Route Origin Authorization

$ rpki-client -vvvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/AS401362.roa
File:                     AS401362.roa (raw, json)
Hash identifier:          TVCVbht0oLD8mQQzs8QC2h8hT6blaHrNlu+zmkd2oI0=
Subject key identifier:   43:12:19:AD:95:B3:E0:2E:85:CE:FC:D6:A7:3D:80:27:89:C5:82:10
Certificate issuer:       /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
Certificate serial:       0E26421116577983232A6C9A860FB91582ABA92B
Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/AS401362.roa
Signing time:             Thu 17 Sep 2026 08:50:41 +0000
ROA not before:           Thu 17 Sep 2026 08:45:41 +0000
ROA not after:            Thu 16 Sep 2027 08:50:41 +0000
asID:                     401362
IP address blocks:        62.144.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl
                          rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 05:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:26:42:11:16:57:79:83:23:2a:6c:9a:86:0f:b9:15:82:ab:a9:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
        Validity
            Not Before: Sep 17 08:45:41 2026 GMT
            Not After : Sep 16 08:50:41 2027 GMT
        Subject: CN=431219AD95B3E02E85CEFCD6A73D802789C58210
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:84:9f:6e:f0:3d:e6:f6:5f:22:ff:26:a3:57:
                    ca:00:9b:bf:6e:52:63:bb:8a:5f:ba:cd:dc:b1:9c:
                    f3:e5:64:7f:a4:24:98:c8:3d:06:3c:d6:e9:b9:27:
                    97:8d:91:da:26:c8:80:69:f4:6f:8c:b6:36:08:7c:
                    fc:a0:2b:ab:2f:f7:aa:95:21:21:0f:f5:c4:37:7c:
                    6f:8f:9d:02:07:2e:25:ce:a6:58:d9:99:36:d5:0f:
                    3a:25:fa:24:40:a1:15:be:05:71:be:e1:a0:66:87:
                    c6:96:0c:6b:6c:a5:9a:a0:21:6a:fd:3d:71:3a:0a:
                    6b:2c:99:0d:76:89:2e:d9:bc:26:fb:6c:95:da:37:
                    5e:ea:8c:95:c8:51:f8:18:32:22:0e:21:ed:64:8a:
                    9d:04:a9:bf:85:48:4f:9f:ce:a2:34:39:89:1a:b1:
                    d2:4a:66:46:1e:88:c6:ee:c5:df:dc:e6:d5:14:fa:
                    43:28:8c:3e:ca:79:3e:62:58:a5:53:d3:18:a7:40:
                    18:e3:89:a9:97:35:9e:78:8c:55:64:7c:07:a7:0e:
                    27:d4:b9:b2:59:d7:af:51:ca:49:39:1b:66:39:10:
                    78:bd:f7:de:df:c5:e0:3b:30:a1:dc:f4:10:b9:35:
                    b7:7a:3c:5a:3b:80:9e:50:1a:e2:9b:ca:73:27:b0:
                    f6:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:12:19:AD:95:B3:E0:2E:85:CE:FC:D6:A7:3D:80:27:89:C5:82:10
            X509v3 Authority Key Identifier:
                keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/AS401362.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.144.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:e3:e2:e1:8b:aa:96:a7:63:fe:6f:af:6f:c7:4b:05:ec:ea:
         30:e8:d1:99:09:ca:ce:64:72:3c:34:cc:82:cb:fb:c6:be:fa:
         43:9f:62:ce:e4:1f:d4:7a:89:6c:d4:f3:49:d0:92:69:73:0b:
         79:66:81:dc:7a:35:70:e0:39:3a:3f:d0:e2:d9:21:0f:36:c5:
         63:c5:51:47:ea:85:bb:2c:2f:3a:cf:db:ce:73:1f:5d:13:be:
         bd:57:5a:1d:5d:df:08:b7:18:57:e7:0b:cc:d6:97:97:60:e8:
         14:a1:23:0d:b6:66:bc:c9:ad:e8:10:21:24:81:59:e1:9e:17:
         5e:c6:2f:3d:4b:73:c0:cf:1e:70:60:cf:b6:68:22:f5:1d:bb:
         aa:14:31:22:78:66:cc:dc:7f:fb:67:c3:e1:19:98:ce:cf:f2:
         3f:32:b1:4f:7b:73:1f:2d:73:58:b3:96:17:28:63:27:7c:ab:
         fa:bc:ea:49:dc:84:d1:39:b9:ee:13:79:fc:1b:db:d3:38:c6:
         e7:02:57:8b:07:d5:72:d9:f7:11:8f:b1:33:af:7d:5b:2a:6d:
         6d:e0:cb:35:4a:40:77:69:fe:60:e6:ff:5c:d4:fc:9c:eb:11:
         28:48:0f:74:00:17:b1:d7:c1:ef:f5:ec:30:bd:09:f3:97:76:
         61:b6:f0:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:44:55 2026 by rpki-client