Route Origin Authorization

$ rpki-client -vvvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3233302e302f32342d3234203d3e20323134343637.roa
File:                     3136342e33372e3233302e302f32342d3234203d3e20323134343637.roa (raw, json)
Hash identifier:          OqXOnc8cb/vsq2ad3VvB3XS29VfC+7hWDnRhfYSGnto=
Subject key identifier:   98:2F:8E:59:D4:B2:1E:A4:33:0A:52:06:D6:95:DD:B6:D5:60:7F:4A
Certificate issuer:       /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
Certificate serial:       549D8C1F6360B4B0B65D20D7D32854EEDD1B43A3
Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3233302e302f32342d3234203d3e20323134343637.roa
Signing time:             Mon 12 Oct 2026 00:02:09 +0000
ROA not before:           Sun 11 Oct 2026 23:57:09 +0000
ROA not after:            Mon 11 Oct 2027 00:02:09 +0000
asID:                     214467
IP address blocks:        164.37.230.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl
                          rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Oct 2026 16:36:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:9d:8c:1f:63:60:b4:b0:b6:5d:20:d7:d3:28:54:ee:dd:1b:43:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
        Validity
            Not Before: Oct 11 23:57:09 2026 GMT
            Not After : Oct 11 00:02:09 2027 GMT
        Subject: CN=982F8E59D4B21EA4330A5206D695DDB6D5607F4A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:9b:16:d9:20:7b:4b:3f:52:78:60:15:03:cc:
                    ef:39:5a:52:6b:62:92:a8:d2:d7:17:87:61:5a:39:
                    8f:5c:59:bc:6a:6f:4f:30:0c:28:23:6a:1d:9d:e5:
                    fb:6a:8e:ce:ef:9f:e4:5d:8c:73:d3:6d:68:65:ba:
                    d4:d3:ff:c1:9c:02:82:5b:24:5b:6f:92:16:85:3d:
                    dc:2c:a8:58:b1:8b:14:f6:3f:ff:91:6c:c9:d8:6d:
                    70:39:26:9f:07:24:8b:4f:03:41:11:3a:49:da:62:
                    fd:b9:fa:2e:bc:b8:8d:65:33:8d:65:8e:58:4d:87:
                    63:ff:64:21:e4:42:6b:9e:ee:a3:e2:cc:d1:75:d1:
                    89:3e:b1:ef:6a:1d:16:b4:ee:c6:c5:ac:66:80:41:
                    4a:21:ab:87:6f:49:b6:d2:1c:1b:85:d9:70:3b:1a:
                    e0:ec:99:e3:3e:47:17:09:7f:f0:a5:78:7a:c6:0f:
                    fb:29:a1:0f:ae:a3:c5:5d:05:89:df:91:56:c8:f1:
                    13:fe:de:c9:23:99:35:f1:43:ef:fa:6f:5f:41:39:
                    b2:e0:40:ac:76:d3:2c:2d:f7:78:f2:a5:e0:67:a5:
                    02:67:17:01:13:bf:03:27:d4:5c:82:1d:db:12:70:
                    f3:f9:b7:ad:13:4b:48:c8:57:e6:b4:21:a2:a1:20:
                    67:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:2F:8E:59:D4:B2:1E:A4:33:0A:52:06:D6:95:DD:B6:D5:60:7F:4A
            X509v3 Authority Key Identifier:
                keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3233302e302f32342d3234203d3e20323134343637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.37.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:11:48:6f:2d:d0:d5:71:f3:a6:25:c4:99:e7:d1:81:8c:03:
         ea:e6:e4:6a:da:0a:f9:f2:32:a0:58:aa:65:f5:e2:d7:e1:63:
         30:34:9d:f8:24:f2:bf:0b:1e:40:9d:9d:17:c3:a8:d2:f2:dd:
         27:7b:1e:26:20:65:81:02:2b:9a:a5:d2:84:c9:df:c3:46:6e:
         27:d1:a1:97:9f:6d:24:24:b3:29:59:f1:33:70:22:91:e3:3b:
         72:86:1e:e2:d7:79:54:79:e4:0f:4e:04:ed:57:7c:5c:f7:45:
         05:e8:da:3b:8e:64:a1:b0:08:a9:c8:70:d7:10:21:ce:33:f2:
         75:9f:14:fc:19:d9:35:6c:02:3f:45:10:da:48:32:85:ab:7c:
         39:ad:e4:fc:40:99:01:5e:63:58:d2:24:97:9b:c8:dd:0b:8b:
         56:20:9a:d2:9d:63:ae:62:a8:0c:93:ea:d5:75:c9:ac:17:18:
         df:ad:ea:55:97:5a:4e:3e:da:87:2b:9d:81:63:52:c3:b9:2a:
         f7:30:5a:d9:14:3c:eb:5e:1e:c8:2b:0d:25:9a:43:58:75:8a:
         80:70:ab:9f:98:0b:32:73:39:b6:43:62:4e:4a:a8:e6:1d:f5:
         7b:be:b8:61:a3:7a:ab:5c:8a:fe:d4:a4:6f:3b:a8:ae:0f:85:
         93:03:69:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 05:01:31 2026 by rpki-client