe:
                    ec:f5:1e:d7:7f:a4:97:8f:36:b5:41:8e:43:38:54:
                    eb:5f:69:41:6b:0f:8b:59:c0:49:25:21:08:3a:a9:
                    01:f5:86:92:70:a1:fb:e0:cb:a4:87:8d:36:4d:e9:
                    28:b0:ae:15:40:0b:fc:c4:65:68:14:21:44:7c:40:
                    80:77:57:13:8b:e0:0f:af:b8:7e:91:cc:44:62:40:
                    ae:45:27:45:1d:37:19:01:b6:df:84:61:68:2a:01:
                    72:d9:21:eb:85:61:27:36:c8:2f:c3:30:7f:b6:b4:
                    3f:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:74:34:D9:04:B9:36:95:1C:D9:8D:E0:4B:08:42:58:D1:02:77:2D
            X509v3 Authority Key Identifier:
                keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e35322e302f32342d3234203d3e203133333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.144.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:85:44:c7:d2:35:d3:fe:f5:7a:3a:a0:78:f1:d7:e4:76:8a:
         f6:67:ff:ca:ab:a1:6c:49:99:4d:51:d9:47:f7:ba:d9:3b:32:
         9a:29:0f:02:7f:d3:59:cc:2c:7f:9d:fe:03:b2:f6:62:19:1a:
         c3:0e:d5:59:88:d5:c2:af:3a:62:19:ad:86:f3:c5:69:f3:ab:
         15:cc:f5:96:43:94:3a:80:99:c4:88:31:70:66:07:cf:b2:b1:
         42:5a:6f:d9:16:d8:e4:1e:ae:dc:dc:36:59:16:74:32:4b:02:
         3c:01:f0:59:16:be:75:98:35:d1:d8:27:58:ff:3c:cb:4d:4b:
         32:e0:6f:04:35:90:d9:13:d4:f5:89:4e:f8:17:ae:fa:cd:41:
         47:af:44:d5:11:0a:10:5d:7a:cc:52:97:4a:17:1f:f5:72:be:
         df:a5:e8:ab:ed:16:d4:14:83:54:04:36:f5:d4:95:bf:ef:43:
         b2:a8:85:bb:9b:c8:c6:7a:ce:8b:f8:45:cc:f9:72:48:82:c1:
         9b:bd:24:22:8a:96:b2:7c:7e:19:84:29:ba:41:69:bb:69:90:
         40:8d:7e:fd:fe:97:11:96:4c:1f:78:44:83:72:29:42:02:9c:
         30:5a:df:7a:96:ef:8a:63:d6:69:43:5d:55:61:d7:c8:d4:7f:
         0b:e2:7a:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 17:15:44 2026 by rpki-client