Route Origin Authorization

$ rpki-client -vvvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3231362e302f32342d3234203d3e20323138343939.roa
File:                     352e38332e3231362e302f32342d3234203d3e20323138343939.roa (raw, json)
Hash identifier:          7H6ajX+iuHR55ygbbWs1Spf9aUgVaBkHX9QIdGM+l7E=
Subject key identifier:   3D:F8:1D:BD:36:DA:8B:0C:F6:21:DE:67:3B:40:2D:59:8B:61:7E:D0
Certificate issuer:       /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial:       702089F50348A041C182F0B260D768B74941D86B
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3231362e302f32342d3234203d3e20323138343939.roa
Signing time:             Thu 12 Nov 2026 10:20:44 +0000
ROA not before:           Thu 12 Nov 2026 10:15:44 +0000
ROA not after:            Thu 11 Nov 2027 10:20:44 +0000
asID:                     218499
IP address blocks:        5.83.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
                          rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 05:11:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:20:89:f5:03:48:a0:41:c1:82:f0:b2:60:d7:68:b7:49:41:d8:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
        Validity
            Not Before: Nov 12 10:15:44 2026 GMT
            Not After : Nov 11 10:20:44 2027 GMT
        Subject: CN=3DF81DBD36DA8B0CF621DE673B402D598B617ED0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:09:94:10:84:ae:f9:8f:b9:7f:38:85:bc:32:
                    72:c6:f8:a7:2d:9b:c2:f3:83:6d:c7:62:6e:cb:03:
                    98:ac:e3:bf:fb:02:4d:04:28:b5:75:dc:bb:57:7e:
                    55:b4:54:5c:65:2f:00:8c:66:f1:ca:84:c6:04:56:
                    50:27:f6:3b:ba:ee:a0:f1:a3:d0:85:d3:63:1a:5b:
                    ab:9b:c4:f0:7f:03:74:b3:7c:06:13:31:6c:5d:b6:
                    13:46:77:dd:72:4d:cc:0d:68:93:b3:8d:5b:c4:cf:
                    8a:87:d9:ca:6b:2d:af:f9:51:dc:ca:07:cf:6f:0e:
                    16:ea:08:40:78:b7:b3:d5:aa:d8:7f:c8:1d:eb:55:
                    03:85:17:e2:5d:d0:dc:58:47:16:86:c4:c2:8e:e1:
                    02:66:16:92:ba:9e:ea:ac:bd:71:fe:c0:74:67:7c:
                    ca:76:cc:f0:a2:8e:39:5d:00:a2:22:18:1b:ee:9a:
                    71:ea:bc:95:59:9b:a0:2c:96:3b:d8:66:77:88:82:
                    53:90:98:f5:a9:4a:83:9e:8c:b4:20:02:af:86:16:
                    98:77:63:dc:7f:f6:39:13:97:29:f1:31:0e:71:e7:
                    d3:e1:48:a0:3e:72:20:6e:ac:cc:0c:63:34:d4:72:
                    35:ad:a2:47:96:da:55:10:8d:b7:f6:e6:2a:86:e7:
                    83:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:F8:1D:BD:36:DA:8B:0C:F6:21:DE:67:3B:40:2D:59:8B:61:7E:D0
            X509v3 Authority Key Identifier:
                keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3231362e302f32342d3234203d3e20323138343939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.83.216.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:42:e6:84:52:71:8c:0b:78:bb:d8:cb:15:1f:5c:00:83:c2:
         98:6b:f6:74:a4:ad:32:21:ff:d2:ce:f3:5c:51:6f:c2:a6:69:
         bf:88:8e:18:40:48:95:bc:37:2b:58:35:42:99:c0:08:a3:6d:
         3e:69:8b:3c:4f:5d:c6:03:32:c3:15:2e:06:61:69:5c:d4:55:
         f8:be:de:55:28:ac:00:1b:dc:c1:52:e7:30:e2:39:3c:5e:88:
         f9:ff:56:3b:9e:ae:08:b3:af:32:c6:34:bd:76:af:b2:a9:e5:
         8d:39:6c:fa:11:3a:be:2a:6f:e0:23:9c:e3:da:fd:a9:52:1b:
         23:cf:dd:0f:4f:02:0b:3d:e8:c6:dc:4b:83:48:28:06:a9:4b:
         95:62:85:1b:f8:6c:a4:46:bb:5d:04:f2:b6:44:ec:5a:a5:e7:
         fc:ae:ca:71:d5:24:b2:8e:a9:84:5d:91:be:d7:9b:48:cd:9a:
         88:7a:9b:dd:dd:82:c6:2c:4c:b3:d4:1d:ad:d4:18:59:6c:44:
         72:6c:fc:d5:ce:aa:cd:5a:cf:0a:9c:d0:16:a5:4a:c0:66:95:
         b1:5c:1a:41:60:c6:2d:e9:95:82:b8:1c:e9:5d:5f:27:72:8d:
         3f:12:3f:2f:67:25:6e:83:d9:70:a9:c8:c7:26:6f:33:c3:96:
         a2:3c:91:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----