Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e35322e302f32342d3234203d3e2037303239.roa
File:                     36322e3134342e35322e302f32342d3234203d3e2037303239.roa (raw, json)
Hash identifier:          WeSfCY7Fy+x5rBXW5sLO9czuUkK153D5VpOK2tiDYI8=
Subject key identifier:   26:0C:6B:4D:01:3C:4A:18:8C:0E:82:0A:E2:19:96:24:99:36:23:56
Certificate issuer:       /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
Certificate serial:       32AB32CFCB385F79EEB4EE7EDB86E89DC0D7D0FF
Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e35322e302f32342d3234203d3e2037303239.roa
Signing time:             Tue 28 Jul 2026 12:18:16 +0000
ROA not before:           Tue 28 Jul 2026 12:13:16 +0000
ROA not after:            Tue 27 Jul 2027 12:18:16 +0000
asID:                     7029
IP address blocks:        62.144.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl
                          rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:ab:32:cf:cb:38:5f:79:ee:b4:ee:7e:db:86:e8:9d:c0:d7:d0:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
        Validity
            Not Before: Jul 28 12:13:16 2026 GMT
            Not After : Jul 27 12:18:16 2027 GMT
        Subject: CN=260C6B4D013C4A188C0E820AE219962499362356
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:aa:2a:0b:36:01:ca:d8:69:20:e6:4c:0f:1a:
                    9f:91:4b:17:6e:2b:c7:ad:d3:0a:f1:28:e5:d1:f5:
                    cf:21:c7:fd:3f:54:fe:96:99:f5:ba:2b:27:98:eb:
                    67:af:8c:2f:09:69:37:07:31:0f:8e:b6:51:71:f2:
                    29:5c:ce:45:58:a2:12:36:8e:34:3a:58:eb:f3:31:
                    e4:7b:e0:33:c5:fa:e9:1e:cb:12:68:a5:17:9c:79:
                    25:9f:18:44:0c:a4:a8:44:f7:f9:fa:68:d4:da:b2:
                    74:b8:e0:55:bd:23:76:fb:cf:5c:30:8b:21:8d:a8:
                    a8:10:45:81:ca:8c:58:0f:17:2e:6b:c0:2a:45:38:
                    3a:05:34:02:55:91:fd:2f:52:93:57:12:d3:5d:b9:
                    cc:e9:ab:2c:ba:f6:f5:03:89:01:3b:27:e0:33:e9:
                    88:41:5c:ca:1f:46:25:76:00:d6:da:87:2d:79:24:
                    92:89:91:ad:9c:c4:ee:50:d7:e5:c8:ad:fb:01:08:
                    c2:00:f2:35:55:50:21:d9:a7:e5:ea:eb:23:c6:dc:
                    6b:9e:36:ba:4d:94:be:9f:31:aa:ed:06:6b:b2:b5:
                    9c:0a:75:70:2b:58:41:9c:3f:c3:e2:1b:f7:1f:7f:
                    94:e5:3e:dc:76:ee:31:5f:91:29:0d:5b:81:9e:8b:
                    a7:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:0C:6B:4D:01:3C:4A:18:8C:0E:82:0A:E2:19:96:24:99:36:23:56
            X509v3 Authority Key Identifier:
                keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e35322e302f32342d3234203d3e2037303239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.144.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:2a:27:3f:66:c4:55:29:e2:ad:cb:58:4b:ab:3f:d4:1a:8a:
