Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS10753.roa
File:                     AS10753.roa (raw, json)
Hash identifier:          5KIgWYnJbxV5ykWRGQdi71Bs391h59GSKgv4ye4ksMw=
Subject key identifier:   93:1B:86:8C:CF:8B:60:E5:F0:B1:44:07:68:9D:8C:97:3E:A5:8E:32
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       5C40E9C2711DEBDAA347CD24AE8EC8913188CEEF
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS10753.roa
Signing time:             Wed 22 Jul 2026 13:44:23 +0000
ROA not before:           Wed 22 Jul 2026 13:39:23 +0000
ROA not after:            Wed 21 Jul 2027 13:44:23 +0000
asID:                     10753
IP address blocks:        89.116.54.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
                          rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 10:30:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:40:e9:c2:71:1d:eb:da:a3:47:cd:24:ae:8e:c8:91:31:88:ce:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: Jul 22 13:39:23 2026 GMT
            Not After : Jul 21 13:44:23 2027 GMT
        Subject: CN=931B868CCF8B60E5F0B14407689D8C973EA58E32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:74:bd:ed:a9:a2:cf:5d:f7:f3:66:03:d8:db:
                    b6:08:7a:01:9d:53:ec:4f:6f:a9:bc:4c:0a:18:a1:
                    69:ef:98:c8:f3:34:11:44:80:15:c1:78:29:f8:ff:
                    3d:d2:e8:ce:03:77:c6:c7:16:40:c0:ad:ba:5d:fb:
                    2d:6b:7a:40:23:f6:9d:0e:13:f9:c0:4b:b3:a2:d1:
                    1d:a6:fe:bd:32:db:45:bc:50:a5:4c:a9:2c:2c:7a:
                    86:4e:92:d9:bd:02:06:0f:3b:94:c7:36:8d:aa:43:
                    af:bc:6e:b1:8d:11:eb:a2:7f:6c:5d:d6:ef:80:5e:
                    0b:d5:f9:06:e6:f8:68:00:bb:93:46:b1:43:62:d7:
                    1d:71:81:36:c9:ba:e3:74:e4:00:f1:f1:9d:7c:f1:
                    10:15:37:0a:d8:24:fd:f8:59:29:5c:0a:2d:63:e9:
                    e6:f5:0a:00:89:0d:f1:a9:d0:72:fb:d6:d2:13:56:
                    2e:57:59:a8:9d:14:98:7e:db:63:f3:9f:67:0a:47:
                    9e:1b:7b:8e:41:65:eb:ef:0f:b4:64:99:7e:b9:ae:
                    c3:cf:93:b2:80:c1:af:ae:d4:7d:7d:40:0f:59:39:
                    87:2f:a6:8d:fc:e5:86:1d:2e:24:54:7c:f5:dc:ff:
                    13:d1:68:77:27:87:a5:61:c5:76:44:10:7e:4f:4c:
                    59:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:1B:86:8C:CF:8B:60:E5:F0:B1:44:07:68:9D:8C:97:3E:A5:8E:32
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS10753.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.116.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:ee:c0:35:ca:6b:49:11:be:df:fb:7d:d3:7d:5f:cf:1d:c7:
         b3:f4:b1:6d:06:72:5a:07:40:1d:e7:f5:a3:41:39:62:a1:04:
