Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e35332e302f32342d3234203d3e203133333437.roa
File:                     36322e3134342e35332e302f32342d3234203d3e203133333437.roa (raw, json)
Hash identifier:          jZhljx76yJRIYqEqAg4dyd+oc+7pqF33JhL3QtqN0Uc=
Subject key identifier:   99:4F:F5:6B:EF:37:8D:E2:5D:3B:33:FA:84:94:81:85:D4:CB:9D:31
Certificate issuer:       /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
Certificate serial:       517B884A51294B4D4DD7AB30B4C0E25E2CF6C236
Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e35332e302f32342d3234203d3e203133333437.roa
Signing time:             Tue 28 Jul 2026 12:18:15 +0000
ROA not before:           Tue 28 Jul 2026 12:13:15 +0000
ROA not after:            Tue 27 Jul 2027 12:18:15 +0000
asID:                     13347
IP address blocks:        62.144.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl
                          rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:7b:88:4a:51:29:4b:4d:4d:d7:ab:30:b4:c0:e2:5e:2c:f6:c2:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
        Validity
            Not Before: Jul 28 12:13:15 2026 GMT
            Not After : Jul 27 12:18:15 2027 GMT
        Subject: CN=994FF56BEF378DE25D3B33FA84948185D4CB9D31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:d5:cb:5e:6d:2c:be:02:3c:97:bd:4e:72:6c:
                    b4:10:f1:d5:c2:80:14:46:00:4e:82:44:70:af:af:
                    af:b2:a5:6b:70:ab:38:03:7a:d1:20:cf:4d:39:0d:
                    5a:aa:f6:b9:61:3e:12:0f:b9:e8:2c:7d:99:a4:ba:
                    18:83:cd:56:99:0e:62:d9:de:5c:c9:60:df:7e:18:
                    31:a2:cb:47:55:16:6c:71:1c:29:42:a2:98:de:88:
                    37:22:7a:10:19:8c:bb:10:44:a8:e2:33:f1:55:c7:
                    86:10:f6:ab:cf:a5:37:95:e9:e9:a6:93:92:cb:65:
                    44:42:98:e7:c6:59:2a:76:f9:d3:f2:9c:82:dc:00:
                    dc:47:79:49:1e:f6:db:31:e2:55:de:d3:09:18:ad:
                    9d:47:dd:82:bd:67:ab:c6:f0:eb:91:c2:41:06:95:
                    19:78:ae:17:70:73:73:0e:fc:89:5e:b2:ad:20:ec:
                    8f:0a:0a:dc:58:50:c8:f2:30:77:7d:ba:37:56:44:
                    23:c7:13:3e:e3:22:5e:b3:94:53:7f:79:e9:66:f4:
                    59:81:9b:98:ef:b0:e6:9e:1b:49:9a:b6:de:20:04:
                    5b:27:57:18:b9:56:7f:3b:f7:27:93:1c:29:17:74:
                    69:df:a5:35:9c:03:03:85:c7:2b:6f:9e:23:bd:cc:
                    0a:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:4F:F5:6B:EF:37:8D:E2:5D:3B:33:FA:84:94:81:85:D4:CB:9D:31
            X509v3 Authority Key Identifier:
                keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e35332e302f32342d3234203d3e203133333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.144.53.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:a2:81:38:4f:3d:70:3e:39:61:be:35:97:6f:dc:10:c1:7c:
         e8:c9:ef:12:84:71:56:f2:ae:71:4c:76:9f:12:d1:6b:ef:4c:
         2b:21:33:a4:df:a1:74:53:23:d9:af:16:ad:91:8b:7d:ac:ec:
         11:90:80:c6:e8:40:97:ef:d3:87:a3:e9:a9:0c:0f:0c:e2:ba:
         69:e4:6c:98:7c:30:5f:13:77:73:c2:88:2b:e2:1d:f6:9e:2c:
         a1:ee:ef:11:7b:0d:bd:6c:90:90:76:30:b5:18:4f:8b:5a:b9:
         5f:3e:db:78:41:0e:7b:d8:6f:7c:35:73:38:48:12:36:90:f0:
         50:c7:95:ac:03:e1:e9:2e:7f:23:d4:35:d5:0c:c7:09:2e:62:
         41:49:70:75:cd:c6:4a:ea:60:11:1b:d3:d4:6c:3c:a7:2d:28:
         21:c3:26:5c:81:4f:fe:a7:82:c3:12:c5:5e:88:d2:d6:8b:20:
         62:6d:80:85:3b:53:20:43:40:d4:aa:e6:af:46:bc:78:e5:07:
         c7:55:c5:0d:28:35:2a:da:61:9f:20:0e:28:f8:f1:53:25:5f:
         d0:6f:09:c9:b6:6c:c9:05:19:53:ed:39:20:20:2c:ee:db:5c:
         47:93:0e:10:c8:49:fc:13:7b:ed:52:9f:24:2c:e0:2d:ac:a2:
         bd:be:37:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 17:16:09 2026 by rpki-client