Route Origin Authorization

$ rpki-client -vvvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3231392e302f32342d3234203d3e203430363736.roa
File:                     352e38332e3231392e302f32342d3234203d3e203430363736.roa (raw, json)
Hash identifier:          +xvFGAgrK1rkOLwT0fL9IacUj6qsQScmLpuYPncgt7o=
Subject key identifier:   F2:6D:00:83:D6:9A:73:B4:57:8C:A7:BE:2F:B2:0D:F8:7B:0E:67:54
Certificate issuer:       /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial:       345B369EC8DB5B97CFE22CAC718FF718430D19
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3231392e302f32342d3234203d3e203430363736.roa
Signing time:             Thu 29 Oct 2026 13:41:08 +0000
ROA not before:           Thu 29 Oct 2026 13:36:08 +0000
ROA not after:            Thu 28 Oct 2027 13:41:08 +0000
asID:                     40676
IP address blocks:        5.83.219.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
                          rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 06 Nov 2026 06:21:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:5b:36:9e:c8:db:5b:97:cf:e2:2c:ac:71:8f:f7:18:43:0d:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
        Validity
            Not Before: Oct 29 13:36:08 2026 GMT
            Not After : Oct 28 13:41:08 2027 GMT
        Subject: CN=F26D0083D69A73B4578CA7BE2FB20DF87B0E6754
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ee:fe:b4:e2:8d:b3:5e:c2:05:ff:00:55:11:
                    13:7d:0a:e7:1b:e3:f9:fa:47:a5:1b:e8:fb:aa:5d:
                    90:d6:dd:0d:57:1b:f5:6d:1b:63:83:ee:5d:8f:11:
                    ae:39:2b:b9:1b:46:20:e7:55:e4:22:70:2b:2e:b6:
                    33:86:2f:ab:c0:9d:45:01:da:04:88:db:89:62:97:
                    ac:92:18:d1:b9:3d:03:17:38:f2:db:2a:ce:bb:bf:
                    da:23:52:6c:9b:39:59:f0:df:e6:1d:d5:af:8c:90:
                    6c:7c:88:42:e2:55:39:c3:33:96:c4:df:3b:92:c2:
                    46:c9:f5:dc:16:04:bc:db:ce:13:35:3a:99:b3:0a:
                    b2:29:9e:48:3d:d2:95:93:67:00:83:9e:8e:19:a7:
                    fb:5a:f7:43:b4:ad:5b:35:4e:2b:da:62:cd:76:90:
                    62:6d:7e:39:2b:be:c4:6c:72:8c:24:fa:86:48:66:
                    96:58:66:19:04:56:2e:7e:84:61:0b:7e:ee:20:67:
                    30:e9:26:0f:ce:b2:c7:c7:9a:2e:eb:6e:16:b0:ac:
                    eb:40:f1:60:ba:60:b9:4f:d1:ae:3c:b6:d1:27:19:
                    7e:c3:fc:08:ed:74:33:aa:8c:81:af:66:27:37:40:
                    eb:7d:d1:df:98:6b:d0:9f:a6:cf:e7:de:6b:9c:1f:
                    36:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:6D:00:83:D6:9A:73:B4:57:8C:A7:BE:2F:B2:0D:F8:7B:0E:67:54
            X509v3 Authority Key Identifier:
                keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3231392e302f32342d3234203d3e203430363736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.83.219.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:13:6d:cb:87:39:11:6a:b6:29:00:69:9d:c3:24:09:8b:cf:
