Route Origin Authorization

$ rpki-client -vvvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3231312e302f32342d3234203d3e2039333034.roa
File:                     352e38332e3231312e302f32342d3234203d3e2039333034.roa (raw, json)
Hash identifier:          2ZpjSA81BQwNr/i3lI+R9+NRM8zOSqN8oSWw31R1OrU=
Subject key identifier:   A7:C1:44:19:D9:C5:27:F0:57:F1:A6:25:B9:33:A3:16:6F:FA:DD:34
Certificate issuer:       /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial:       5AF43A78EF3E9A420D45A2591EF6B339A0F33691
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3231312e302f32342d3234203d3e2039333034.roa
Signing time:             Tue 08 Sep 2026 06:25:21 +0000
ROA not before:           Tue 08 Sep 2026 06:20:21 +0000
ROA not after:            Tue 07 Sep 2027 06:25:21 +0000
asID:                     9304
IP address blocks:        5.83.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
                          rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 10:15:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:f4:3a:78:ef:3e:9a:42:0d:45:a2:59:1e:f6:b3:39:a0:f3:36:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
        Validity
            Not Before: Sep  8 06:20:21 2026 GMT
            Not After : Sep  7 06:25:21 2027 GMT
        Subject: CN=A7C14419D9C527F057F1A625B933A3166FFADD34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:55:c1:bb:2e:5d:56:37:bd:8e:f5:d5:dd:2a:
                    a6:3e:97:99:f7:1f:fd:29:4f:48:cf:ca:95:7a:2a:
                    f7:bc:dd:e4:e0:a8:c2:21:ae:f7:d5:53:a0:bf:b4:
                    95:3a:7d:f4:e6:12:c0:40:87:97:07:e7:a4:83:80:
                    d4:92:30:5b:ac:17:00:37:92:90:5e:ff:42:14:18:
                    60:b6:0c:94:56:16:70:f1:ad:c4:1d:52:6b:e9:49:
                    2f:ad:e2:8c:7c:6c:ad:94:c8:c5:2b:7e:c2:2f:9f:
                    cc:81:0c:04:88:6b:c3:6a:46:22:46:6e:08:3b:11:
                    9f:a5:d9:e1:63:01:6e:23:ad:98:ae:1a:b4:2a:91:
                    60:f7:42:77:bf:64:8f:8b:21:29:59:f2:2d:ec:53:
                    92:f7:4a:ad:d4:03:b8:bb:f2:be:6e:7d:21:d0:05:
                    40:62:cc:2d:37:30:6a:85:32:cb:45:76:85:59:1b:
                    d7:e0:f4:52:3d:52:95:a3:a3:cf:c0:cd:6b:79:f3:
                    e5:da:2b:11:fe:23:ba:33:de:48:8b:f4:68:2b:23:
                    b9:42:4a:90:84:72:81:96:e6:d4:a0:39:93:fd:59:
                    8e:41:ff:06:31:de:1e:79:47:cf:58:a4:9c:11:6d:
                    df:f1:4f:b1:d2:cd:bc:df:e3:c4:7b:0a:a4:f9:f8:
                    bd:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:C1:44:19:D9:C5:27:F0:57:F1:A6:25:B9:33:A3:16:6F:FA:DD:34
            X509v3 Authority Key Identifier:
                keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3231312e302f32342d3234203d3e2039333034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.83.211.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:95:cb:8f:06:63:10:f8:2f:91:7a:f8:55:b7:c8:dd:12:35:
         d4:0c:a7:1c:23:e7:6c:a2:0e:2b:81:2e:a3:64:bb:92:ec:77:
         89:72:f2:5b:0c:7c:54:e2:44:d7:86:4e:d9:3b:75:ba:2a:bc:
         cb:1d:8f:eb:a7:3d:96:64:3f:fc:5e:2f:f0:73:12:ec:e6:19:
         8b:cb:9b:2f:b6:95:1b:e8:56:f1:1a:07:dc:2a:75:3e:b5:54:
         20:01:f8:69:28:28:c7:7a:5d:44:87:9f:4a:38:b1:dd:2a:6d:
         79:e5:05:9f:7a:60:2d:2c:a1:3d:a5:f4:59:1a:15:cf:c6:fc:
         60:4e:12:22:da:dd:c5:67:2c:78:27:ce:2e:11:19:93:67:13:
         ea:01:78:19:f2:23:89:37:19:6a:bd:c2:f1:c9:49:9f:98:b5:
         b0:2f:7f:fc:74:1b:e1:88:56:ff:60:36:45:9d:83:d2:97:d6:
         33:9b:24:de:de:d2:9d:51:7f:7d:02:9f:f9:27:1e:c6:4f:03:
         3e:c6:ab:70:4a:3b:15:2b:8b:87:7a:5a:71:30:a4:3f:05:e2:
         82:e5:12:85:e1:6b:69:64:00:21:91:74:73:cb:f4:20:e6:23:
         10:74:1f:a7:e5:14:28:15:74:80:f5:64:0c:b1:a4:7a:12:ef:
         44:9f:31:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----