Route Origin Authorization

$ rpki-client -vvvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3231362e302f32342d3234203d3e2039333034.roa
File:                     352e38332e3231362e302f32342d3234203d3e2039333034.roa (raw, json)
Hash identifier:          I7+uvHb+Ln/FEblEK/WOHLiR3uzDwlWUHYlXkrkrsWA=
Subject key identifier:   DB:7C:CC:B0:02:1F:5C:AC:94:3B:38:23:0C:DA:FF:87:FA:D4:FC:81
Certificate issuer:       /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial:       31BCF4AF9DC9EC14C54A9D1923CE29AD6B69219B
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3231362e302f32342d3234203d3e2039333034.roa
Signing time:             Tue 08 Sep 2026 06:25:22 +0000
ROA not before:           Tue 08 Sep 2026 06:20:22 +0000
ROA not after:            Tue 07 Sep 2027 06:25:22 +0000
asID:                     9304
IP address blocks:        5.83.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
                          rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Sep 2026 20:45:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:bc:f4:af:9d:c9:ec:14:c5:4a:9d:19:23:ce:29:ad:6b:69:21:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
        Validity
            Not Before: Sep  8 06:20:22 2026 GMT
            Not After : Sep  7 06:25:22 2027 GMT
        Subject: CN=DB7CCCB0021F5CAC943B38230CDAFF87FAD4FC81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:c5:03:45:9c:52:15:23:88:6e:1b:7d:92:b2:
                    a5:d7:85:fe:bc:d7:db:9b:a3:8f:06:a1:2c:74:a5:
                    65:ed:db:f9:e8:71:a1:5d:6c:a2:19:eb:5a:19:53:
                    19:27:4c:0a:97:ca:ed:82:a0:f2:d4:2b:57:ef:5e:
                    2e:d6:bd:fd:a0:e6:00:88:ef:7e:13:44:da:fd:fb:
                    e8:ab:7c:31:ee:97:dc:12:5c:fe:14:c4:3d:6d:fe:
                    0f:09:34:c9:ee:27:94:4a:15:e8:96:f0:cb:f4:86:
                    4e:3b:77:fa:81:aa:f4:fd:ea:ed:c5:2f:8c:96:31:
                    f5:90:1a:f9:fc:35:2d:f1:9c:b4:5d:32:25:8c:d7:
                    a6:ea:39:2c:b7:07:33:8a:9f:c8:c3:77:42:ed:02:
                    d3:61:03:55:a5:b5:45:94:eb:4f:56:6b:88:73:b0:
                    0d:4b:18:19:29:a2:7f:20:93:2e:65:e8:15:a0:da:
                    91:16:89:79:04:ac:a5:4e:35:1f:d3:8f:4f:ce:7f:
                    65:60:65:ba:c2:a3:bf:40:9e:bf:1e:5b:1e:db:aa:
                    2c:20:3d:67:57:14:cb:86:68:aa:2d:66:57:25:c3:
                    7d:f7:35:0f:ed:79:79:50:06:86:f9:e1:6d:ab:52:
                    de:ed:7f:96:92:f0:ce:7d:ba:f2:37:8f:80:ed:bf:
                    4e:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:7C:CC:B0:02:1F:5C:AC:94:3B:38:23:0C:DA:FF:87:FA:D4:FC:81
            X509v3 Authority Key Identifier:
                keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3231362e302f32342d3234203d3e2039333034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.83.216.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:5c:4f:42:da:f3:ce:23:a2:23:d7:0e:0b:5c:28:d6:b0:33:
         9b:1a:aa:3f:c0:22:e7:05:55:fd:cb:29:03:a1:72:b7:40:65:
         b3:02:97:4f:40:b9:de:34:3f:91:17:c9:86:2b:7d:cf:21:ba:
         6a:f4:a0:63:9c:a0:c8:dc:5f:52:a2:3a:14:29:83:24:ef:7c:
         e3:ec:83:06:2e:f6:76:5d:04:62:b1:90:0b:4a:85:dc:00:eb:
         3d:e0:8a:4c:05:e4:05:e1:0f:dc:81:d6:f7:ab:fe:48:be:9c:
         84:c5:f7:6f:18:69:5a:cc:04:65:23:81:6d:05:80:39:d3:41:
         49:ee:2d:b5:ca:67:1a:31:e0:fc:00:3a:cb:68:55:12:eb:64:
         08:0e:2f:68:8b:2a:92:2f:4e:19:35:ad:bf:e4:c1:35:e2:9d:
         d0:55:57:92:a2:b0:3c:f9:13:dc:9b:30:55:23:cf:9f:5d:42:
         18:ed:01:84:ae:cd:95:b1:6b:f1:ae:95:35:17:04:b9:94:2f:
         ee:1a:ea:31:eb:36:b8:8d:c6:7c:b7:b0:1e:12:1f:2c:a1:a5:
         40:9c:55:d6:6e:bf:c3:58:2a:0b:e2:a3:ad:ff:a8:68:4a:84:
         31:c0:23:47:3a:cc:c3:06:10:19:cf:ac:56:b3:c3:78:7d:2a:
         2e:47:53:1a
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUMbz0r53J7BTFSp0ZI84prWtpIZswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkEyRkI0REIwQUE0RDAwNjk1ODMxNjg3MkU0NjdCNTU0
RTBGRDBCRTAeFw0yNjA5MDgwNjIwMjJaFw0yNzA5MDcwNjI1MjJaMDMxMTAvBgNV
BAMTKERCN0NDQ0IwMDIxRjVDQUM5NDNCMzgyMzBDREFGRjg3RkFENEZDODEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqxQNFnFIVI4huG32SsqXXhf68
19ubo48GoSx0pWXt2/nocaFdbKIZ61oZUxknTAqXyu2CoPLUK1fvXi7Wvf2g5gCI
734TRNr9++irfDHul9wSXP4UxD1t/g8JNMnuJ5RKFeiW8Mv0hk47d/qBqvT96u3F
L4yWMfWQGvn8NS3xnLRdMiWM16bqOSy3BzOKn8jDd0LtAtNhA1WltUWU609Wa4hz
sA1LGBkpon8gky5l6BWg2pEWiXkErKVONR/Tj0/Of2VgZbrCo79Anr8eWx7bqiwg
PWdXFMuGaKotZlclw333NQ/teXlQBob54W2rUt7tf5aS8M59uvI3j4Dtv04rAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQU23zMsAIfXKyUOzgjDNr/h/rU/IEwHwYDVR0j
BBgwFoAUKi+02wqk0AaVgxaHLkZ7VU4P0L4wDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
YTZmMjE0N2EtZGU4YS00NDQwLWJjYTItNmQ4YjdjODc2ZmRhLTAvMC8yQTJGQjRE
QjBBQTREMDA2OTU4MzE2ODcyRTQ2N0I1NTRFMEZEMEJFLmNybDCBngYIKwYBBQUH
AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5LzlkZjMzYTU3LTdlNGYtNDg0NC04NGUyLWI3MTUz
YjU1MTFiNC8wLzJBMkZCNERCMEFBNEQwMDY5NTgzMTY4NzJFNDY3QjU1NEUwRkQw
QkUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCBigYIKwYBBQUHMAuGfnJzeW5jOi8v
ci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvL2E2ZjIxNDdhLWRlOGEtNDQ0MC1iY2Ey
LTZkOGI3Yzg3NmZkYS0wLzAvMzUyZTM4MzMyZTMyMzEzNjJlMzAyZjMyMzQyZDMy
MzQyMDNkM2UyMDM5MzMzMDM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABVPYMA0GCSqGSIb3DQEBCwUA
A4IBAQBYXE9C2vPOI6Ij1w4LXCjWsDObGqo/wCLnBVX9yykDoXK3QGWzApdPQLne
ND+RF8mGK33PIbpq9KBjnKDI3F9SojoUKYMk73zj7IMGLvZ2XQRisZALSoXcAOs9
4IpMBeQF4Q/cgdb3q/5IvpyExfdvGGlazARlI4FtBYA500FJ7i21ymcaMeD8ADrL
aFUS62QIDi9oiyqSL04ZNa2/5ME14p3QVVeSorA8+RPcmzBVI8+fXUIY7QGErs2V
sWvxrpU1FwS5lC/uGuox6za4jcZ8t7AeEh8soaVAnFXWbr/DWCoL4qOt/6hoSoQx
wCNHOszDBhAZz6xWs8N4fSouR1Ma
-----END CERTIFICATE-----