Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/3130392e3130372e36302e302f32342d3234203d3e20333935373933.roa
File:                     3130392e3130372e36302e302f32342d3234203d3e20333935373933.roa (raw, json)
Hash identifier:          BVpiDrBClY5/2hpbw3vuOcYvpRKv46RAbXPQJk9Ptuk=
Subject key identifier:   A5:8C:EE:01:66:04:27:97:D8:65:68:A3:E5:9F:BA:5F:79:F8:40:6B
Certificate issuer:       /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial:       469055B717B6720FBFF44F6A6C67E9CB33F78A47
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/3130392e3130372e36302e302f32342d3234203d3e20333935373933.roa
Signing time:             Thu 17 Jul 2025 10:40:10 +0000
ROA not before:           Thu 17 Jul 2025 10:35:10 +0000
ROA not after:            Thu 16 Jul 2026 10:40:10 +0000
asID:                     395793
IP address blocks:        109.107.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
                          rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Jul 2025 04:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:90:55:b7:17:b6:72:0f:bf:f4:4f:6a:6c:67:e9:cb:33:f7:8a:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
        Validity
            Not Before: Jul 17 10:35:10 2025 GMT
            Not After : Jul 16 10:40:10 2026 GMT
        Subject: CN=A58CEE0166042797D86568A3E59FBA5F79F8406B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:9c:3f:d4:cd:59:d8:24:0d:20:7c:30:bd:25:
                    dd:cf:d0:1e:ca:c6:d5:49:b4:21:79:16:3c:e2:a3:
                    df:d4:85:da:58:f2:9e:e7:ba:b4:c4:3b:80:49:62:
                    a8:2a:ca:39:44:ea:c2:b0:27:1c:43:54:4c:94:1d:
                    4c:fb:97:ae:9e:6d:01:a5:7b:86:3a:b1:8a:4f:f3:
                    63:a7:e9:e6:11:c9:1d:62:8b:32:f6:4d:9b:df:0b:
                    15:67:14:69:72:23:01:29:01:eb:ee:f1:6d:51:96:
                    5a:df:96:98:99:c9:37:96:c8:67:95:34:83:48:fe:
                    e8:80:e5:ee:42:af:19:64:3b:10:7f:18:fe:be:03:
                    c3:e0:52:fa:33:93:7b:25:c4:bc:00:f8:53:5d:d3:
                    11:8b:d6:cd:cc:ee:c3:2e:a6:e9:23:ca:35:39:62:
                    34:d8:eb:87:90:cf:d1:31:c9:84:77:f9:9b:c0:0c:
                    f0:9a:ec:82:23:dc:52:f7:47:9a:17:13:4b:5d:ff:
                    e1:08:24:a1:d0:ab:13:d7:25:c7:50:42:e4:d8:47:
                    53:26:5a:ee:76:04:6f:f9:ab:11:45:80:90:ef:5c:
                    7d:03:ac:7e:98:7c:c7:31:5d:ac:ea:95:00:d6:4f:
                    0c:0d:4a:d6:4f:0f:f9:57:65:5a:9f:61:c0:b9:06:
                    07:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:8C:EE:01:66:04:27:97:D8:65:68:A3:E5:9F:BA:5F:79:F8:40:6B
            X509v3 Authority Key Identifier:
                keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/3130392e3130372e36302e302f32342d3234203d3e20333935373933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  109.107.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:b0:aa:bc:07:ca:e4:03:e3:ed:d9:94:16:b7:9c:1e:54:8b:
         05:ad:ce:ae:4f:1d:bb:27:5e:60:d7:d4:ec:95:44:5f:d7:14:
         38:ed:d6:b6:18:a8:e2:aa:45:c8:dc:5f:bc:1b:bd:04:3c:62:
         61:5d:be:d1:a6:b8:89:a0:88:a6:ef:35:32:1d:8c:30:e1:29:
         3a:07:13:97:e0:97:cd:58:62:89:0a:0d:88:07:13:b6:ad:25:
         4f:a1:8e:0c:a9:9c:e2:69:0e:9f:ac:b7:e5:19:20:be:d1:08:
         f1:bb:97:72:55:b4:7c:d8:f7:8c:d7:12:81:e4:23:b6:f5:82:
         4e:f8:d4:f6:b5:eb:1d:a4:cb:f9:96:d6:a2:a7:d6:09:31:88:
         6a:fd:d4:dc:09:2f:2e:b5:bc:92:51:88:05:08:e7:de:18:02:
         6d:c8:99:3d:7f:46:64:ba:08:2a:9e:95:35:82:58:e2:86:41:
         27:4d:21:4b:27:46:86:c6:a6:cc:2a:f7:6c:82:8e:0b:42:eb:
         eb:8a:0b:18:d4:44:4a:02:e7:74:46:28:61:9d:f1:30:18:73:
         24:59:c6:ec:30:f6:47:a3:72:14:3f:18:39:96:f1:44:23:a4:
         17:a4:26:ac:25:51:b4:e7:c3:ef:4b:a6:18:b8:81:cf:51:43:
         2c:bb:dc:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 11:26:37 2025 by rpki-client