Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e35372e302f32342d3234203d3e203133333437.roa
File:                     36322e3134342e35372e302f32342d3234203d3e203133333437.roa (raw, json)
Hash identifier:          3Er4am5xe7tlwkAQT+OR+29rPqEUTEtLTZ8/V3yVIrY=
Subject key identifier:   D7:23:53:0D:C7:30:63:7A:C0:D2:2D:5D:DD:63:BB:AE:AF:24:16:38
Certificate issuer:       /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
Certificate serial:       5AE2D622BD6041B1E38D8D76509B3CF6F3CAEBEE
Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e35372e302f32342d3234203d3e203133333437.roa
Signing time:             Tue 28 Jul 2026 12:18:14 +0000
ROA not before:           Tue 28 Jul 2026 12:13:14 +0000
ROA not after:            Tue 27 Jul 2027 12:18:14 +0000
asID:                     13347
IP address blocks:        62.144.57.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl
                          rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:e2:d6:22:bd:60:41:b1:e3:8d:8d:76:50:9b:3c:f6:f3:ca:eb:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
        Validity
            Not Before: Jul 28 12:13:14 2026 GMT
            Not After : Jul 27 12:18:14 2027 GMT
        Subject: CN=D723530DC730637AC0D22D5DDD63BBAEAF241638
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:16:b6:2b:ec:7f:67:20:13:05:9c:9b:8b:ac:
                    ba:cb:ab:59:41:28:d0:d3:6f:b0:96:1a:85:43:17:
                    8c:19:97:2b:54:04:9d:e9:b7:b6:a3:52:c6:bc:75:
                    cd:47:7e:2f:23:e7:6f:de:70:de:39:f0:08:17:9a:
                    9e:9c:60:5d:2f:07:ac:d5:b0:cf:2d:d2:15:90:61:
                    20:c5:0c:3f:33:ff:cf:f5:f3:ea:f4:40:a5:a4:f0:
                    c8:24:ee:23:06:ac:6b:0b:04:96:c9:99:f7:a6:8f:
                    65:67:71:28:11:73:8e:f3:f4:a3:10:6c:ab:d2:de:
                    a2:d2:c1:8b:87:66:e8:8c:da:03:1f:fd:38:9c:94:
                    5f:ff:46:10:e7:7e:0b:67:21:e7:f3:a6:d9:63:24:
                    61:91:ec:07:8d:6a:9c:1d:cb:52:d4:54:7f:11:12:
                    bf:dc:78:f6:09:db:1d:02:48:7f:ea:38:00:f6:23:
                    48:27:ba:4e:d8:42:06:61:21:8a:74:a2:35:00:1e:
                    8e:d4:f3:32:69:49:a4:aa:51:b3:b6:3a:16:5f:c9:
                    5b:e5:4d:43:01:fc:67:3c:a0:00:b6:6a:8c:6c:53:
                    30:ad:f2:3e:e9:f9:fd:dc:2e:1e:45:8a:f4:67:b0:
                    d5:fd:92:9e:52:c2:93:7b:4a:42:05:f3:85:62:78:
                    fe:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:23:53:0D:C7:30:63:7A:C0:D2:2D:5D:DD:63:BB:AE:AF:24:16:38
            X509v3 Authority Key Identifier:
                keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e35372e302f32342d3234203d3e203133333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.144.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:28:ea:de:f1:79:92:c6:1b:a8:4b:55:ef:bd:a2:a4:b4:6d:
         39:4a:32:4d:7f:f8:52:d6:2b:51:09:1f:f4:5e:4d:88:23:a8:
         d6:26:c8:d8:82:13:31:85:2a:72:77:e5:fb:be:3a:53:13:8c:
         fe:3e:07:d1:b2:1e:af:e8:d1:46:aa:85:85:f9:97:e0:88:2a:
         9c:c7:4a:f9:c2:42:4e:54:81:d0:03:04:f3:ac:d6:e1:cc:ab:
         44:f7:61:de:01:30:bb:53:79:c5:6c:c6:18:22:bb:42:3a:e0:
         2e:9e:3c:7d:2a:45:3b:94:22:68:55:ca:71:ea:cf:a5:e6:a2:
         99:92:b2:fe:69:99:eb:01:49:74:5e:f5:45:29:40:e3:0b:b9:
         e0:1e:e8:0f:c6:2d:9c:b0:38:8b:a8:c2:e0:a7:5f:03:12:48:
         f8:88:bc:42:87:a7:df:b9:0a:b1:61:fe:e0:95:f3:ae:34:93:
         8b:73:85:c1:ee:98:d4:12:c6:dc:d9:fb:02:cc:24:83:50:c3:
         65:0b:d0:99:13:9a:dc:33:ca:da:98:db:08:d6:b2:fb:99:4f:
         30:c4:c6:17:4b:fa:07:96:8f:4f:20:29:f9:d1:80:98:30:96:
         b1:ce:e0:d4:35:3a:94:8b:7b:2d:6b:70:c8:23:07:86:fb:97:
         90:c8:9a:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:13:50 2026 by rpki-client