Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/3130392e3130372e35302e302f32342d3234203d3e20333935373933.roa
File:                     3130392e3130372e35302e302f32342d3234203d3e20333935373933.roa (raw, json)
Hash identifier:          DaOtb6ECSsMTJBlAWIzD1CDpEv3QDHG0LKNLR3QPROc=
Subject key identifier:   C3:2B:41:D6:AF:EC:93:E8:92:6D:AB:D3:30:43:58:67:A1:A2:DB:A4
Certificate issuer:       /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial:       31A26F5855B1ACE5452F2A66E8AF177D82B6F167
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/3130392e3130372e35302e302f32342d3234203d3e20333935373933.roa
Signing time:             Thu 17 Jul 2025 10:37:46 +0000
ROA not before:           Thu 17 Jul 2025 10:32:46 +0000
ROA not after:            Thu 16 Jul 2026 10:37:46 +0000
asID:                     395793
IP address blocks:        109.107.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
                          rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Jul 2025 04:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:a2:6f:58:55:b1:ac:e5:45:2f:2a:66:e8:af:17:7d:82:b6:f1:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
        Validity
            Not Before: Jul 17 10:32:46 2025 GMT
            Not After : Jul 16 10:37:46 2026 GMT
        Subject: CN=C32B41D6AFEC93E8926DABD330435867A1A2DBA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:01:08:f8:d2:d3:8c:7e:f2:4b:d8:6b:37:c8:
                    5c:88:86:a0:f0:32:80:3c:cc:cb:99:2b:cd:ee:67:
                    c2:73:98:9d:0e:53:c6:f5:50:7a:78:75:27:ca:5b:
                    a9:4b:0d:22:0b:19:79:0c:a2:3c:27:25:59:ad:03:
                    07:63:48:01:fd:fa:a3:bf:11:38:1b:fa:a0:bf:93:
                    5e:d8:cb:b3:8f:48:b8:bd:bb:c3:fa:99:8f:56:d3:
                    8c:41:9e:33:1f:9d:31:66:c4:7c:f5:41:3c:9a:ea:
                    f4:3d:60:cb:55:77:da:92:c4:0f:6d:29:a4:a4:74:
                    be:cb:e8:8b:11:69:0d:aa:02:87:ad:1b:57:1f:94:
                    83:10:86:47:a0:84:38:bf:b3:c1:4f:e1:b3:58:65:
                    c6:53:a7:23:1a:24:06:ac:f5:8d:2f:d3:2b:57:d3:
                    c1:e3:c2:dd:8c:e9:18:de:57:a7:65:a7:c9:ec:b2:
                    7f:9b:38:3b:f1:90:40:82:aa:59:24:88:19:39:6a:
                    2f:d4:2c:09:9a:a9:f5:65:61:23:7b:da:4e:05:24:
                    0d:6e:35:a3:92:c2:be:73:f2:c4:a7:b2:b2:4f:ec:
                    10:12:90:1b:2c:5e:63:c8:50:53:2d:ee:b4:33:39:
                    14:15:73:40:9b:ee:6c:9c:74:c7:76:80:22:4a:8e:
                    16:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:2B:41:D6:AF:EC:93:E8:92:6D:AB:D3:30:43:58:67:A1:A2:DB:A4
            X509v3 Authority Key Identifier:
                keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/3130392e3130372e35302e302f32342d3234203d3e20333935373933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  109.107.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:86:9c:9d:c2:38:2b:c4:fe:8e:b0:f1:89:bf:75:7a:91:b9:
         7b:5e:5d:93:08:98:f3:bc:35:57:68:fd:0e:9c:74:d4:5b:38:
         ce:41:93:99:78:28:20:82:0a:ac:23:ef:a1:59:3c:72:45:21:
         82:70:03:92:44:43:7b:0f:c2:a1:99:ac:4d:5d:da:58:b9:c9:
         3d:34:67:40:86:80:18:b3:dd:7a:00:b6:c3:a8:11:e8:0d:03:
         b5:13:64:50:82:0f:57:bd:df:68:12:02:39:bd:58:06:a4:b9:
         f7:d4:ae:2c:68:6d:45:aa:4c:10:75:0a:cf:3f:02:43:c9:df:
         06:24:51:e9:0b:ab:20:6b:98:6e:e7:fb:56:33:ee:19:10:b0:
         7b:e0:a2:d8:11:f1:42:ee:6f:35:bf:78:38:ee:1b:b4:80:4e:
         25:7a:a9:72:b9:1a:4b:cd:e1:7a:09:8e:38:cc:23:e0:66:ce:
         bc:c5:7e:d2:20:07:ee:c8:88:a9:55:6e:a7:e1:72:34:b8:38:
         71:4f:3a:eb:4a:f9:76:89:bb:0c:11:d6:81:56:15:6e:99:1b:
         13:3e:32:39:ad:75:c6:6f:39:07:c4:10:bd:8f:a3:eb:f5:f6:
         b5:2e:e2:01:68:10:cd:b7:be:7f:64:12:41:78:73:b0:73:1c:
         f4:bf:e3:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 11:29:03 2025 by rpki-client