Route Origin Authorization

$ rpki-client -vvvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3230302e302f32342d3234203d3e20323139343237.roa
File:                     3136342e33372e3230302e302f32342d3234203d3e20323139343237.roa (raw, json)
Hash identifier:          SpN5hn2Qg1THMZipXYjsUEdA4B5HsAHuYJzpqEJyeh0=
Subject key identifier:   F1:1A:F4:83:C1:D0:CC:90:39:99:D6:1E:A1:41:03:4B:BD:EC:51:EA
Certificate issuer:       /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
Certificate serial:       32D9F06F721F12B6B42BAE66AC84F693325D2A61
Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3230302e302f32342d3234203d3e20323139343237.roa
Signing time:             Mon 12 Oct 2026 00:02:10 +0000
ROA not before:           Sun 11 Oct 2026 23:57:10 +0000
ROA not after:            Mon 11 Oct 2027 00:02:10 +0000
asID:                     219427
IP address blocks:        164.37.200.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl
                          rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Oct 2026 16:36:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:d9:f0:6f:72:1f:12:b6:b4:2b:ae:66:ac:84:f6:93:32:5d:2a:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
        Validity
            Not Before: Oct 11 23:57:10 2026 GMT
            Not After : Oct 11 00:02:10 2027 GMT
        Subject: CN=F11AF483C1D0CC903999D61EA141034BBDEC51EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e8:04:e6:6c:7b:16:47:04:74:d2:45:8c:a9:
                    3c:62:0b:87:8e:82:53:d3:cf:1e:77:42:e6:a8:c7:
                    47:74:25:d9:84:80:a5:83:b8:1b:11:e3:8b:3d:fe:
                    f9:87:5b:a9:13:dc:6d:10:88:5d:58:f5:56:bc:cd:
                    eb:26:71:0e:2f:1c:aa:94:17:0a:23:15:e5:65:c0:
                    aa:9d:d2:7f:61:a3:1d:0d:29:dc:63:0c:99:09:b9:
                    39:81:72:bc:68:e6:08:e5:f2:98:24:29:07:91:d9:
                    2b:2e:a7:a1:c7:73:bc:d9:8a:75:88:75:11:fa:60:
                    ed:ba:79:81:66:46:b8:51:50:f8:64:ff:0d:3e:da:
                    45:a0:5b:bf:2b:e9:5c:17:69:9e:8e:e9:d0:58:32:
                    2c:4b:12:13:7c:86:0d:63:3a:8e:36:52:66:05:d2:
                    c6:53:d8:9e:f0:79:52:b0:7b:8c:da:6b:6e:60:57:
                    82:5e:45:02:17:e0:27:66:96:4e:be:6f:10:a8:11:
                    38:fa:d8:0b:b0:4f:b8:0f:26:e8:5a:0a:59:c8:99:
                    e2:bc:43:a6:f8:22:f6:48:8e:ae:6b:8b:81:3d:b4:
                    56:8f:27:aa:d9:19:ff:3e:d1:29:ae:88:2c:22:29:
                    cf:ba:38:c6:8d:c1:98:0b:d5:36:97:b0:d3:19:56:
                    c5:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:1A:F4:83:C1:D0:CC:90:39:99:D6:1E:A1:41:03:4B:BD:EC:51:EA
            X509v3 Authority Key Identifier:
                keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3230302e302f32342d3234203d3e20323139343237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.37.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:65:2a:50:e9:8d:37:39:df:b7:3a:0f:ab:da:47:ea:73:cc:
         b2:ce:18:e1:95:fa:04:eb:c7:dd:b9:a7:2c:02:de:8b:5a:1e:
         9a:22:9d:3b:a6:41:69:49:96:16:bd:36:8d:a9:a4:a2:6d:37:
         3d:78:19:5e:c6:29:79:6b:fb:92:4b:83:b0:6a:3d:05:bc:1c:
         11:c5:b6:6a:f2:80:dd:eb:c9:a4:1c:fd:51:e5:c7:8f:bd:6b:
         ec:4f:84:95:41:f9:21:d4:9d:f5:06:fe:d6:60:2f:4f:a2:c7:
         af:8d:8f:c3:f9:b5:29:57:82:23:09:84:f4:d0:31:4c:4d:d1:
         ed:27:9d:74:09:dd:d7:65:47:32:5d:44:0f:90:9c:e4:c0:e7:
         5d:08:f8:af:dc:ea:6f:4f:38:9f:d7:8a:76:01:71:2d:4d:0a:
         ea:fc:b4:b4:25:a6:d7:df:2d:d9:9f:12:a1:81:9f:3d:eb:6e:
         4c:62:89:79:c6:1c:2e:86:c5:93:28:de:91:d3:2a:48:1a:63:
         e5:b9:bf:7a:9b:fe:84:5d:46:f9:9c:b7:0e:af:aa:e5:30:ed:
         02:c0:15:67:2d:d1:6a:3d:25:35:fd:6b:82:4d:86:24:be:62:
         6a:c7:ec:0d:8f:4d:7c:73:69:7e:c6:3b:28:93:89:55:d6:1a:
         35:0e:af:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 05:01:31 2026 by rpki-client