Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e36302e302f32342d3234203d3e2035363530.roa
File:                     36322e3134342e36302e302f32342d3234203d3e2035363530.roa (raw, json)
Hash identifier:          od4uHvq6up1Qwf+jXtZidMdFrL6WtRiFPBYztJTihNw=
Subject key identifier:   82:99:69:38:1F:DF:BE:96:B7:9C:92:1B:FB:13:39:C4:4A:E9:E6:E3
Certificate issuer:       /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
Certificate serial:       0F5A2EB11837A05367ED7C037E652B3E58582C
Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e36302e302f32342d3234203d3e2035363530.roa
Signing time:             Tue 28 Jul 2026 12:18:18 +0000
ROA not before:           Tue 28 Jul 2026 12:13:18 +0000
ROA not after:            Tue 27 Jul 2027 12:18:18 +0000
asID:                     5650
IP address blocks:        62.144.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl
                          rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:5a:2e:b1:18:37:a0:53:67:ed:7c:03:7e:65:2b:3e:58:58:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
        Validity
            Not Before: Jul 28 12:13:18 2026 GMT
            Not After : Jul 27 12:18:18 2027 GMT
        Subject: CN=829969381FDFBE96B79C921BFB1339C44AE9E6E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:fa:8c:7f:a0:0e:a0:cd:fd:ec:46:5f:98:88:
                    a1:1c:26:df:77:d7:48:8d:a9:24:8f:f1:9c:90:7d:
                    a8:71:75:ec:c5:d4:57:46:bb:67:18:29:4f:f9:f3:
                    5f:1b:2a:2c:dd:21:3b:0e:92:88:b1:b2:ff:3b:f9:
                    bf:9c:a5:70:e8:77:b8:d4:62:76:5b:ff:4f:8b:5e:
                    7a:4c:06:6e:a3:aa:33:a1:02:aa:cd:d1:f8:9f:19:
                    60:3a:73:c7:e6:53:b0:26:e6:36:50:95:89:ad:7e:
                    44:50:cc:6c:7c:12:8b:17:d9:8b:0e:4f:52:5e:71:
                    0e:ec:77:f6:5a:74:56:e8:b8:86:0c:eb:b3:ba:f5:
                    22:d8:68:69:e4:bb:fa:72:ba:6b:83:17:1b:2f:01:
                    ef:48:4e:36:5a:83:77:17:4d:81:42:cc:4a:b1:3b:
                    f3:f4:b0:d9:6c:fb:ae:6c:f9:af:b4:bd:7c:3a:e1:
                    8d:ed:c9:c3:93:75:14:4f:f6:c8:c8:e3:cb:63:51:
                    88:bf:f4:26:72:97:13:ec:58:5d:04:84:09:00:81:
                    5e:e2:5a:60:c5:82:12:83:3c:a7:90:42:e2:de:ef:
                    c3:68:13:f2:fd:c9:a8:f9:91:2c:07:e3:91:7c:91:
                    17:52:9c:81:4a:68:39:47:ea:2d:18:8f:8b:37:22:
                    b0:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:99:69:38:1F:DF:BE:96:B7:9C:92:1B:FB:13:39:C4:4A:E9:E6:E3
            X509v3 Authority Key Identifier:
                keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e36302e302f32342d3234203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.144.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:18:80:f7:07:56:e6:05:75:11:85:0f:a2:d4:a8:3e:16:32:
         9b:ac:98:b3:54:6a:1a:2e:60:6e:82:9a:09:7c:0c:eb:a4:5c:
