Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e36312e302f32342d3234203d3e203133333437.roa
File:                     36322e3134342e36312e302f32342d3234203d3e203133333437.roa (raw, json)
Hash identifier:          863bf/yjfztv1ADD1LWChgdGDI8Fc4Jfe58Ve+HwW6E=
Subject key identifier:   E1:79:FD:2C:B6:91:2F:21:7D:7E:BB:A5:89:C9:0B:92:97:92:07:A0
Certificate issuer:       /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
Certificate serial:       6AC5F3F5D5208376C7FCB0D54758DAC8E6959EE7
Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e36312e302f32342d3234203d3e203133333437.roa
Signing time:             Tue 28 Jul 2026 12:18:18 +0000
ROA not before:           Tue 28 Jul 2026 12:13:18 +0000
ROA not after:            Tue 27 Jul 2027 12:18:18 +0000
asID:                     13347
IP address blocks:        62.144.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl
                          rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:c5:f3:f5:d5:20:83:76:c7:fc:b0:d5:47:58:da:c8:e6:95:9e:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
        Validity
            Not Before: Jul 28 12:13:18 2026 GMT
            Not After : Jul 27 12:18:18 2027 GMT
        Subject: CN=E179FD2CB6912F217D7EBBA589C90B92979207A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b1:a9:13:1a:d0:b0:08:a1:53:45:2c:5c:1b:
                    2f:74:36:86:43:b0:2e:1e:13:6d:a3:b5:20:2b:16:
                    49:0d:c5:3c:87:f5:8a:58:36:66:0f:d7:77:d8:63:
                    33:50:4b:be:a9:0c:e8:32:7c:09:21:74:5a:ef:ae:
                    a1:12:cb:87:18:35:27:91:a7:c7:b1:4e:ea:3f:2d:
                    b8:98:59:7c:3f:b6:80:1a:e1:c6:c4:8e:21:95:38:
                    2f:cf:1a:e0:62:00:9f:1a:11:8a:32:32:15:7f:cd:
                    3b:5d:ab:42:db:d4:12:71:ad:8e:bd:c3:8c:61:03:
                    b6:df:44:18:e8:3e:08:8e:4e:a4:e6:3c:19:f1:30:
                    6c:6b:a8:a6:a6:ec:97:b3:f0:67:78:fe:01:c5:04:
                    88:e4:d7:6d:4d:bc:30:f7:7a:a0:48:ff:9e:46:49:
                    9e:14:7a:4b:69:f8:6d:42:96:ff:34:e6:89:c9:e2:
                    a4:19:22:84:7e:96:67:9c:83:08:fd:71:ad:2e:ee:
                    29:ce:91:95:e3:be:ed:52:d2:0c:0c:78:4a:d2:fe:
                    e6:0e:bb:e2:eb:7f:43:ed:0d:06:00:ab:41:74:c8:
                    43:ed:fb:9a:ef:33:1d:32:aa:3d:6e:e7:4d:5a:f6:
                    e5:e9:ac:a0:b3:3f:ee:40:f7:1d:c9:e3:87:64:43:
                    8e:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:79:FD:2C:B6:91:2F:21:7D:7E:BB:A5:89:C9:0B:92:97:92:07:A0
            X509v3 Authority Key Identifier:
                keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e36312e302f32342d3234203d3e203133333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.144.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:63:ab:a6:0b:4c:33:b7:ca:83:4a:fe:f1:0b:7b:c7:2b:02:
