Route Origin Authorization

$ rpki-client -vvvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3232332e302f32342d3234203d3e20323139313035.roa
File:                     352e38332e3232332e302f32342d3234203d3e20323139313035.roa (raw, json)
Hash identifier:          fczx6Y6zKEwwWwqngPeNkso5dAYP/t+j4G3jTNIgFMg=
Subject key identifier:   E1:2D:73:72:DD:B9:15:48:3E:DC:F1:1F:3A:93:C8:7D:4A:FC:C6:2D
Certificate issuer:       /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial:       2E0D4F5CA9346A6AF7333258F3531ABAA2E58A2C
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3232332e302f32342d3234203d3e20323139313035.roa
Signing time:             Sat 19 Sep 2026 16:56:50 +0000
ROA not before:           Sat 19 Sep 2026 16:51:50 +0000
ROA not after:            Sat 18 Sep 2027 16:56:50 +0000
asID:                     219105
IP address blocks:        5.83.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
                          rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Sep 2026 20:45:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:0d:4f:5c:a9:34:6a:6a:f7:33:32:58:f3:53:1a:ba:a2:e5:8a:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
        Validity
            Not Before: Sep 19 16:51:50 2026 GMT
            Not After : Sep 18 16:56:50 2027 GMT
        Subject: CN=E12D7372DDB915483EDCF11F3A93C87D4AFCC62D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:b5:bc:76:57:01:fa:94:1c:b7:7b:c7:73:6a:
                    a3:16:0d:07:88:8b:bd:cf:aa:c2:eb:e2:d4:8d:bb:
                    bb:2a:84:25:df:02:8c:5b:f6:4e:05:be:22:d4:4c:
                    ba:bb:56:bc:57:2b:75:8a:30:8f:f2:28:2b:da:f3:
                    c5:7e:38:9a:97:e3:07:eb:0a:29:a4:5d:bf:c8:93:
                    83:7b:95:c4:f5:f6:00:85:24:71:8c:28:54:c4:42:
                    7a:8d:2f:cd:e5:08:10:19:96:ac:0f:24:14:8b:87:
                    63:0a:45:4a:ab:49:45:91:9a:74:f7:98:2e:2b:be:
                    0b:21:e7:57:ed:de:ac:f8:63:32:74:5a:9f:b0:f4:
                    80:41:1d:80:92:00:13:4a:1a:3e:58:70:d3:4f:e7:
                    be:84:db:45:65:dc:6d:c2:9d:3e:d6:19:e9:8b:50:
                    c6:ee:c9:ec:b2:fb:41:99:50:87:d3:8d:21:e8:10:
                    06:15:6a:22:35:c4:7d:fb:97:b5:8c:1a:65:9a:f8:
                    d3:93:5f:8f:9d:60:41:9f:3d:51:c7:14:86:d0:46:
                    ad:26:98:b4:eb:a5:6e:90:6d:64:17:d4:d0:d4:f1:
                    b1:48:8f:33:6a:e4:32:12:b4:9f:06:c2:de:8a:2a:
                    af:90:02:79:89:ec:70:b4:01:a2:c4:04:6f:0e:0e:
                    43:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:2D:73:72:DD:B9:15:48:3E:DC:F1:1F:3A:93:C8:7D:4A:FC:C6:2D
            X509v3 Authority Key Identifier:
                keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3232332e302f32342d3234203d3e20323139313035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.83.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:65:87:85:eb:2b:19:05:5f:4b:22:9b:1b:00:8b:76:9b:67:
         a3:03:4d:a2:7d:a6:1d:8c:d4:31:27:0b:87:92:18:cc:93:02:
         70:1c:ea:aa:3a:9c:a8:d6:07:ec:5a:71:99:fc:e5:0f:98:7a:
         16:fa:6d:35:c2:3c:67:f7:51:86:ad:e2:e7:65:11:58:eb:8f:
         30:e4:f7:3c:15:67:76:be:df:0e:7b:7f:70:23:36:f2:0f:05:
         ec:c6:1f:04:d8:87:db:da:f0:2c:49:5b:3a:44:f2:25:18:3e:
         e4:49:98:a0:37:9d:0e:e5:03:84:d4:7f:de:fb:90:61:2c:b3:
         b5:fa:73:17:60:78:f8:d9:99:59:70:81:63:1c:93:5c:74:56:
         50:1f:72:af:34:5a:9b:ac:78:b0:8b:a4:f1:1f:e7:a1:94:20:
         dc:57:b4:7d:77:5e:83:c5:d1:db:e2:4e:f7:16:36:be:72:67:
         05:5b:6c:78:8f:c6:81:41:1d:1a:4f:04:11:12:b5:07:0e:2d:
         cf:9b:93:05:39:94:80:6f:06:13:d8:ff:5d:9f:c7:ff:49:f3:
         95:8e:f9:56:88:aa:bf:68:4c:45:5e:be:f4:81:f7:7c:47:08:
         6e:8c:fa:65:aa:7e:80:ea:a0:46:97:04:fd:3a:7b:67:b0:7e:
         a9:2f:ac:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----