Route Origin Authorization

$ rpki-client -vvvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3230332e302f32342d3234203d3e203133353337.roa
File:                     3136342e33372e3230332e302f32342d3234203d3e203133353337.roa (raw, json)
Hash identifier:          sGh0JJuOCvuIoBPWKtCrMfX7UYz4QTGdhK0H7hW1NfA=
Subject key identifier:   1F:5F:ED:6D:2E:2E:09:EE:9F:26:A5:8B:D1:39:EB:0A:F2:72:FE:7E
Certificate issuer:       /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
Certificate serial:       51DA201A864AE92C06610090E5DFCD5ECDFCE0F0
Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3230332e302f32342d3234203d3e203133353337.roa
Signing time:             Mon 12 Oct 2026 00:02:09 +0000
ROA not before:           Sun 11 Oct 2026 23:57:09 +0000
ROA not after:            Mon 11 Oct 2027 00:02:09 +0000
asID:                     13537
IP address blocks:        164.37.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl
                          rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 19 Oct 2026 17:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:da:20:1a:86:4a:e9:2c:06:61:00:90:e5:df:cd:5e:cd:fc:e0:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
        Validity
            Not Before: Oct 11 23:57:09 2026 GMT
            Not After : Oct 11 00:02:09 2027 GMT
        Subject: CN=1F5FED6D2E2E09EE9F26A58BD139EB0AF272FE7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:0c:39:fa:fb:4f:58:13:ee:97:7f:71:00:eb:
                    c0:0f:ad:07:84:4d:c2:e1:6b:24:55:6f:00:11:5e:
                    c8:2d:75:57:34:77:ad:4e:ee:5e:36:64:29:ae:16:
                    60:13:2d:eb:41:ff:59:82:79:3c:c9:c5:4e:e2:5c:
                    db:94:7d:50:35:01:2e:88:1a:e0:96:75:31:e6:81:
                    43:f3:97:13:d4:87:1e:e7:df:f1:71:6b:ff:c9:d4:
                    34:4a:69:7f:e9:be:2a:59:41:03:7c:5d:ec:72:9d:
                    fd:91:61:4b:25:89:14:f4:8b:3a:36:6c:cf:d6:aa:
                    d7:74:a1:1b:e9:5e:e6:ad:78:cd:9d:e4:38:fe:55:
                    88:0f:16:44:0d:6c:2c:0f:7c:50:49:1a:7f:32:d7:
                    ac:ef:e8:a1:ef:fe:22:c9:e5:5f:94:46:46:7d:18:
                    4f:4b:08:4e:02:ce:64:58:e1:ca:0a:9b:b6:4d:22:
                    d4:84:b9:e6:d1:c5:bb:74:73:fd:a5:05:fb:3b:72:
                    e9:77:21:d9:6a:d2:9f:ee:1c:4e:44:38:c2:79:61:
                    e6:fc:b1:68:ee:e1:5f:fa:81:6e:84:02:d7:b4:0b:
                    13:17:b7:8a:2e:5f:d0:8c:ed:b4:3f:05:fb:5a:8d:
                    e2:6d:79:e6:29:37:9c:c9:07:5f:b6:08:b6:b0:b3:
                    b6:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:5F:ED:6D:2E:2E:09:EE:9F:26:A5:8B:D1:39:EB:0A:F2:72:FE:7E
            X509v3 Authority Key Identifier:
                keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3230332e302f32342d3234203d3e203133353337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.37.203.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:39:44:86:81:37:bf:72:08:da:96:41:80:b4:45:e6:6d:34:
