Route Origin Authorization

$ rpki-client -vvvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3231372e302f32342d3234203d3e2039333034.roa
File:                     352e38332e3231372e302f32342d3234203d3e2039333034.roa (raw, json)
Hash identifier:          Gninf7HrIuiJpl8bHoUyqtx3DNSzYXRV4/91gun5XR4=
Subject key identifier:   E8:C0:F5:0B:EA:DF:9B:02:BD:F3:1E:CF:69:9F:1A:E8:D6:C0:A4:D9
Certificate issuer:       /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial:       758186C652257F6857BEA799ACFAA5FB61766554
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3231372e302f32342d3234203d3e2039333034.roa
Signing time:             Tue 08 Sep 2026 06:25:21 +0000
ROA not before:           Tue 08 Sep 2026 06:20:21 +0000
ROA not after:            Tue 07 Sep 2027 06:25:21 +0000
asID:                     9304
IP address blocks:        5.83.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
                          rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Sep 2026 20:45:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:81:86:c6:52:25:7f:68:57:be:a7:99:ac:fa:a5:fb:61:76:65:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
        Validity
            Not Before: Sep  8 06:20:21 2026 GMT
            Not After : Sep  7 06:25:21 2027 GMT
        Subject: CN=E8C0F50BEADF9B02BDF31ECF699F1AE8D6C0A4D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:c0:44:da:47:dd:0a:e8:2c:6b:47:89:13:7a:
                    3c:00:ab:17:e9:d1:b7:fb:dc:75:3d:82:9f:4a:d9:
                    74:90:ec:0f:c1:74:3d:df:8e:97:94:c0:51:6c:ef:
                    fb:2b:45:cf:dd:01:65:18:48:e8:fd:f9:fd:0e:97:
                    c2:9e:44:2d:b8:95:64:4c:8c:60:07:e4:6b:c7:3e:
                    f9:36:53:6c:23:4b:2d:11:df:0c:9e:dc:25:d5:b5:
                    c7:1a:63:99:75:e1:4b:9f:72:82:bb:3c:17:b9:41:
                    d1:a4:ea:92:79:b7:b8:ed:f8:67:e6:0f:2a:af:c3:
                    9d:e7:03:d3:39:59:98:3d:63:e9:c9:97:4e:19:e4:
                    bd:81:6e:72:a6:2d:30:47:2c:ae:a2:b7:c5:0f:a9:
                    e6:66:f6:74:b6:3a:7d:d6:46:b2:7f:f8:f1:cd:39:
                    6c:70:0d:52:99:90:69:1f:f4:24:cd:ef:8d:eb:4e:
                    4b:41:a1:4f:65:42:e1:ce:0d:a3:9b:47:2c:39:ee:
                    bf:0e:19:25:12:1c:78:72:2f:9b:7b:03:48:03:11:
                    83:d4:ce:ed:00:77:e1:58:63:2a:ab:75:46:ae:7c:
                    82:a7:18:c9:a2:bd:02:fd:be:2a:ff:72:f9:1c:0f:
                    ad:85:6e:aa:99:57:2a:38:8d:ef:7f:98:7d:14:f6:
                    41:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:C0:F5:0B:EA:DF:9B:02:BD:F3:1E:CF:69:9F:1A:E8:D6:C0:A4:D9
            X509v3 Authority Key Identifier:
                keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3231372e302f32342d3234203d3e2039333034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.83.217.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:42:16:c2:06:54:24:33:0e:7b:5e:f0:ea:15:58:b9:76:00:
         6d:a2:24:db:4a:85:47:52:7b:e8:cd:d7:a7:45:13:85:25:52:
         7e:6c:0f:36:55:33:1a:84:2b:a2:3f:c9:1b:65:e1:00:ba:5c:
         61:b5:22:50:36:76:81:75:35:57:33:ba:1d:6a:9b:7e:4d:43:
         e9:3a:3f:12:f6:62:9f:46:0e:fd:63:33:44:61:f0:e7:97:f9:
         d6:0e:85:6a:9c:57:72:09:30:18:49:9a:7c:10:c6:40:7a:d8:
         93:41:1d:14:55:78:0b:cb:f1:7d:fb:bf:0b:f9:57:34:f7:37:
         d9:6d:31:e8:70:24:bf:6b:e6:17:f5:7e:54:23:30:3b:36:ac:
         19:f6:78:8c:03:91:08:bb:f4:2c:27:b9:cc:26:ba:62:3d:d9:
         ba:dd:d9:20:98:e8:b9:4c:b5:4c:a2:2b:18:9d:d5:c2:42:92:
         b5:ea:38:22:23:56:e0:cc:13:5b:94:ac:27:b9:7f:13:fe:a6:
         a7:59:66:8b:d1:20:a4:98:1b:42:cd:33:5a:fc:fe:6f:09:aa:
         a1:fd:a3:74:2c:55:ed:cb:dd:17:c1:24:bb:82:f6:31:be:51:
         88:ca:e6:de:4e:d4:fe:70:24:68:39:33:99:fb:ea:cb:6d:d1:
         d2:09:29:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----