Route Origin Authorization

$ rpki-client -vvvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3231372e302f32342d3234203d3e20323035343839.roa
File:                     352e38332e3231372e302f32342d3234203d3e20323035343839.roa (raw, json)
Hash identifier:          U4Q5SS+1RMhGcbXgC+P0f4juseC9bBgrC+KqVVjp5oo=
Subject key identifier:   34:C7:DF:B6:1E:B1:C0:8C:6D:B1:BD:56:A1:5A:15:21:A6:E9:A9:E5
Certificate issuer:       /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial:       71749EFEB600A7836B50B66227507C447F57C1F5
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3231372e302f32342d3234203d3e20323035343839.roa
Signing time:             Thu 12 Nov 2026 18:49:09 +0000
ROA not before:           Thu 12 Nov 2026 18:44:09 +0000
ROA not after:            Thu 11 Nov 2027 18:49:09 +0000
asID:                     205489
IP address blocks:        5.83.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
                          rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 05:11:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:74:9e:fe:b6:00:a7:83:6b:50:b6:62:27:50:7c:44:7f:57:c1:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
        Validity
            Not Before: Nov 12 18:44:09 2026 GMT
            Not After : Nov 11 18:49:09 2027 GMT
        Subject: CN=34C7DFB61EB1C08C6DB1BD56A15A1521A6E9A9E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:75:26:bc:58:0c:d2:e6:97:8e:ad:71:bc:d4:
                    99:d0:30:b3:b8:fe:1c:7e:61:fd:23:16:c2:3c:79:
                    0c:17:d0:a1:6d:dc:91:f2:c0:c0:a7:db:4d:12:45:
                    f1:d9:e2:91:64:33:23:d7:4d:5c:68:41:2e:d4:bd:
                    36:dc:86:11:d4:07:9f:af:df:26:29:9b:94:96:74:
                    0d:0d:b9:21:1c:68:05:56:ee:28:d2:1a:ed:72:16:
                    67:a7:87:5f:cd:04:8b:84:a7:3a:32:68:26:bb:98:
                    f7:a1:53:8d:22:84:bd:e6:d7:59:4e:48:aa:0e:7f:
                    9a:78:cb:6d:5a:2c:07:84:42:d9:87:4e:ac:03:09:
                    f0:11:a7:a3:94:12:33:2a:69:1a:d7:09:46:56:a1:
                    c0:d9:ad:46:34:2d:eb:ff:bd:4a:4b:16:d0:00:b4:
                    44:06:9d:c1:85:a5:55:f7:60:15:c0:01:00:be:dd:
                    d0:fc:f1:d1:4c:e2:e4:e0:52:af:bb:ad:9c:80:8e:
                    d3:5a:77:76:82:ee:a5:6e:ea:ac:68:67:fe:09:57:
                    ba:f5:75:ab:70:c4:f3:eb:e0:9f:c9:13:9a:22:24:
                    bf:3d:91:59:5e:db:16:35:be:d2:e7:27:79:58:0c:
                    44:ab:b9:2b:f8:ad:4c:e1:dc:e9:64:08:ec:54:47:
                    ab:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:C7:DF:B6:1E:B1:C0:8C:6D:B1:BD:56:A1:5A:15:21:A6:E9:A9:E5
            X509v3 Authority Key Identifier:
                keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3231372e302f32342d3234203d3e20323035343839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.83.217.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:80:18:ec:c9:e9:54:89:60:4d:f5:bb:78:9e:23:65:ed:66:
         e0:bd:29:71:3f:95:08:54:ad:cd:e1:b9:75:f4:be:49:05:2b:
         93:60:5d:2c:ba:74:43:8c:ac:c3:e7:35:c6:07:0e:27:89:80:
         ba:11:ca:c9:39:a3:ec:b3:fa:cf:d3:2b:bb:35:10:41:48:0f:
         54:23:de:a3:d5:d6:28:0f:93:3a:fe:6a:25:8c:02:1b:f2:85:
         0f:d2:2e:30:46:01:67:4b:f6:7e:59:2a:cc:e6:f3:31:8f:82:
         27:fc:43:b1:d9:2c:2f:34:63:18:13:54:94:69:40:af:70:ba:
         64:de:cb:55:f6:78:8c:03:7b:5f:19:39:79:6d:e0:44:37:74:
         a1:88:30:2a:5a:6f:c8:41:ef:d2:18:28:35:7e:42:bd:36:ea:
         24:fa:68:e4:3f:ab:11:da:6c:4f:4e:2f:4f:bd:76:a6:ef:eb:
         f5:6c:65:b8:29:8c:49:3c:5d:ab:d9:b4:33:f4:f7:af:10:d1:
         d1:e3:9f:1d:1d:f5:13:f3:01:8d:a5:1e:3b:cf:35:6c:26:c8:
         59:9d:c8:3c:9a:fe:84:61:3d:17:ce:fa:40:d5:b0:44:03:31:
         8c:47:57:81:29:74:91:95:61:b6:68:22:01:0d:fc:b8:aa:0c:
         2c:9e:5a:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----