Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS50919.roa
File:                     AS50919.roa (raw, json)
Hash identifier:          CUwh/0EFxIur1HFRJq4aD9ycFalg3yRgOcckOtB0B0I=
Subject key identifier:   C6:CD:F8:D7:38:61:FC:DD:4D:E2:CC:85:F8:77:4D:CD:E7:CC:84:9D
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       5BC5FE910358FDAE2BA31D19D529D370EBAEE1B5
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS50919.roa
Signing time:             Mon 29 Sep 2025 09:55:07 +0000
ROA not before:           Mon 29 Sep 2025 09:50:07 +0000
ROA not after:            Mon 28 Sep 2026 09:55:07 +0000
asID:                     50919
IP address blocks:        89.116.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
                          rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 07:07:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:c5:fe:91:03:58:fd:ae:2b:a3:1d:19:d5:29:d3:70:eb:ae:e1:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: Sep 29 09:50:07 2025 GMT
            Not After : Sep 28 09:55:07 2026 GMT
        Subject: CN=C6CDF8D73861FCDD4DE2CC85F8774DCDE7CC849D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:c2:67:fe:78:20:a0:bf:6f:1f:5c:90:96:ee:
                    42:51:8a:8e:22:ee:83:81:ea:68:10:86:b1:ad:98:
                    23:ad:81:56:c9:3a:6f:97:74:e7:eb:34:b8:0b:46:
                    8a:6f:3b:74:29:f8:67:94:7e:2c:aa:f0:ef:bb:b4:
                    20:63:93:a6:f5:1f:ec:64:e1:78:7a:11:75:1d:c3:
                    5a:ae:02:4a:1d:2e:e4:83:32:38:23:71:3e:7c:2d:
                    1c:75:2e:b5:72:d3:eb:fe:f2:f3:17:30:66:a3:f8:
                    ed:3f:2e:47:bf:d6:f7:e4:4e:46:6a:c3:f2:13:e3:
                    f1:95:a3:0b:40:b4:a4:11:fd:bd:ab:44:d9:df:7f:
                    67:ab:c1:d2:14:4d:bc:1b:1d:2f:a0:a5:5c:0e:05:
                    80:9e:19:ac:01:8f:43:4c:0b:9c:35:67:00:51:fc:
                    44:11:a5:91:55:b6:36:f9:65:04:23:44:ea:45:98:
                    e3:c6:0d:6e:67:30:10:1e:5e:93:17:27:c9:7a:38:
                    22:cf:44:eb:57:d2:f5:1d:a7:47:d4:a6:fa:3d:fc:
                    b1:65:f5:8d:85:42:9f:96:eb:ac:fd:2e:08:6c:82:
                    e5:4d:1d:20:6e:71:2c:f3:cc:d8:3a:28:b6:aa:a8:
                    e8:25:27:24:af:e6:a3:55:eb:ee:a6:20:3a:b1:b0:
                    63:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:CD:F8:D7:38:61:FC:DD:4D:E2:CC:85:F8:77:4D:CD:E7:CC:84:9D
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS50919.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.116.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:4e:2a:47:88:8d:e1:56:39:12:08:fe:94:a1:f8:59:98:ff:
         f5:88:a4:49:6d:14:c3:9b:f1:9d:c0:15:6c:14:95:01:a2:61:
         77:97:ff:6a:88:3c:f5:f2:ad:54:72:c9:be:e6:21:bd:4a:d2:
         47:75:c2:85:ba:7c:cf:75:c4:bf:b3:50:75:d8:59:07:90:02:
         f2:e9:24:be:61:29:93:5c:d6:f2:85:a9:1e:1e:76:76:7c:48:
         ff:69:9d:fc:c9:e1:06:cf:ed:28:8c:b7:ff:c3:c2:c8:9a:6d:
         20:89:4e:40:57:30:25:08:6d:90:b0:15:45:49:a4:3c:37:2d:
         b6:e7:9d:d6:65:48:7c:ae:40:62:7a:45:f2:57:fe:36:20:f5:
         fa:41:9b:e5:52:26:db:bf:a6:02:70:9b:02:2e:95:fe:fc:ad:
         8e:97:be:7c:e5:bd:d6:8c:bf:60:ab:63:7a:14:26:2b:bf:a8:
         9e:95:18:6e:1c:77:21:4b:9d:8c:4b:38:71:b5:b9:36:fb:e0:
         00:7c:1a:83:a8:39:72:5c:68:f2:b2:33:bb:de:02:48:ff:fc:
         c0:f3:9e:4f:31:f7:92:1b:18:20:40:57:41:38:c2:67:c5:23:
         c1:f5:5b:48:65:2a:21:8a:55:a7:c1:84:86:95:16:2b:53:82:
         23:a6:c4:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:17:23 2025 by rpki-client