Route Origin Authorization

$ rpki-client -vvvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3231302e302f32332d3234203d3e20343030363138.roa
File:                     3136342e33372e3231302e302f32332d3234203d3e20343030363138.roa (raw, json)
Hash identifier:          Mv5e+6YuobiSbjUpkH0Zh80NbwtMnVVUg1cWaBt/X4E=
Subject key identifier:   9B:84:99:40:D0:0B:2C:BF:8B:F8:E3:29:93:7A:92:30:32:D6:C2:53
Certificate issuer:       /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
Certificate serial:       51F92C2A3A6C870648BF8C38E56A3B85E4457EF7
Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3231302e302f32332d3234203d3e20343030363138.roa
Signing time:             Mon 12 Oct 2026 00:02:10 +0000
ROA not before:           Sun 11 Oct 2026 23:57:10 +0000
ROA not after:            Mon 11 Oct 2027 00:02:10 +0000
asID:                     400618
IP address blocks:        164.37.210.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl
                          rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Oct 2026 16:36:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:f9:2c:2a:3a:6c:87:06:48:bf:8c:38:e5:6a:3b:85:e4:45:7e:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
        Validity
            Not Before: Oct 11 23:57:10 2026 GMT
            Not After : Oct 11 00:02:10 2027 GMT
        Subject: CN=9B849940D00B2CBF8BF8E329937A923032D6C253
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:2f:1c:96:bc:d9:e3:28:bc:b8:26:89:25:20:
                    96:e5:29:05:bc:a3:33:08:41:e0:f0:b5:65:ba:e2:
                    5d:c5:87:41:39:32:b1:d9:0a:e0:24:ad:de:86:26:
                    b4:e8:fb:a7:ad:08:5d:99:99:a1:eb:02:e7:06:22:
                    cd:6a:8a:4c:64:76:fb:1f:1c:c1:51:ae:b5:34:7c:
                    4f:98:18:bb:d0:a1:20:b3:44:36:f9:93:66:82:bb:
                    04:2f:c6:08:3a:ac:52:3a:1a:c6:94:b1:a3:ef:c9:
                    79:6c:6f:8f:d5:ee:52:68:f1:59:7d:56:ff:62:f3:
                    f6:4a:3d:54:9c:02:11:3e:06:1a:36:5f:ee:81:dd:
                    32:35:ec:56:3a:e5:51:d8:56:7d:5d:59:8e:e7:82:
                    d2:f1:a1:1b:9f:2b:bf:b6:3d:16:cc:c9:8f:8c:46:
                    e1:e7:26:a8:6f:9b:22:dc:91:da:f3:d1:8f:18:7c:
                    c9:a4:7b:e2:0a:6e:94:41:6e:c6:6c:4c:0f:f8:fc:
                    7c:56:40:5d:38:61:f3:d4:c3:1a:31:73:77:42:82:
                    a5:90:38:48:10:58:b9:be:ca:2d:80:bf:62:bb:aa:
                    00:ff:95:61:30:2a:b3:94:00:e6:9d:ae:50:87:ef:
                    a5:72:ae:01:d0:74:f4:3c:2c:b0:1b:79:b3:43:cf:
                    3f:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:84:99:40:D0:0B:2C:BF:8B:F8:E3:29:93:7A:92:30:32:D6:C2:53
            X509v3 Authority Key Identifier:
                keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3231302e302f32332d3234203d3e20343030363138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.37.210.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5f:f5:aa:ee:5e:f0:64:96:1e:62:98:b0:79:11:d1:aa:c4:da:
         72:ac:ef:e9:39:b9:75:03:a8:51:2b:cd:dd:ac:6c:ce:1f:dd:
         a2:62:92:c8:71:2b:7e:f5:e3:de:4d:55:9b:ee:71:85:c3:eb:
         47:92:d5:27:62:f1:a9:c1:2b:d5:1c:10:9e:0e:6b:d2:dd:67:
         c4:8c:73:56:3c:20:72:c1:dc:99:65:0d:b9:dd:de:ed:2a:8f:
         55:1d:11:c1:ec:de:af:96:bd:ed:ba:2a:11:9f:6e:79:77:e3:
         bd:19:1d:d8:3f:16:29:c4:18:16:69:1f:9d:e4:6e:65:91:fc:
         79:3d:67:0f:3e:83:42:19:2d:f3:1c:27:8b:42:69:6c:56:d0:
         e7:e2:65:b7:b1:ba:24:eb:84:75:3b:f2:44:82:24:cc:4b:b7:
         91:dc:74:4b:9a:12:ab:28:70:22:26:e1:44:0e:7f:f0:d2:77:
         f2:ca:4a:ef:81:27:02:5b:64:b4:15:bd:fa:86:68:9e:be:41:
         bb:bf:5e:9a:84:d8:d0:ca:2a:e9:f1:cb:b0:41:4e:6c:3c:b4:
         53:74:9d:76:de:36:22:89:96:5c:37:a8:82:95:5c:57:db:86:
         b9:d2:79:0f:a7:8d:51:e2:af:df:c3:bf:69:82:a7:7f:8a:69:
         41:2b:6f:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 05:48:56 2026 by rpki-client