Route Origin Authorization

$ rpki-client -vvvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3232312e302f32342d3234203d3e2039333034.roa
File:                     352e38332e3232312e302f32342d3234203d3e2039333034.roa (raw, json)
Hash identifier:          bSl1ZfDNtY1xOkKvlKWDLOy/ARsrKAsKBrvJC+9+8lI=
Subject key identifier:   D8:CB:A6:C3:54:AE:6E:A7:2B:9C:BC:CF:50:1E:59:44:18:90:0E:8B
Certificate issuer:       /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial:       6421BEE379812D49DC19E4F64F3611092A62624C
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3232312e302f32342d3234203d3e2039333034.roa
Signing time:             Sun 13 Sep 2026 10:19:32 +0000
ROA not before:           Sun 13 Sep 2026 10:14:32 +0000
ROA not after:            Sun 12 Sep 2027 10:19:32 +0000
asID:                     9304
IP address blocks:        5.83.221.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
                          rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 10:15:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:21:be:e3:79:81:2d:49:dc:19:e4:f6:4f:36:11:09:2a:62:62:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
        Validity
            Not Before: Sep 13 10:14:32 2026 GMT
            Not After : Sep 12 10:19:32 2027 GMT
        Subject: CN=D8CBA6C354AE6EA72B9CBCCF501E594418900E8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:fb:41:51:9f:34:4e:ca:d4:a5:f7:f3:fd:0b:
                    4b:7d:90:01:5b:47:f9:55:2f:57:09:8f:29:5e:d5:
                    9a:6b:88:27:d7:5b:40:b6:79:9e:39:ad:c6:de:4d:
                    36:dc:31:16:a6:b7:dd:b7:b1:de:36:32:81:5d:8b:
                    fd:a1:ca:67:a5:b2:48:b9:f7:b8:b6:67:f5:b3:8c:
                    f5:47:a8:a4:ee:3a:8d:0d:27:80:e9:c0:f1:29:3e:
                    e5:ac:0f:ea:86:21:27:59:50:a2:0b:8e:2a:22:6d:
                    c5:d0:6e:c9:dd:a4:24:07:12:c8:af:8d:3f:71:41:
                    27:80:05:78:a8:2e:eb:dc:0c:14:07:9c:8f:d1:87:
                    e5:61:65:1c:ee:48:a2:dc:3b:59:ce:8d:96:bd:fb:
                    64:84:45:2e:99:8a:d3:fd:04:ba:1d:62:51:dd:6c:
                    08:da:d3:3d:be:b7:02:5f:ca:d0:e0:b1:50:0c:9d:
                    e2:94:98:05:27:65:f8:5d:5f:fc:89:c4:54:5d:dd:
                    d1:f2:72:a1:81:8f:e9:e5:2b:52:44:b1:aa:fb:b0:
                    34:2f:d7:9a:48:d8:9c:65:82:37:3d:0a:2d:40:90:
                    43:4a:f5:f2:d2:e7:54:c4:bc:73:14:1c:f3:3c:34:
                    ff:b8:a6:12:9b:4f:71:05:fd:ff:b3:89:99:a3:cd:
                    21:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:CB:A6:C3:54:AE:6E:A7:2B:9C:BC:CF:50:1E:59:44:18:90:0E:8B
            X509v3 Authority Key Identifier:
                keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3232312e302f32342d3234203d3e2039333034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.83.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:41:ff:f2:ab:1d:f6:d7:36:c1:d3:fa:c7:b9:e6:fe:ba:eb:
