Route Origin Authorization

$ rpki-client -vvvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/AS218919.roa
File:                     AS218919.roa (raw, json)
Hash identifier:          v+NWvT54Znt8pFdZ5ixWjTz0ZIQhGWlUZtWE/6EUOnI=
Subject key identifier:   09:F4:73:82:E7:69:E6:F0:55:C9:92:F8:83:46:91:97:A8:D6:8D:F1
Certificate issuer:       /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
Certificate serial:       442E8026AAC49BE453A5728B08673ECFF158B630
Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/AS218919.roa
Signing time:             Wed 23 Sep 2026 02:18:48 +0000
ROA not before:           Wed 23 Sep 2026 02:13:48 +0000
ROA not after:            Wed 22 Sep 2027 02:18:48 +0000
asID:                     218919
IP address blocks:        62.144.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl
                          rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 23:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:2e:80:26:aa:c4:9b:e4:53:a5:72:8b:08:67:3e:cf:f1:58:b6:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
        Validity
            Not Before: Sep 23 02:13:48 2026 GMT
            Not After : Sep 22 02:18:48 2027 GMT
        Subject: CN=09F47382E769E6F055C992F883469197A8D68DF1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:1a:ca:3e:a4:47:2e:db:f8:eb:23:5a:b2:a3:
                    22:8b:bb:e3:90:fe:da:4b:cd:35:16:79:78:c3:06:
                    ae:1f:a9:e3:89:48:cf:23:c3:e8:e4:64:fa:e2:95:
                    dd:29:ac:8d:a1:9c:c5:5d:96:bb:9c:34:ba:9d:e5:
                    32:ba:e9:ca:6b:31:f8:ce:b2:39:17:9e:79:33:36:
                    5b:6b:52:f0:0a:e1:ec:e1:d9:8a:a7:06:3d:8e:1f:
                    de:ac:ee:46:8b:22:7c:98:e7:4a:a5:3a:e5:42:68:
                    e5:e1:5a:4c:0c:b1:35:47:e8:c0:55:45:6e:db:ed:
                    06:0e:cf:4c:ee:1b:10:5e:65:a7:bd:65:3f:82:84:
                    b7:c2:c8:23:cb:11:18:d5:7d:11:3a:aa:9e:90:c3:
                    ca:91:81:e4:a9:87:dc:05:d9:ae:2a:b9:c9:28:d4:
                    27:ad:86:e3:88:a4:a3:ee:ef:2c:81:be:01:5c:99:
                    d1:4c:04:8f:f9:0d:a2:26:09:8d:35:22:22:0a:a2:
                    38:38:bc:87:88:41:76:9e:20:f2:4e:3c:9f:da:75:
                    33:c2:02:99:63:c3:50:03:10:54:67:62:37:0e:48:
                    18:fe:da:30:8c:99:76:7c:f6:d8:34:7f:e5:e2:2f:
                    22:84:77:e3:9b:ae:ac:f8:a9:e5:22:d0:cb:d2:11:
                    af:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:F4:73:82:E7:69:E6:F0:55:C9:92:F8:83:46:91:97:A8:D6:8D:F1
            X509v3 Authority Key Identifier:
                keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/AS218919.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.144.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:e3:b1:c2:17:9b:42:36:fa:8a:50:27:36:0d:0c:ae:dd:2b:
         bc:bb:4e:9f:bd:e5:44:a1:9e:0f:23:4c:8f:55:09:b2:db:ee:
         f2:c3:c7:61:9a:2c:f6:c7:e6:fc:ff:58:24:68:f0:2a:8c:56:
         91:04:1a:db:db:ef:cb:3a:e0:2e:f3:9a:15:2e:f9:69:4b:7a:
         bc:fe:bf:17:3a:c2:c9:83:db:84:bd:aa:73:85:d2:9a:8f:a5:
         2e:9e:36:a5:0e:31:17:0d:e2:f0:cf:31:20:50:e7:d2:c9:87:
         f8:c1:10:b4:22:51:a3:80:66:04:d9:6b:c9:ad:fa:e0:c1:e6:
         94:de:10:a4:59:fb:02:e9:bc:ea:d7:b6:86:62:94:d5:71:95:
         db:e7:44:11:dd:d7:f3:f0:47:8c:75:43:30:ca:5d:33:ef:09:
         59:28:96:f7:d4:cb:c7:56:bf:07:fd:55:90:ec:b0:ee:3a:db:
         99:57:5a:fc:4b:7d:b4:8b:b3:d8:dc:1e:09:1b:3d:96:de:8c:
         a9:1a:56:04:dc:c4:50:0c:8a:cb:40:ef:f9:6d:b4:c4:35:26:
         69:2d:80:08:a3:97:ad:47:ed:90:dd:e4:8b:6b:c9:22:6d:d0:
         dd:9a:f4:df:2c:f1:3e:11:89:0d:6c:1a:8a:8c:13:85:ce:85:
         e7:08:9d:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 10:35:15 2026 by rpki-client