Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e35352e302f32342d3234203d3e203132303833.roa
File:                     36322e3134342e35352e302f32342d3234203d3e203132303833.roa (raw, json)
Hash identifier:          z+KoxhdN5NHdU2WpM+neHAF5k872LrrD4SVyUhECtSM=
Subject key identifier:   35:BB:68:28:94:AE:07:1D:C1:EE:C2:14:43:F8:29:61:29:82:27:9E
Certificate issuer:       /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
Certificate serial:       74816A3E518B5F9C5A5D02533537089719643743
Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e35352e302f32342d3234203d3e203132303833.roa
Signing time:             Tue 28 Jul 2026 12:18:15 +0000
ROA not before:           Tue 28 Jul 2026 12:13:15 +0000
ROA not after:            Tue 27 Jul 2027 12:18:15 +0000
asID:                     12083
IP address blocks:        62.144.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl
                          rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:81:6a:3e:51:8b:5f:9c:5a:5d:02:53:35:37:08:97:19:64:37:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
        Validity
            Not Before: Jul 28 12:13:15 2026 GMT
            Not After : Jul 27 12:18:15 2027 GMT
        Subject: CN=35BB682894AE071DC1EEC21443F829612982279E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:a2:11:69:23:cb:d8:b5:04:bc:ac:df:ba:d3:
                    d2:8a:0d:ad:87:42:3a:5a:16:03:93:bf:c0:7a:18:
                    12:90:30:75:57:ff:32:7f:12:71:99:bb:73:ea:1c:
                    f2:86:61:34:01:81:44:31:17:8f:3b:c0:7c:8e:80:
                    23:60:76:e5:c5:97:69:9d:53:23:89:5c:b2:85:c0:
                    d6:83:f7:1d:c6:c5:90:72:bb:ad:f8:fe:67:6e:ef:
                    af:56:bd:c3:a0:d0:2d:33:3f:7a:75:26:c4:b8:1d:
                    0d:6a:6c:34:c5:d7:1a:d9:a0:fc:93:0c:13:71:b0:
                    ba:c6:4a:ad:04:4a:0e:c1:9b:8a:f7:e3:14:51:c3:
                    bf:d9:01:17:cc:05:09:3b:29:cd:56:8b:78:8f:7b:
                    fb:c8:84:e3:7e:98:33:f3:e7:cf:b4:a7:cc:53:2a:
                    b1:23:71:84:23:bd:27:47:6f:1f:fb:22:72:09:4f:
                    50:a3:83:cc:04:81:f1:e5:56:fd:f2:ac:05:fd:c7:
                    97:c2:b7:b6:21:46:6b:35:7e:be:7d:8c:b7:53:9b:
                    33:43:5f:b8:dc:08:52:ad:b0:30:18:29:32:7b:e8:
                    b2:74:be:c6:13:6f:f7:3d:f6:20:45:19:c1:f3:62:
                    e3:3d:7a:e8:c0:3a:88:29:13:78:6a:44:6f:2b:b2:
                    a8:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:BB:68:28:94:AE:07:1D:C1:EE:C2:14:43:F8:29:61:29:82:27:9E
            X509v3 Authority Key Identifier:
                keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e35352e302f32342d3234203d3e203132303833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.144.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:88:0a:b5:96:57:97:b8:8d:ff:12:e2:3c:18:56:8d:ce:fa:
         da:cf:ab:7f:b4:d0:9d:ca:13:96:45:db:38:11:65:2d:e2:a1:
         a1:8b:58:ac:e2:83:71:2a:95:28:87:97:15:6e:e1:f1:32:2a:
         cd:d6:55:49:63:ec:59:cb:74:ba:44:78:f4:a4:12:35:9e:27:
         e8:78:b3:62:30:3d:fb:a7:66:cc:41:e2:76:28:ba:1f:bf:3e:
         e5:65:83:54:af:e8:7a:57:ee:e8:96:af:25:c2:28:29:81:1e:
         f3:9f:dd:c5:52:c6:e5:e5:32:5b:d7:4b:1c:1c:6f:47:b6:51:
         69:db:10:ac:26:da:0c:6b:a2:a0:02:d2:63:7d:57:9f:7f:c4:
         97:d6:98:5d:f1:d5:ae:0a:38:12:2c:11:34:3b:38:20:d5:0e:
         f5:44:28:a7:30:d0:ba:8f:22:44:97:16:23:20:47:f9:7f:fc:
         ec:dc:64:76:c7:41:a1:36:25:90:fc:25:60:67:a0:af:f3:18:
         bb:df:d1:d2:b5:d2:50:52:b2:3f:f5:03:69:5d:91:d0:00:6d:
         9a:01:46:21:00:db:db:0d:f5:a5:a0:05:18:d1:76:7d:76:6e:
         60:03:f3:e8:95:a1:bb:5e:f3:76:70:ba:17:6b:0c:8d:8f:00:
         5f:1b:13:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:11:32 2026 by rpki-client