Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e36302e302f32342d3234203d3e203132303833.roa
File:                     36322e3134342e36302e302f32342d3234203d3e203132303833.roa (raw, json)
Hash identifier:          cFy1fYAGMf6ObHSIyHPhZkxHC/wOGE4hTLwFGpVPdXY=
Subject key identifier:   6C:7E:A1:9D:3F:FD:D2:E5:42:25:76:57:9F:30:B0:18:C9:37:8E:BC
Certificate issuer:       /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
Certificate serial:       5CEAD1BE10F2FB4236C33D5D4D64E3BD44ACCB61
Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e36302e302f32342d3234203d3e203132303833.roa
Signing time:             Tue 28 Jul 2026 12:18:14 +0000
ROA not before:           Tue 28 Jul 2026 12:13:14 +0000
ROA not after:            Tue 27 Jul 2027 12:18:14 +0000
asID:                     12083
IP address blocks:        62.144.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl
                          rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:ea:d1:be:10:f2:fb:42:36:c3:3d:5d:4d:64:e3:bd:44:ac:cb:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
        Validity
            Not Before: Jul 28 12:13:14 2026 GMT
            Not After : Jul 27 12:18:14 2027 GMT
        Subject: CN=6C7EA19D3FFDD2E5422576579F30B018C9378EBC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:c9:0d:bc:d7:21:18:15:f8:83:e5:76:d6:a7:
                    ef:62:e6:2a:fe:f0:74:c0:47:fe:c1:71:40:cc:2f:
                    3f:9e:a0:ac:a4:15:14:19:55:ed:f9:93:c6:03:5b:
                    4d:73:a9:d6:22:e8:86:49:8d:7e:aa:6a:b7:f0:96:
                    79:02:91:55:e2:9c:1e:1b:4c:ca:92:1d:ae:9c:0b:
                    65:c9:41:bf:dc:19:c3:8b:f1:52:3b:44:65:f1:13:
                    79:3d:bb:a9:b5:fb:06:cc:07:39:e8:d4:2d:d2:fa:
                    c9:cb:5d:f9:78:ac:65:6e:88:3a:cd:04:d8:62:05:
                    4e:c8:2e:eb:20:05:52:d3:40:f6:ab:36:54:87:c2:
                    c7:06:e6:ea:7a:6d:a4:9a:9a:f9:89:83:85:5e:3c:
                    90:2b:8b:c6:c8:df:dd:19:f0:dc:8c:aa:46:8f:e6:
                    b2:99:25:92:d7:80:09:23:07:66:38:94:5e:21:a2:
                    eb:d9:88:db:fa:54:3b:4d:9b:08:96:e9:e9:7a:ce:
                    e1:03:70:c6:db:83:5c:a6:40:b5:6e:ae:dd:85:f3:
                    24:f4:61:52:4b:a0:ae:58:52:0a:7e:f8:1d:54:9f:
                    1e:84:7b:ff:c0:d0:ed:b3:88:df:91:0d:fc:71:6a:
                    a1:4d:8a:e4:9c:6b:24:6e:4c:b6:56:54:e2:f8:e2:
                    b9:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:7E:A1:9D:3F:FD:D2:E5:42:25:76:57:9F:30:B0:18:C9:37:8E:BC
            X509v3 Authority Key Identifier:
                keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e36302e302f32342d3234203d3e203132303833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.144.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:30:41:36:9b:b3:19:68:96:8d:d9:f2:35:c1:12:c3:59:8c:
         8b:7d:2d:54:9a:72:1d:0c:db:f1:b4:8c:3a:61:2a:5c:e9:d4:
         dc:ef:dd:65:07:bf:96:db:b2:e4:0b:15:e6:80:01:54:b0:a7:
         a5:8b:e1:88:80:71:5d:d2:3e:e6:78:5d:10:8e:17:99:ba:9c:
         c8:a8:32:66:e8:eb:19:f5:2f:06:6d:89:9b:20:b8:6c:4b:d3:
         bb:89:16:71:99:ab:10:32:53:d8:37:04:99:1e:05:4e:74:5c:
         16:fd:fb:38:5c:d6:db:4f:02:09:8b:0c:e0:e7:ec:10:ad:6e:
         69:2a:c4:97:fb:f7:1a:8f:2a:5a:51:f0:7b:21:34:ee:69:d7:
         c8:75:65:fd:5d:ff:d1:ab:ca:ed:69:ad:7d:e4:15:75:e5:f3:
         80:08:ad:00:a6:11:d0:49:eb:f1:54:32:e0:c7:bb:13:51:33:
         4d:bb:1d:13:bf:ef:c7:e0:81:9e:66:fb:3e:00:fb:4b:e5:89:
         8c:77:93:cc:e2:3b:18:bd:41:4c:0f:28:ba:96:25:cc:ef:79:
         f6:28:b5:65:02:a4:2c:67:c2:28:db:93:cc:0b:d5:9b:e7:94:
         0a:9e:db:8e:60:74:8e:34:ff:f9:1b:e7:6e:59:95:e2:8a:fd:
         c4:2c:22:d9
-----BEGIN CERTIFICATE-----
MIIFVjCCBD6gAwIBAgIUXOrRvhDy+0I2wz1dTWTjvUSsy2EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjM1NEQzMjhDQkJGRDFFRjNDRDI5MjY4QTIzQjBGQ0M2
MEUzQTJDNTAeFw0yNjA3MjgxMjEzMTRaFw0yNzA3MjcxMjE4MTRaMDMxMTAvBgNV
BAMTKDZDN0VBMTlEM0ZGREQyRTU0MjI1NzY1NzlGMzBCMDE4QzkzNzhFQkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCayQ281yEYFfiD5XbWp+9i5ir+
8HTAR/7BcUDMLz+eoKykFRQZVe35k8YDW01zqdYi6IZJjX6qarfwlnkCkVXinB4b
TMqSHa6cC2XJQb/cGcOL8VI7RGXxE3k9u6m1+wbMBzno1C3S+snLXfl4rGVuiDrN
BNhiBU7ILusgBVLTQParNlSHwscG5up6baSamvmJg4VePJAri8bI390Z8NyMqkaP
5rKZJZLXgAkjB2Y4lF4houvZiNv6VDtNmwiW6el6zuEDcMbbg1ymQLVurt2F8yT0
YVJLoK5YUgp++B1Unx6Ee//A0O2ziN+RDfxxaqFNiuScayRuTLZWVOL44rkvAgMB
AAGjggJgMIICXDAdBgNVHQ4EFgQUbH6hnT/90uVCJXZXnzCwGMk3jrwwHwYDVR0j
BBgwFoAUs1TTKMu/0e880pJoojsPzGDjosUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
YTAzNzViMzktZjk0OS00Y2I1LWI1MTktZjk0MDA4YjE2NTRjLTAvMC9CMzU0RDMy
OENCQkZEMUVGM0NEMjkyNjhBMjNCMEZDQzYwRTNBMkM1LmNybDCBngYIKwYBBQUH
AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5LzYxNzA4YTZiLTZjM2EtNDBhMC1hMzAyLTU5NWVj
YzE3ODQ4Yy8wL0IzNTREMzI4Q0JCRkQxRUYzQ0QyOTI2OEEyM0IwRkNDNjBFM0Ey
QzUuY2VyMIGiBggrBgEFBQcBCwSBlTCBkjCBjwYIKwYBBQUHMAuGgYJyc3luYzov
L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9hMDM3NWIzOS1mOTQ5LTRjYjUtYjUx
OS1mOTQwMDhiMTY1NGMtMC8wLzM2MzIyZTMxMzQzNDJlMzYzMDJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMxMzIzMDM4MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAA+kDwwDQYJKoZIhvcN
AQELBQADggEBAGUwQTabsxlolo3Z8jXBEsNZjIt9LVSach0M2/G0jDphKlzp1Nzv
3WUHv5bbsuQLFeaAAVSwp6WL4YiAcV3SPuZ4XRCOF5m6nMioMmbo6xn1LwZtiZsg
uGxL07uJFnGZqxAyU9g3BJkeBU50XBb9+zhc1ttPAgmLDODn7BCtbmkqxJf79xqP
KlpR8HshNO5p18h1Zf1d/9Gryu1prX3kFXXl84AIrQCmEdBJ6/FUMuDHuxNRM027
HRO/78fggZ5m+z4A+0vliYx3k8ziOxi9QUwPKLqWJczvefYotWUCpCxnwijbk8wL
1ZvnlAqe245gdI40//kb525ZleKK/cQsItk=
-----END CERTIFICATE-----
Generated at Tue Jul 28 22:07:53 2026 by rpki-client