         7b:22:56:9c:77:05:fc:bc:38:14:17:86:5a:00:7b:c2:fa:0c:
         3e:be:b6:9c:9a:95:54:9a:d3:7f:61:22:a7:95:54:36:b5:2e:
         9a:df:52:0f:06:8c:79:05:93:d5:f8:f1:3a:96:b2:15:2c:d7:
         d9:ef:d2:46:65:f9:b4:56:ee:7a:48:ff:50:9a:e3:db:bb:ef:
         23:be:2e:71:e0:09:3f:80:3b:31:18:0b:99:b2:5b:8c:19:75:
         ed:75:c0:62:87:8b:28:f5:31:bd:d2:c3:8e:39:af:34:d3:2d:
         b5:05:ab:fd:d5:a9:ba:cc:90:94:9f:06:fc:b8:c6:8b:c8:82:
         01:fb:2a:81:f8:e9:dd:b4:e8:7e:c4:bf:98:32:72:9a:0f:36:
         39:44:6d:e9:71:16:cd:3e:a3:a8:b4:33:5a:55:c2:c8:8f:a1:
         5e:a2:6f:25:bd:cb:a1:7d:a9:b9:23:90:25:4d:76:92:e0:52:
         0f:29:9b:6d:e5:b5:c3:06:c9:7d:f8:75:fb:54:65:94:24:a3:
         84:cf:8d:07:03:da:21:3a:c1:f0:55:2b:a4:ad:0a:8c:3c:39:
         a7:29:80:b0:7a:c6:6d:b7:fb:91:e1:43:05:ce:82:7b:ce:1a:
         13:3c:51:06
-----BEGIN CERTIFICATE-----
MIIFVjCCBD6gAwIBAgIUasXz9dUgg3bH/LDVR1jayOaVnucwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjM1NEQzMjhDQkJGRDFFRjNDRDI5MjY4QTIzQjBGQ0M2
MEUzQTJDNTAeFw0yNjA3MjgxMjEzMThaFw0yNzA3MjcxMjE4MThaMDMxMTAvBgNV
BAMTKEUxNzlGRDJDQjY5MTJGMjE3RDdFQkJBNTg5QzkwQjkyOTc5MjA3QTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5sakTGtCwCKFTRSxcGy90NoZD
sC4eE22jtSArFkkNxTyH9YpYNmYP13fYYzNQS76pDOgyfAkhdFrvrqESy4cYNSeR
p8exTuo/LbiYWXw/toAa4cbEjiGVOC/PGuBiAJ8aEYoyMhV/zTtdq0Lb1BJxrY69
w4xhA7bfRBjoPgiOTqTmPBnxMGxrqKam7Jez8Gd4/gHFBIjk121NvDD3eqBI/55G
SZ4Uektp+G1Clv805onJ4qQZIoR+lmecgwj9ca0u7inOkZXjvu1S0gwMeErS/uYO
u+Lrf0PtDQYAq0F0yEPt+5rvMx0yqj1u501a9uXprKCzP+5A9x3J44dkQ45RAgMB
AAGjggJgMIICXDAdBgNVHQ4EFgQU4Xn9LLaRLyF9frulickLkpeSB6AwHwYDVR0j
BBgwFoAUs1TTKMu/0e880pJoojsPzGDjosUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
YTAzNzViMzktZjk0OS00Y2I1LWI1MTktZjk0MDA4YjE2NTRjLTAvMC9CMzU0RDMy
OENCQkZEMUVGM0NEMjkyNjhBMjNCMEZDQzYwRTNBMkM1LmNybDCBngYIKwYBBQUH
AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5LzYxNzA4YTZiLTZjM2EtNDBhMC1hMzAyLTU5NWVj
YzE3ODQ4Yy8wL0IzNTREMzI4Q0JCRkQxRUYzQ0QyOTI2OEEyM0IwRkNDNjBFM0Ey
QzUuY2VyMIGiBggrBgEFBQcBCwSBlTCBkjCBjwYIKwYBBQUHMAuGgYJyc3luYzov
L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9hMDM3NWIzOS1mOTQ5LTRjYjUtYjUx
OS1mOTQwMDhiMTY1NGMtMC8wLzM2MzIyZTMxMzQzNDJlMzYzMTJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMxMzMzMzM0Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAA+kD0wDQYJKoZIhvcN
AQELBQADggEBAIZjq6YLTDO3yoNK/vELe8crAnsiVpx3Bfy8OBQXhloAe8L6DD6+
tpyalVSa039hIqeVVDa1LprfUg8GjHkFk9X48TqWshUs19nv0kZl+bRW7npI/1Ca
49u77yO+LnHgCT+AOzEYC5myW4wZde11wGKHiyj1Mb3Sw445rzTTLbUFq/3VqbrM
kJSfBvy4xovIggH7KoH46d206H7Ev5gycpoPNjlEbelxFs0+o6i0M1pVwsiPoV6i
byW9y6F9qbkjkCVNdpLgUg8pm23ltcMGyX34dftUZZQko4TPjQcD2iE6wfBVK6St
Cow8OacpgLB6xm23+5HhQwXOgnvOGhM8UQY=
-----END CERTIFICATE-----
Generated at Tue Jul 28 17:16:07 2026 by rpki-client