         e6:4a:c6:09:74:25:c6:1f:a5:4f:bf:79:ab:52:1c:7c:f0:64:
         cd:ca:4d:4d:2c:66:ec:14:6c:e7:37:b7:e9:26:29:e9:9d:57:
         3f:80:b8:fc:4c:6a:b7:17:c9:f2:ef:eb:da:64:d7:e8:51:58:
         5a:63:93:04:be:c3:c9:02:99:13:5b:5a:b9:8b:c1:2c:c5:36:
         5f:86:e7:a1:24:35:92:f4:87:6a:a9:d7:c9:d7:80:66:1b:76:
         36:a6:13:c5:41:7a:64:89:2f:c4:1c:23:43:d5:d2:10:29:27:
         f8:39:1c:ac:3b:53:ae:b3:79:e4:31:9d:38:1b:23:14:57:95:
         af:d4:99:3b:31:2b:7b:86:4f:a4:7b:0e:77:e6:20:7d:7d:2c:
         66:70:3c:7b:04:a2:97:0a:b2:56:32:d6:bb:90:27:0e:8b:e7:
         e2:7a:6c:4c:fc:68:ad:7d:17:7a:2b:ab:da:03:a8:0d:d7:3e:
         1b:e1:7c:6e:b0:26:58:55:1e:28:b3:a1:5b:de:a9:bb:03:c4:
         65:78:44:f1:2d:7f:3c:7c:50:9e:16:9d:04:2d:5e:aa:62:0d:
         83:b2:63:4f:67:da:fd:0d:93:39:af:ea:65:32:7d:a6:64:79:
         39:05:3c:57
-----BEGIN CERTIFICATE-----
MIIFVDCCBDygAwIBAgIUMqsyz8s4X3nutO5+24boncDX0P8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjM1NEQzMjhDQkJGRDFFRjNDRDI5MjY4QTIzQjBGQ0M2
MEUzQTJDNTAeFw0yNjA3MjgxMjEzMTZaFw0yNzA3MjcxMjE4MTZaMDMxMTAvBgNV
BAMTKDI2MEM2QjREMDEzQzRBMTg4QzBFODIwQUUyMTk5NjI0OTkzNjIzNTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCGqioLNgHK2Gkg5kwPGp+RSxdu
K8et0wrxKOXR9c8hx/0/VP6WmfW6KyeY62evjC8JaTcHMQ+OtlFx8ilczkVYohI2
jjQ6WOvzMeR74DPF+ukeyxJopReceSWfGEQMpKhE9/n6aNTasnS44FW9I3b7z1ww
iyGNqKgQRYHKjFgPFy5rwCpFODoFNAJVkf0vUpNXEtNduczpqyy69vUDiQE7J+Az
6YhBXMofRiV2ANbahy15JJKJka2cxO5Q1+XIrfsBCMIA8jVVUCHZp+Xq6yPG3Gue
NrpNlL6fMartBmuytZwKdXArWEGcP8PiG/cff5TlPtx27jFfkSkNW4Gei6dBAgMB
AAGjggJeMIICWjAdBgNVHQ4EFgQUJgxrTQE8ShiMDoIK4hmWJJk2I1YwHwYDVR0j
BBgwFoAUs1TTKMu/0e880pJoojsPzGDjosUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
YTAzNzViMzktZjk0OS00Y2I1LWI1MTktZjk0MDA4YjE2NTRjLTAvMC9CMzU0RDMy
OENCQkZEMUVGM0NEMjkyNjhBMjNCMEZDQzYwRTNBMkM1LmNybDCBngYIKwYBBQUH
AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5LzYxNzA4YTZiLTZjM2EtNDBhMC1hMzAyLTU5NWVj
YzE3ODQ4Yy8wL0IzNTREMzI4Q0JCRkQxRUYzQ0QyOTI2OEEyM0IwRkNDNjBFM0Ey
QzUuY2VyMIGgBggrBgEFBQcBCwSBkzCBkDCBjQYIKwYBBQUHMAuGgYByc3luYzov
L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9hMDM3NWIzOS1mOTQ5LTRjYjUtYjUx
OS1mOTQwMDhiMTY1NGMtMC8wLzM2MzIyZTMxMzQzNDJlMzUzMjJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDM3MzAzMjM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPpA0MA0GCSqGSIb3DQEB
CwUAA4IBAQBBKic/ZsRVKeKty1hLqz/UGormSsYJdCXGH6VPv3mrUhx88GTNyk1N
LGbsFGznN7fpJinpnVc/gLj8TGq3F8ny7+vaZNfoUVhaY5MEvsPJApkTW1q5i8Es
xTZfhuehJDWS9IdqqdfJ14BmG3Y2phPFQXpkiS/EHCND1dIQKSf4ORysO1Ous3nk
MZ04GyMUV5Wv1Jk7MSt7hk+kew535iB9fSxmcDx7BKKXCrJWMta7kCcOi+fiemxM
/GitfRd6K6vaA6gN1z4b4XxusCZYVR4os6Fb3qm7A8RleETxLX88fFCeFp0ELV6q
Yg2DsmNPZ9r9DZM5r+plMn2mZHk5BTxX
-----END CERTIFICATE-----
Generated at Tue Jul 28 18:20:09 2026 by rpki-client