Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3231352e302f32342d3234203d3e203432383331.roa
File:                     352e38332e3231352e302f32342d3234203d3e203432383331.roa (raw, json)
Hash identifier:          OhAK8EeznO9ZXh5c/E3YJebTvxpLJOJIeaUZiYMJfH0=
Subject key identifier:   C6:AE:A2:20:41:29:36:A2:32:F8:92:CC:69:2F:73:F7:82:82:81:7C
Certificate issuer:       /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial:       3C1892AD634116F3BDB7E338AA231CAF48406CC6
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3231352e302f32342d3234203d3e203432383331.roa
Signing time:             Thu 31 Jul 2025 13:54:13 +0000
ROA not before:           Thu 31 Jul 2025 13:49:13 +0000
ROA not after:            Thu 30 Jul 2026 13:54:13 +0000
asID:                     42831
IP address blocks:        5.83.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
                          rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 Aug 2025 02:47:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:18:92:ad:63:41:16:f3:bd:b7:e3:38:aa:23:1c:af:48:40:6c:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
        Validity
            Not Before: Jul 31 13:49:13 2025 GMT
            Not After : Jul 30 13:54:13 2026 GMT
        Subject: CN=C6AEA220412936A232F892CC692F73F78282817C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:44:1e:5d:f4:90:7d:27:49:4d:e3:8a:67:6c:
                    47:1e:18:65:2f:c5:15:40:83:df:67:2a:07:c6:1b:
                    49:8d:14:7a:de:1d:d3:7e:16:a2:ff:82:44:b3:2a:
                    f5:91:e4:3d:54:64:7c:27:20:03:8f:d4:db:02:3f:
                    d2:f8:9f:12:38:28:3b:26:ca:4c:f4:07:0c:6b:c9:
                    ce:cf:ae:7e:67:88:06:77:bd:5b:9b:40:51:0a:9f:
                    7a:02:dd:34:73:8d:32:77:55:52:7b:37:7c:b6:7d:
                    c7:70:56:5c:c9:b1:9d:78:5a:7c:ba:b1:c3:d7:66:
                    ff:90:ef:ef:f9:cf:95:1b:28:6a:8e:9b:4f:99:29:
                    85:87:90:04:1c:9d:eb:a1:c9:ab:74:75:61:53:3c:
                    cf:29:85:16:b4:4b:49:da:ed:15:1e:f9:00:bb:fd:
                    87:90:c7:65:65:0e:f3:02:0c:f2:e8:e5:ca:a6:a3:
                    37:4a:c9:e7:ec:c0:96:ed:f1:b4:85:c7:16:22:9d:
                    4b:6b:5c:f9:9d:c4:56:0b:f9:23:1d:e3:02:9f:32:
                    5e:f2:3b:43:e5:21:63:d4:bf:fc:e8:50:cb:85:92:
                    e5:e1:bf:31:e6:7a:84:d8:0a:2c:30:1f:9b:78:33:
                    ac:1d:fb:90:87:2f:a1:22:10:f4:ca:7e:1d:b3:55:
                    3a:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:AE:A2:20:41:29:36:A2:32:F8:92:CC:69:2F:73:F7:82:82:81:7C
            X509v3 Authority Key Identifier:
                keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3231352e302f32342d3234203d3e203432383331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.83.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:bc:d8:2f:1d:c3:8e:6c:2b:bc:da:2b:48:6a:6a:52:96:f5:
         2d:1e:61:b6:20:60:b4:3f:a4:e2:bf:c9:62:50:16:25:c1:a9:
         83:8c:9f:40:7b:39:49:04:f0:fb:91:6e:c7:27:b8:c7:82:17:
         b8:41:01:bf:e6:f8:e3:a5:d1:68:0e:81:ed:0d:02:ff:cb:0f:
         85:72:11:87:f5:c5:3b:7d:a7:0e:34:e0:b4:c3:4f:5b:c5:ae:
         cc:dd:cf:3c:1f:9e:6b:05:ba:51:f3:95:47:f4:16:02:df:95:
         5c:0b:1d:9d:8d:ff:4b:cd:e9:ba:16:cb:3e:78:0b:7f:86:fb:
         53:f6:6c:59:d1:aa:d9:c0:f9:34:49:41:31:78:3c:1e:49:4e:
         4f:89:05:ee:54:4c:0b:3a:5b:2c:f5:66:e3:ea:40:58:9f:8c:
         2a:90:03:c1:0e:85:9c:42:f0:9e:38:c4:62:12:ff:ef:c9:8f:
         23:5f:64:aa:f8:8d:3f:f5:66:74:11:78:3a:24:b1:55:c5:b4:
         09:32:dc:ec:fa:8c:1d:e6:96:86:b5:d9:02:0d:e7:36:54:fc:
         c5:fa:1d:79:b5:b8:c0:42:ee:dd:c5:d7:53:9d:e4:24:ec:10:
         2d:ff:f4:2c:89:8d:f0:aa:4a:2b:1c:56:65:80:7a:52:eb:18:
         d4:5a:c1:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 15:18:17 2025 by rpki-client