         bf:50:c2:1f:03:8f:1f:b3:eb:e5:04:76:eb:fe:eb:49:29:83:
         bb:bf:61:25:b6:89:77:a8:9b:d9:a3:df:c4:42:94:0e:3a:d2:
         90:31:dc:3f:28:fe:e1:b6:fe:24:73:c2:17:b2:8a:54:5f:3b:
         02:8f:95:aa:5d:49:ad:5c:cb:00:41:1f:80:44:db:bd:ee:85:
         1f:30:75:a5:81:8d:4d:38:0b:2b:b9:70:05:ad:10:e2:51:0c:
         d1:69:48:83:55:13:4b:a9:7d:64:8a:7d:cb:b2:01:52:2c:40:
         63:b9:41:ee:70:de:80:f3:a1:01:4c:1e:0d:84:94:f0:6b:d3:
         f0:aa:fa:c3:05:38:a4:3c:8a:4c:50:4d:45:8e:00:4c:40:b8:
         8f:ec:65:2c:e0:4b:f6:42:fe:f3:f1:fb:2e:10:2b:0b:36:4d:
         59:4d:1d:98:0a:19:9f:5f:46:52:4a:14:40:63:44:33:f6:ea:
         be:c9:f2:61:89:11:a8:a0:ae:b0:aa:e0:4f:03:32:f2:a0:60:
         1a:6e:65:27:e4:12:0e:62:d9:11:bc:7c:30:76:d1:2b:1b:2f:
         76:f8:f4:30:cf:a1:4d:63:36:73:2e:fe:59:84:8e:7d:90:6b:
         32:c1:54:9b
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUZCG+43mBLUncGeT2TzYRCSpiYkwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkEyRkI0REIwQUE0RDAwNjk1ODMxNjg3MkU0NjdCNTU0
RTBGRDBCRTAeFw0yNjA5MTMxMDE0MzJaFw0yNzA5MTIxMDE5MzJaMDMxMTAvBgNV
BAMTKEQ4Q0JBNkMzNTRBRTZFQTcyQjlDQkNDRjUwMUU1OTQ0MTg5MDBFOEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4+0FRnzROytSl9/P9C0t9kAFb
R/lVL1cJjyle1ZpriCfXW0C2eZ45rcbeTTbcMRamt923sd42MoFdi/2hymelski5
97i2Z/WzjPVHqKTuOo0NJ4DpwPEpPuWsD+qGISdZUKILjioibcXQbsndpCQHEsiv
jT9xQSeABXioLuvcDBQHnI/Rh+VhZRzuSKLcO1nOjZa9+2SERS6ZitP9BLodYlHd
bAja0z2+twJfytDgsVAMneKUmAUnZfhdX/yJxFRd3dHycqGBj+nlK1JEsar7sDQv
15pI2Jxlgjc9Ci1AkENK9fLS51TEvHMUHPM8NP+4phKbT3EF/f+ziZmjzSH5AgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQU2Mumw1SubqcrnLzPUB5ZRBiQDoswHwYDVR0j
BBgwFoAUKi+02wqk0AaVgxaHLkZ7VU4P0L4wDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
YTZmMjE0N2EtZGU4YS00NDQwLWJjYTItNmQ4YjdjODc2ZmRhLTAvMC8yQTJGQjRE
QjBBQTREMDA2OTU4MzE2ODcyRTQ2N0I1NTRFMEZEMEJFLmNybDCBngYIKwYBBQUH
AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5LzlkZjMzYTU3LTdlNGYtNDg0NC04NGUyLWI3MTUz
YjU1MTFiNC8wLzJBMkZCNERCMEFBNEQwMDY5NTgzMTY4NzJFNDY3QjU1NEUwRkQw
QkUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCBigYIKwYBBQUHMAuGfnJzeW5jOi8v
ci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvL2E2ZjIxNDdhLWRlOGEtNDQ0MC1iY2Ey
LTZkOGI3Yzg3NmZkYS0wLzAvMzUyZTM4MzMyZTMyMzIzMTJlMzAyZjMyMzQyZDMy
MzQyMDNkM2UyMDM5MzMzMDM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABVPdMA0GCSqGSIb3DQEBCwUA
A4IBAQAwQf/yqx321zbB0/rHueb+uuu/UMIfA48fs+vlBHbr/utJKYO7v2Eltol3
qJvZo9/EQpQOOtKQMdw/KP7htv4kc8IXsopUXzsCj5WqXUmtXMsAQR+ARNu97oUf
MHWlgY1NOAsruXAFrRDiUQzRaUiDVRNLqX1kin3LsgFSLEBjuUHucN6A86EBTB4N
hJTwa9PwqvrDBTikPIpMUE1FjgBMQLiP7GUs4Ev2Qv7z8fsuECsLNk1ZTR2YChmf
X0ZSShRAY0Qz9uq+yfJhiRGooK6wquBPAzLyoGAabmUn5BIOYtkRvHwwdtErGy92
+PQwz6FNYzZzLv5ZhI59kGsywVSb
-----END CERTIFICATE-----