         eb:68:ec:75:d1:dd:7d:16:0f:3a:f0:87:70:d8:17:a7:04:45:
         77:f6:35:c5:e8:92:73:4a:bd:cf:2a:2b:5b:39:9a:c4:0e:70:
         31:09:f8:fe:67:f0:bb:41:f4:01:e4:cd:b2:46:50:07:f7:ce:
         1a:29:f4:1e:86:e6:1d:2c:15:4c:de:3d:e1:b2:93:fe:5e:37:
         5e:52:b3:2a:cc:b7:44:4d:1a:15:3f:a0:2a:f8:e7:ad:71:79:
         19:12:9b:cd:6e:ed:a7:c2:6f:3b:03:a5:18:76:74:36:c8:5d:
         44:37:56:39:d4:14:bc:45:4d:b5:8d:42:cd:42:a4:72:e3:17:
         90:d4:46:fd:c1:e4:a8:66:bf:16:39:57:a0:6f:a1:05:74:dd:
         0b:2b:db:f5:72:43:ee:2b:6c:aa:55:15:de:54:77:d3:0e:e2:
         ad:46:b5:7d:44:71:d7:ed:b9:85:7b:b8:c9:3e:7b:3a:de:3f:
         bc:f4:53:41:21:56:f8:9f:11:55:b6:ae:e7:9a:0f:8f:e3:d2:
         b0:58:6f:6f:74:2c:1e:d7:08:55:9c:ec:e9:81:c9:ae:fc:0b:
         2c:13:0c:c0:db:fc:f7:8e:29:7e:ab:6d:b6:90:73:50:32:42:
         17:fe:54:40
-----BEGIN CERTIFICATE-----
MIIFWDCCBECgAwIBAgIUUdogGoZK6SwGYQCQ5d/NXs384PAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjM1NEQzMjhDQkJGRDFFRjNDRDI5MjY4QTIzQjBGQ0M2
MEUzQTJDNTAeFw0yNjEwMTEyMzU3MDlaFw0yNzEwMTEwMDAyMDlaMDMxMTAvBgNV
BAMTKDFGNUZFRDZEMkUyRTA5RUU5RjI2QTU4QkQxMzlFQjBBRjI3MkZFN0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZDDn6+09YE+6Xf3EA68APrQeE
TcLhayRVbwARXsgtdVc0d61O7l42ZCmuFmATLetB/1mCeTzJxU7iXNuUfVA1AS6I
GuCWdTHmgUPzlxPUhx7n3/Fxa//J1DRKaX/pvipZQQN8Xexynf2RYUsliRT0izo2
bM/Wqtd0oRvpXuateM2d5Dj+VYgPFkQNbCwPfFBJGn8y16zv6KHv/iLJ5V+URkZ9
GE9LCE4CzmRY4coKm7ZNItSEuebRxbt0c/2lBfs7cul3Idlq0p/uHE5EOMJ5Yeb8
sWju4V/6gW6EAte0CxMXt4ouX9CM7bQ/BftajeJteeYpN5zJB1+2CLaws7YrAgMB
AAGjggJiMIICXjAdBgNVHQ4EFgQUH1/tbS4uCe6fJqWL0TnrCvJy/n4wHwYDVR0j
BBgwFoAUs1TTKMu/0e880pJoojsPzGDjosUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
YTAzNzViMzktZjk0OS00Y2I1LWI1MTktZjk0MDA4YjE2NTRjLTAvMC9CMzU0RDMy
OENCQkZEMUVGM0NEMjkyNjhBMjNCMEZDQzYwRTNBMkM1LmNybDCBngYIKwYBBQUH
AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5LzYxNzA4YTZiLTZjM2EtNDBhMC1hMzAyLTU5NWVj
YzE3ODQ4Yy8wL0IzNTREMzI4Q0JCRkQxRUYzQ0QyOTI2OEEyM0IwRkNDNjBFM0Ey
QzUuY2VyMIGkBggrBgEFBQcBCwSBlzCBlDCBkQYIKwYBBQUHMAuGgYRyc3luYzov
L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9hMDM3NWIzOS1mOTQ5LTRjYjUtYjUx
OS1mOTQwMDhiMTY1NGMtMC8wLzMxMzYzNDJlMzMzNzJlMzIzMDMzMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzMzM1MzMzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKQlyzANBgkqhkiG
9w0BAQsFAAOCAQEAOjlEhoE3v3II2pZBgLRF5m0062jsddHdfRYPOvCHcNgXpwRF
d/Y1xeiSc0q9zyorWzmaxA5wMQn4/mfwu0H0AeTNskZQB/fOGin0HobmHSwVTN49
4bKT/l43XlKzKsy3RE0aFT+gKvjnrXF5GRKbzW7tp8JvOwOlGHZ0NshdRDdWOdQU
vEVNtY1CzUKkcuMXkNRG/cHkqGa/FjlXoG+hBXTdCyvb9XJD7itsqlUV3lR30w7i
rUa1fURx1+25hXu4yT57Ot4/vPRTQSFW+J8RVbau55oPj+PSsFhvb3QsHtcIVZzs
6YHJrvwLLBMMwNv8944pfqtttpBzUDJCF/5UQA==
-----END CERTIFICATE-----
Generated at Mon Oct 19 04:34:48 2026 by rpki-client