         ab:72:12:db:71:2c:7a:1c:a2:41:ba:88:52:ee:4e:8f:9d:9c:
         37:1a:45:5a:b2:4c:7b:0b:c9:2b:e9:7c:07:91:bf:5a:c6:59:
         7b:38:7e:d6:ac:11:cd:68:f2:74:f1:fc:14:bd:93:52:b9:c7:
         83:48:8f:b7:15:10:ef:97:4c:8a:89:3d:0b:f9:7a:85:25:b8:
         db:66:06:67:ef:b0:c5:f5:ed:41:8e:53:01:10:a3:84:de:eb:
         4d:64:32:7d:c2:fa:f1:45:59:28:b1:55:78:df:a0:bf:33:fb:
         62:51:17:4f:10:ba:f7:15:6a:e9:2b:1a:48:6e:c9:85:55:9d:
         5b:4f:f2:d6:bd:e0:6d:d7:f0:f4:33:a4:ff:44:5f:ed:16:be:
         10:77:24:4d:9f:96:e7:7d:02:3c:02:78:be:71:57:aa:4e:eb:
         d1:fa:36:92:9c:37:e2:98:8f:4f:50:ef:a5:eb:96:71:2e:d1:
         7e:18:97:31:5d:a5:8f:2d:2d:1e:b2:b6:11:be:b1:bb:0d:38:
         d7:dd:e7:87:b9:fe:4e:8a:32:f2:42:da:c4:1d:e8:a2:26:87:
         4a:58:69:67
-----BEGIN CERTIFICATE-----
MIIFJDCCBAygAwIBAgIUXEDpwnEd69qjR80kro7IkTGIzu8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDM0NjA2OTQ5RDM4NURCNDI3MTRGRTcxMjc0RkFDOTk0
OEVGMjc5QzAeFw0yNjA3MjIxMzM5MjNaFw0yNzA3MjExMzQ0MjNaMDMxMTAvBgNV
BAMTKDkzMUI4NjhDQ0Y4QjYwRTVGMEIxNDQwNzY4OUQ4Qzk3M0VBNThFMzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGdL3tqaLPXffzZgPY27YIegGd
U+xPb6m8TAoYoWnvmMjzNBFEgBXBeCn4/z3S6M4Dd8bHFkDArbpd+y1rekAj9p0O
E/nAS7Oi0R2m/r0y20W8UKVMqSwseoZOktm9AgYPO5THNo2qQ6+8brGNEeuif2xd
1u+AXgvV+Qbm+GgAu5NGsUNi1x1xgTbJuuN05ADx8Z188RAVNwrYJP34WSlcCi1j
6eb1CgCJDfGp0HL71tITVi5XWaidFJh+22Pzn2cKR54be45BZevvD7RkmX65rsPP
k7KAwa+u1H19QA9ZOYcvpo385YYdLiRUfPXc/xPRaHcnh6VhxXZEEH5PTFmnAgMB
AAGjggIuMIICKjAdBgNVHQ4EFgQUkxuGjM+LYOXwsUQHaJ2Mlz6ljjIwHwYDVR0j
BBgwFoAU00YGlJ04XbQnFP5xJ0+smUjvJ5wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
NTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUwZWFkYTNkNzA1LTAvMC9EMzQ2MDY5
NDlEMzg1REI0MjcxNEZFNzEyNzRGQUM5OTQ4RUYyNzlDLmNybDCBngYIKwYBBQUH
AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5LzAwMmUwYmEzLWZlNjAtNDViMS05MTYwLTg2OGEy
ZjhhNDNiMS8zL0QzNDYwNjk0OUQzODVEQjQyNzE0RkU3MTI3NEZBQzk5NDhFRjI3
OUMuY2VyMHEGCCsGAQUFBwELBGUwYzBhBggrBgEFBQcwC4ZVcnN5bmM6Ly9yLm1h
Z2VsbGFuLmlweG8uY29tL3JlcG8vNTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUw
ZWFkYTNkNzA1LTAvMC9BUzEwNzUzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWXQ2MA0GCSqGSIb3DQEB
CwUAA4IBAQAB7sA1ymtJEb7f+33TfV/PHcez9LFtBnJaB0Ad5/WjQTlioQSrchLb
cSx6HKJBuohS7k6PnZw3GkVaskx7C8kr6XwHkb9axll7OH7WrBHNaPJ08fwUvZNS
uceDSI+3FRDvl0yKiT0L+XqFJbjbZgZn77DF9e1BjlMBEKOE3utNZDJ9wvrxRVko
sVV436C/M/tiURdPELr3FWrpKxpIbsmFVZ1bT/LWveBt1/D0M6T/RF/tFr4QdyRN
n5bnfQI8Ani+cVeqTuvR+jaSnDfimI9PUO+l65ZxLtF+GJcxXaWPLS0esrYRvrG7
DTjX3eeHuf5OijLyQtrEHeiiJodKWGln
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:51:48 2026 by rpki-client