         51:4d:ca:6e:54:a3:f5:3d:c1:a0:f0:7d:ce:cd:6e:1d:2f:4f:
         4f:db:17:b0:14:f6:53:eb:42:89:e2:47:22:2c:14:7a:00:b8:
         43:1a:ae:c4:58:8c:38:70:2c:cf:6f:23:5d:17:a2:a2:2f:65:
         be:1f:02:18:3b:4b:76:e8:6f:72:1c:95:b8:ad:75:61:ea:16:
         19:86:63:25:3a:1e:23:8c:fa:4d:72:04:58:50:23:88:ce:e0:
         f2:99:3a:08:97:75:d7:91:23:65:e5:97:03:54:78:1d:bc:f6:
         d9:57:04:88:c0:2c:6c:8c:ad:2a:5b:29:81:8c:fd:34:76:4e:
         6b:2d:7e:f1:2f:2b:f4:9b:c5:97:07:92:d6:55:d6:4e:5e:88:
         9a:37:27:4a:1c:da:c8:8e:74:98:99:45:74:be:5e:da:d3:97:
         02:51:a4:5d:7a:9d:fb:ac:b3:21:8c:f2:8c:0a:2d:f3:e4:45:
         4b:0b:18:92:c7:7b:28:ce:3f:3f:3f:d5:47:64:99:f0:69:62:
         b5:4b:46:31:b0:4f:28:76:61:b3:4e:8a:65:b8:63:04:96:c0:
         5f:42:69:2b
-----BEGIN CERTIFICATE-----
MIIFUzCCBDugAwIBAgITD1ousRg3oFNn7XwDfmUrPlhYLDANBgkqhkiG9w0BAQsF
ADAzMTEwLwYDVQQDEyhCMzU0RDMyOENCQkZEMUVGM0NEMjkyNjhBMjNCMEZDQzYw
RTNBMkM1MB4XDTI2MDcyODEyMTMxOFoXDTI3MDcyNzEyMTgxOFowMzExMC8GA1UE
AxMoODI5OTY5MzgxRkRGQkU5NkI3OUM5MjFCRkIxMzM5QzQ0QUU5RTZFMzCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANn6jH+gDqDN/exGX5iIoRwm33fX
SI2pJI/xnJB9qHF17MXUV0a7ZxgpT/nzXxsqLN0hOw6SiLGy/zv5v5ylcOh3uNRi
dlv/T4teekwGbqOqM6ECqs3R+J8ZYDpzx+ZTsCbmNlCVia1+RFDMbHwSixfZiw5P
Ul5xDux39lp0Vui4hgzrs7r1IthoaeS7+nK6a4MXGy8B70hONlqDdxdNgULMSrE7
8/Sw2Wz7rmz5r7S9fDrhje3Jw5N1FE/2yMjjy2NRiL/0JnKXE+xYXQSECQCBXuJa
YMWCEoM8p5BC4t7vw2gT8v3JqPmRLAfjkXyRF1KcgUpoOUfqLRiPizcisK0CAwEA
AaOCAl4wggJaMB0GA1UdDgQWBBSCmWk4H9++lreckhv7EznESunm4zAfBgNVHSME
GDAWgBSzVNMoy7/R7zzSkmiiOw/MYOOixTAOBgNVHQ8BAf8EBAMCB4AwgYgGA1Ud
HwSBgDB+MHygeqB4hnZyc3luYzovL3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9h
MDM3NWIzOS1mOTQ5LTRjYjUtYjUxOS1mOTQwMDhiMTY1NGMtMC8wL0IzNTREMzI4
Q0JCRkQxRUYzQ0QyOTI2OEEyM0IwRkNDNjBFM0EyQzUuY3JsMIGeBggrBgEFBQcB
AQSBkTCBjjCBiwYIKwYBBQUHMAKGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJp
cGUubmV0L3JlcG9zaXRvcnkvNjE3MDhhNmItNmMzYS00MGEwLWEzMDItNTk1ZWNj
MTc4NDhjLzAvQjM1NEQzMjhDQkJGRDFFRjNDRDI5MjY4QTIzQjBGQ0M2MEUzQTJD
NS5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8v
ci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvL2EwMzc1YjM5LWY5NDktNGNiNS1iNTE5
LWY5NDAwOGIxNjU0Yy0wLzAvMzYzMjJlMzEzNDM0MmUzNjMwMmUzMDJmMzIzNDJk
MzIzNDIwM2QzZTIwMzUzNjM1MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH
DgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAA+kDwwDQYJKoZIhvcNAQEL
BQADggEBAC4YgPcHVuYFdRGFD6LUqD4WMpusmLNUahouYG6Cmgl8DOukXFFNym5U
o/U9waDwfc7Nbh0vT0/bF7AU9lPrQoniRyIsFHoAuEMarsRYjDhwLM9vI10XoqIv
Zb4fAhg7S3bob3IclbitdWHqFhmGYyU6HiOM+k1yBFhQI4jO4PKZOgiXddeRI2Xl
lwNUeB289tlXBIjALGyMrSpbKYGM/TR2TmstfvEvK/SbxZcHktZV1k5eiJo3J0oc
2siOdJiZRXS+XtrTlwJRpF16nfussyGM8owKLfPkRUsLGJLHeyjOPz8/1UdkmfBp
YrVLRjGwTyh2YbNOimW4YwSWwF9CaSs=
-----END CERTIFICATE-----
Generated at Wed Jul 29 01:17:20 2026 by rpki-client