Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e35382e302f32342d3234203d3e203132303833.roa
File:                     36322e3134342e35382e302f32342d3234203d3e203132303833.roa (raw, json)
Hash identifier:          ZOoeA9uDQ/MNOx86yQXm7l44fWObpNFlwa5twwUVqog=
Subject key identifier:   2D:1C:89:97:00:E5:58:02:4D:F9:83:C9:C5:AF:C4:BD:91:65:40:35
Certificate issuer:       /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
Certificate serial:       6A739069F4F341EC0C663B1268FDA4D4B980D678
Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e35382e302f32342d3234203d3e203132303833.roa
Signing time:             Tue 28 Jul 2026 12:18:18 +0000
ROA not before:           Tue 28 Jul 2026 12:13:18 +0000
ROA not after:            Tue 27 Jul 2027 12:18:18 +0000
asID:                     12083
IP address blocks:        62.144.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl
                          rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:73:90:69:f4:f3:41:ec:0c:66:3b:12:68:fd:a4:d4:b9:80:d6:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
        Validity
            Not Before: Jul 28 12:13:18 2026 GMT
            Not After : Jul 27 12:18:18 2027 GMT
        Subject: CN=2D1C899700E558024DF983C9C5AFC4BD91654035
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:30:95:27:52:6a:d8:b1:d8:1d:21:1b:7b:22:
                    41:45:2c:10:7b:4a:f1:ae:7e:65:74:56:46:a9:fc:
                    96:16:38:46:90:2e:4c:6b:10:98:33:24:02:48:47:
                    79:93:dc:50:9d:dd:1f:29:b1:0f:d7:7a:1a:b6:5d:
                    e7:8f:39:ba:02:11:45:28:da:71:38:91:2d:cd:45:
                    ec:93:56:b9:6c:20:5d:23:30:c7:d8:eb:5d:15:54:
                    24:80:47:7a:64:37:47:26:35:1a:9a:85:42:a7:59:
                    35:d9:be:df:a3:a0:41:95:f2:2a:d6:c9:c7:32:03:
                    cf:2a:9f:ab:04:bc:29:d0:1e:2f:84:34:fe:5f:5e:
                    71:b1:b5:3b:c8:3a:4e:5e:1d:26:63:78:7c:b1:3b:
                    05:bf:a0:96:c2:aa:fa:be:26:fc:b6:16:4f:32:9d:
                    ce:a6:53:31:66:cd:dc:49:e2:fe:98:0f:cd:c4:c1:
                    6c:f2:e9:14:a7:bf:53:20:6e:c9:5b:ea:71:b6:69:
                    15:c5:a5:0d:8a:db:ce:8f:29:30:4d:d3:29:2a:d4:
                    78:f5:b0:27:4c:0d:8f:d9:3a:71:04:5a:49:61:60:
                    fd:33:6b:5d:27:d2:9e:56:0f:24:64:3e:3e:46:87:
                    5b:ec:46:40:fd:5e:d4:3a:65:f4:67:4c:b5:d0:98:
                    d4:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:1C:89:97:00:E5:58:02:4D:F9:83:C9:C5:AF:C4:BD:91:65:40:35
            X509v3 Authority Key Identifier:
                keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e35382e302f32342d3234203d3e203132303833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.144.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:93:17:0e:6a:fc:eb:70:ab:54:00:81:fe:8e:07:69:2e:62:
         61:a2:95:47:c1:af:38:35:8e:14:ce:c9:eb:ad:30:d6:ba:de:
         8a:71:78:7a:14:e7:19:cd:0f:25:fe:d9:a7:9b:cd:11:51:50:
         23:74:9f:3c:f7:c8:b3:ea:ab:b4:5d:7c:6e:82:26:ad:d2:ce:
         0e:10:3d:8a:a3:82:e8:f8:e9:38:dc:00:70:a0:b4:3f:d5:2b:
         c8:32:ed:e6:95:ae:0a:c4:66:37:b5:0d:9e:18:b2:74:90:8b:
         73:cb:a9:69:c4:45:d9:11:74:81:23:44:6c:64:8c:ee:8d:6f:
         89:a8:e8:f0:52:86:24:2d:b6:7c:94:d6:ff:66:38:69:5f:9d:
         a6:da:c8:ef:e2:d2:ae:45:78:5e:af:7b:a2:7b:21:21:a8:76:
         3b:5f:06:cb:34:6f:1c:b8:23:f4:0c:fd:5a:03:88:99:4a:c7:
         5b:fb:db:84:f1:3b:52:60:57:3e:d2:cb:1d:32:09:df:6f:59:
         7a:e1:e7:13:e5:e3:c0:bc:19:ff:32:43:4a:12:72:2e:99:68:
         a0:10:04:47:23:02:db:2b:9b:f4:70:1a:22:79:6c:ff:05:1f:
         7d:b3:61:80:e3:df:48:54:e1:b3:ab:28:3a:30:66:1e:1a:09:
         40:35:fc:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:34:32 2026 by rpki-client