         3b:e2:df:35:16:bd:b6:9f:78:e7:b4:66:b9:23:de:1e:0c:21:
         05:a5:88:73:cf:09:2b:24:9f:9a:f1:8f:b3:88:af:f4:48:c9:
         69:76:d6:ba:13:c1:f1:9f:48:8b:ba:c7:8d:17:65:ba:39:ce:
         55:8f:c2:a7:83:b5:27:ab:40:bd:23:96:5d:ff:b4:47:9b:74:
         7b:16:3a:c8:73:23:50:a1:12:55:77:fd:53:38:d6:e6:5e:20:
         1e:52:9c:ed:5f:71:12:e6:21:bf:77:25:40:8e:1c:dc:ab:8f:
         d4:09:cd:8c:82:d3:e2:ed:12:3d:2a:99:62:d1:88:b1:a6:d9:
         50:f5:4e:ce:8b:45:d2:20:c2:f8:26:13:b8:06:5f:1e:b7:c9:
         3a:cc:9a:6e:09:d7:df:fe:0d:d0:94:e5:f3:a6:35:08:49:cb:
         4b:d8:95:97:f6:f9:e8:7c:41:97:d5:55:6b:4d:9b:9f:04:9a:
         a8:23:ee:1c:09:9f:96:d5:a8:4b:e1:84:33:d6:d4:92:d9:51:
         a0:e4:f0:7f:d5:2a:d3:9b:49:0b:10:ce:6b:30:ab:89:b6:c5:
         05:b2:73:00:81:11:6e:d9:bb:d0:bb:8e:21:be:4e:ce:6d:ae:
         c8:c8:0c:45
-----BEGIN CERTIFICATE-----
MIIFUzCCBDugAwIBAgITNFs2nsjbW5fP4iyscY/3GEMNGTANBgkqhkiG9w0BAQsF
ADAzMTEwLwYDVQQDEygyQTJGQjREQjBBQTREMDA2OTU4MzE2ODcyRTQ2N0I1NTRF
MEZEMEJFMB4XDTI2MTAyOTEzMzYwOFoXDTI3MTAyODEzNDEwOFowMzExMC8GA1UE
AxMoRjI2RDAwODNENjlBNzNCNDU3OENBN0JFMkZCMjBERjg3QjBFNjc1NDCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKzu/rTijbNewgX/AFURE30K5xvj
+fpHpRvo+6pdkNbdDVcb9W0bY4PuXY8RrjkruRtGIOdV5CJwKy62M4Yvq8CdRQHa
BIjbiWKXrJIY0bk9Axc48tsqzru/2iNSbJs5WfDf5h3Vr4yQbHyIQuJVOcMzlsTf
O5LCRsn13BYEvNvOEzU6mbMKsimeSD3SlZNnAIOejhmn+1r3Q7StWzVOK9pizXaQ
Ym1+OSu+xGxyjCT6hkhmllhmGQRWLn6EYQt+7iBnMOkmD86yx8eaLutuFrCs60Dx
YLpguU/Rrjy20ScZfsP8CO10M6qMga9mJzdA633R35hr0J+mz+fea5wfNjECAwEA
AaOCAl4wggJaMB0GA1UdDgQWBBTybQCD1ppztFeMp74vsg34ew5nVDAfBgNVHSME
GDAWgBQqL7TbCqTQBpWDFocuRntVTg/QvjAOBgNVHQ8BAf8EBAMCB4AwgYgGA1Ud
HwSBgDB+MHygeqB4hnZyc3luYzovL3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9h
NmYyMTQ3YS1kZThhLTQ0NDAtYmNhMi02ZDhiN2M4NzZmZGEtMC8wLzJBMkZCNERC
MEFBNEQwMDY5NTgzMTY4NzJFNDY3QjU1NEUwRkQwQkUuY3JsMIGeBggrBgEFBQcB
AQSBkTCBjjCBiwYIKwYBBQUHMAKGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJp
cGUubmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNi
NTUxMWI0LzAvMkEyRkI0REIwQUE0RDAwNjk1ODMxNjg3MkU0NjdCNTU0RTBGRDBC
RS5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8v
ci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvL2E2ZjIxNDdhLWRlOGEtNDQ0MC1iY2Ey
LTZkOGI3Yzg3NmZkYS0wLzAvMzUyZTM4MzMyZTMyMzEzOTJlMzAyZjMyMzQyZDMy
MzQyMDNkM2UyMDM0MzAzNjM3MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH
DgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAFU9swDQYJKoZIhvcNAQEL
BQADggEBADgTbcuHORFqtikAaZ3DJAmLzzvi3zUWvbafeOe0Zrkj3h4MIQWliHPP
CSskn5rxj7OIr/RIyWl21roTwfGfSIu6x40XZbo5zlWPwqeDtSerQL0jll3/tEeb
dHsWOshzI1ChElV3/VM41uZeIB5SnO1fcRLmIb93JUCOHNyrj9QJzYyC0+LtEj0q
mWLRiLGm2VD1Ts6LRdIgwvgmE7gGXx63yTrMmm4J19/+DdCU5fOmNQhJy0vYlZf2
+eh8QZfVVWtNm58Emqgj7hwJn5bVqEvhhDPW1JLZUaDk8H/VKtObSQsQzmswq4m2
xQWycwCBEW7Zu9C7jiG+Ts5trsjIDEU=
-----END CERTIFICATE-----