Route Origin Authorization

$ rpki-client -vvvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3231312e302f32342d3234203d3e20343033313537.roa
File:                     352e38332e3231312e302f32342d3234203d3e20343033313537.roa (raw, json)
Hash identifier:          a17XFt49BkrHu20Tas9fyRDHyxrsyQs8PJPf2zZREuk=
Subject key identifier:   39:7F:5B:A0:32:41:0B:40:57:BF:76:AB:88:5B:3D:3A:43:16:8C:AB
Certificate issuer:       /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial:       02F272499A21BD1DDB6B7711A83D477A7A4FF960
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3231312e302f32342d3234203d3e20343033313537.roa
Signing time:             Sat 31 Oct 2026 20:26:12 +0000
ROA not before:           Sat 31 Oct 2026 20:21:12 +0000
ROA not after:            Sat 30 Oct 2027 20:26:12 +0000
asID:                     403157
IP address blocks:        5.83.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
                          rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 06 Nov 2026 06:21:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:f2:72:49:9a:21:bd:1d:db:6b:77:11:a8:3d:47:7a:7a:4f:f9:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
        Validity
            Not Before: Oct 31 20:21:12 2026 GMT
            Not After : Oct 30 20:26:12 2027 GMT
        Subject: CN=397F5BA032410B4057BF76AB885B3D3A43168CAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f5:b2:d0:91:f0:6c:65:b0:2f:a4:b7:31:cc:
                    fa:4d:ca:c1:5a:26:78:1f:9d:fa:c6:35:30:b0:1f:
                    61:4e:56:ac:72:7a:c8:f4:21:b7:c6:8d:c5:72:d8:
                    9e:be:7a:bd:bd:38:58:22:5e:b8:25:36:bb:93:ed:
                    d1:8d:27:e1:e6:1d:a1:72:2a:c1:77:25:54:bd:5d:
                    ee:56:42:bb:8e:c9:05:86:01:bf:3a:7f:e8:c8:89:
                    1c:05:e2:40:cc:90:2a:b7:0d:6f:92:6c:dd:01:3e:
                    bb:db:f1:af:0d:74:f1:51:5e:27:2f:22:96:2d:2c:
                    25:2f:14:81:c6:26:34:47:5e:66:24:27:df:25:70:
                    1e:7d:af:0b:d3:c2:5a:70:ea:bf:5f:15:7a:fd:89:
                    c9:f1:a4:8f:5d:70:1a:0a:ff:fd:e0:47:ce:e7:10:
                    da:97:24:e4:77:02:e5:43:74:ae:38:79:cb:d5:ca:
                    cc:c1:ad:59:0f:a4:0a:3c:5e:1a:02:26:21:67:76:
                    1a:83:e0:47:83:b7:15:de:d8:aa:0e:a2:21:6a:7e:
                    58:be:60:ae:0e:df:a3:f6:62:ce:2c:b0:10:04:7a:
                    0e:36:fe:70:f7:4b:48:e4:a5:dc:29:f0:a3:7c:56:
                    aa:31:df:c2:d5:2b:76:de:f1:5e:70:91:ec:0f:a7:
                    8e:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:7F:5B:A0:32:41:0B:40:57:BF:76:AB:88:5B:3D:3A:43:16:8C:AB
            X509v3 Authority Key Identifier:
                keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3231312e302f32342d3234203d3e20343033313537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.83.211.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:ce:ce:75:c6:c4:2c:61:22:39:7d:8f:cc:8c:80:67:95:9c:
         27:fc:4c:17:56:64:b8:a0:d3:1c:fe:ef:e4:52:17:2b:04:f9:
         b0:a4:3a:70:1d:cf:f6:91:b6:cb:14:ce:ef:9e:14:02:46:20:
         60:e6:91:4f:64:c9:2d:ca:a4:76:98:dd:08:5a:b2:6c:69:89:
         bd:a6:07:53:47:97:e7:4a:99:5c:f8:dd:0f:79:56:e3:63:f6:
         48:4e:de:b2:78:8b:45:4e:af:40:78:49:52:bb:4a:1b:ac:5f:
         80:dc:9b:30:f5:2a:b2:27:00:46:67:af:7b:f3:eb:d9:4b:bb:
         0f:31:eb:18:eb:7b:99:11:99:c1:bb:2a:c4:90:cf:67:5d:77:
         ab:07:ff:80:73:b9:d6:23:c0:b5:eb:de:b3:75:90:cf:aa:27:
         66:15:cc:e2:9b:e8:ea:d6:20:d6:a4:e6:20:ce:92:16:06:c6:
         20:41:05:dd:d6:69:63:cc:df:6c:bb:83:3c:76:9f:4f:83:69:
         ac:7a:29:57:e9:7b:b0:ea:10:23:58:61:8a:15:be:1f:32:72:
         65:ad:ce:d4:53:9e:fd:6e:ff:a1:e3:38:49:3b:75:0f:d6:dc:
         ed:3a:bf:67:55:06:e5:27:0e:d1:5f:a4:64:63:f8:4b:a9:8d:
         6a:86:28:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----