Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3231362e302f32342d3234203d3e20323030353036.roa
File:                     352e38332e3231362e302f32342d3234203d3e20323030353036.roa (raw, json)
Hash identifier:          cPsoLVD9HuZzMEQC5D7I/rL1nc42irBtR6lZHze8LK0=
Subject key identifier:   EE:8C:CB:23:CF:7F:01:FF:78:FA:6B:C7:55:EE:2D:36:90:F8:02:2F
Certificate issuer:       /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial:       200563BF6850B84C467604DECE92FF7C0F429CA1
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3231362e302f32342d3234203d3e20323030353036.roa
Signing time:             Fri 13 Mar 2026 06:17:02 +0000
ROA not before:           Fri 13 Mar 2026 06:12:02 +0000
ROA not after:            Fri 12 Mar 2027 06:17:02 +0000
asID:                     200506
IP address blocks:        5.83.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
                          rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 21:25:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:05:63:bf:68:50:b8:4c:46:76:04:de:ce:92:ff:7c:0f:42:9c:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
        Validity
            Not Before: Mar 13 06:12:02 2026 GMT
            Not After : Mar 12 06:17:02 2027 GMT
        Subject: CN=EE8CCB23CF7F01FF78FA6BC755EE2D3690F8022F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:22:e1:fa:3b:39:1e:57:11:5c:da:2f:8e:6e:
                    85:d6:06:15:17:67:8a:78:64:9b:e3:b1:58:b1:d7:
                    2d:7a:1c:a5:93:fa:f3:62:43:a6:8c:0d:6a:d5:bf:
                    02:a8:cd:7e:25:51:3c:38:78:64:fc:6a:53:c9:b7:
                    c7:fa:4b:20:7d:61:28:38:53:80:32:95:77:ab:80:
                    d4:43:f0:33:df:9a:bc:e2:8c:62:2f:d3:e2:79:51:
                    dd:20:64:81:ea:55:fa:0f:cd:5e:2d:b7:54:68:2c:
                    43:67:b6:e4:31:78:1e:fd:f4:f0:8e:62:c2:c0:a2:
                    a6:87:5b:aa:74:43:08:11:c1:e3:e1:dd:40:c5:16:
                    e5:57:dc:e8:8e:fb:aa:88:cc:10:8a:ed:aa:e4:87:
                    9a:2f:46:62:5a:e3:ef:11:54:5c:36:8e:9d:18:15:
                    ff:37:4c:04:d7:93:34:98:7a:3e:c1:b1:71:e8:fb:
                    07:d3:24:01:3b:0d:23:41:09:02:3f:a0:e6:0f:45:
                    4a:ea:0c:a7:43:1a:89:65:87:e1:cc:e1:02:5e:90:
                    42:0d:3e:4e:3e:9c:37:53:f1:e1:80:54:84:18:95:
                    26:fc:4d:25:74:b3:69:b3:32:d9:95:38:9c:23:4e:
                    e1:fc:5f:de:6a:4e:69:5d:ff:da:48:a5:f2:fe:7a:
                    50:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:8C:CB:23:CF:7F:01:FF:78:FA:6B:C7:55:EE:2D:36:90:F8:02:2F
            X509v3 Authority Key Identifier:
                keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3231362e302f32342d3234203d3e20323030353036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.83.216.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:91:a3:da:c5:1e:3a:1e:a6:fe:3a:99:12:49:d7:dc:cf:00:
         15:ee:9b:f2:24:f6:54:62:84:8b:20:0b:18:b8:62:3f:22:bd:
         a8:de:c9:34:03:ae:09:d3:35:d1:ee:23:3b:a4:a2:41:04:37:
         a4:2b:ca:22:34:51:01:35:b7:90:ac:a2:eb:c4:c2:77:11:16:
         ef:08:8a:f0:82:ca:1e:e0:70:fd:c8:4e:3b:37:46:7c:03:38:
         13:b8:75:a4:50:42:2b:29:cd:b3:f7:f6:55:ff:f6:7d:51:1e:
         9b:1a:11:31:16:9b:37:4d:6b:29:53:7e:e1:ff:0e:42:46:f8:
         20:93:42:15:64:55:c0:8b:98:10:e0:53:ea:68:e1:9d:e9:00:
         15:d7:df:0d:31:9b:58:24:c2:32:a8:30:62:b2:c7:c5:a2:ab:
         de:c5:94:d0:38:24:d4:ca:b5:41:b8:36:a4:7b:9b:7d:7e:50:
         09:48:b1:24:48:3e:b9:cb:e4:49:9b:3b:db:a1:63:13:57:b1:
         b7:61:5a:67:b1:8e:7b:f0:3f:8d:98:df:90:f7:24:34:ea:e5:
         3b:1a:74:cf:1d:32:ed:5b:fd:e2:50:6a:ab:27:23:4f:9c:0c:
         25:06:ef:81:19:d7:64:e0:1a:04:0e:93:62:19:b4:39:12:e1:
         90:ee:a9:dd
-----BEGIN CERTIFICATE-----
MIIFVjCCBD6gAwIBAgIUIAVjv2hQuExGdgTezpL/fA9CnKEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkEyRkI0REIwQUE0RDAwNjk1ODMxNjg3MkU0NjdCNTU0
RTBGRDBCRTAeFw0yNjAzMTMwNjEyMDJaFw0yNzAzMTIwNjE3MDJaMDMxMTAvBgNV
BAMTKEVFOENDQjIzQ0Y3RjAxRkY3OEZBNkJDNzU1RUUyRDM2OTBGODAyMkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9IuH6OzkeVxFc2i+OboXWBhUX
Z4p4ZJvjsVix1y16HKWT+vNiQ6aMDWrVvwKozX4lUTw4eGT8alPJt8f6SyB9YSg4
U4AylXergNRD8DPfmrzijGIv0+J5Ud0gZIHqVfoPzV4tt1RoLENntuQxeB799PCO
YsLAoqaHW6p0QwgRwePh3UDFFuVX3OiO+6qIzBCK7arkh5ovRmJa4+8RVFw2jp0Y
Ff83TATXkzSYej7BsXHo+wfTJAE7DSNBCQI/oOYPRUrqDKdDGollh+HM4QJekEIN
Pk4+nDdT8eGAVIQYlSb8TSV0s2mzMtmVOJwjTuH8X95qTmld/9pIpfL+elC5AgMB
AAGjggJgMIICXDAdBgNVHQ4EFgQU7ozLI89/Af94+mvHVe4tNpD4Ai8wHwYDVR0j
BBgwFoAUKi+02wqk0AaVgxaHLkZ7VU4P0L4wDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
YTZmMjE0N2EtZGU4YS00NDQwLWJjYTItNmQ4YjdjODc2ZmRhLTAvMC8yQTJGQjRE
QjBBQTREMDA2OTU4MzE2ODcyRTQ2N0I1NTRFMEZEMEJFLmNybDCBngYIKwYBBQUH
AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5LzlkZjMzYTU3LTdlNGYtNDg0NC04NGUyLWI3MTUz
YjU1MTFiNC8wLzJBMkZCNERCMEFBNEQwMDY5NTgzMTY4NzJFNDY3QjU1NEUwRkQw
QkUuY2VyMIGiBggrBgEFBQcBCwSBlTCBkjCBjwYIKwYBBQUHMAuGgYJyc3luYzov
L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9hNmYyMTQ3YS1kZThhLTQ0NDAtYmNh
Mi02ZDhiN2M4NzZmZGEtMC8wLzM1MmUzODMzMmUzMjMxMzYyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzMjMwMzAzNTMwMzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAFU9gwDQYJKoZIhvcN
AQELBQADggEBAAORo9rFHjoepv46mRJJ19zPABXum/Ik9lRihIsgCxi4Yj8ivaje
yTQDrgnTNdHuIzukokEEN6QryiI0UQE1t5CsouvEwncRFu8IivCCyh7gcP3ITjs3
RnwDOBO4daRQQispzbP39lX/9n1RHpsaETEWmzdNaylTfuH/DkJG+CCTQhVkVcCL
mBDgU+po4Z3pABXX3w0xm1gkwjKoMGKyx8Wiq97FlNA4JNTKtUG4NqR7m31+UAlI
sSRIPrnL5EmbO9uhYxNXsbdhWmexjnvwP42Y35D3JDTq5TsadM8dMu1b/eJQaqsn
I0+cDCUG74EZ12TgGgQOk2IZtDkS4ZDuqd0=
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:00:05 2026 by rpki-client