Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3139332e302f32342d3234203d3e20343032323231.roa
File:                     3136342e33372e3139332e302f32342d3234203d3e20343032323231.roa (raw, json)
Hash identifier:          p3wFZM4krkkICIbcmd/oC0Tr5QJ1myyLyJdDdIBwz9w=
Subject key identifier:   53:36:FB:3C:31:94:5D:41:A6:BA:48:15:FC:7B:60:F6:F9:FF:9C:3C
Certificate issuer:       /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
Certificate serial:       45621FE4E69687568E8C34735C96603DDC2192C9
Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3139332e302f32342d3234203d3e20343032323231.roa
Signing time:             Mon 22 Jun 2026 03:12:31 +0000
ROA not before:           Mon 22 Jun 2026 03:07:31 +0000
ROA not after:            Mon 21 Jun 2027 03:12:31 +0000
asID:                     402221
IP address blocks:        164.37.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl
                          rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 Jul 2026 09:45:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:62:1f:e4:e6:96:87:56:8e:8c:34:73:5c:96:60:3d:dc:21:92:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
        Validity
            Not Before: Jun 22 03:07:31 2026 GMT
            Not After : Jun 21 03:12:31 2027 GMT
        Subject: CN=5336FB3C31945D41A6BA4815FC7B60F6F9FF9C3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:3c:86:06:6b:e2:05:09:b8:86:c7:39:90:a9:
                    57:93:80:64:61:60:df:aa:1a:0d:94:f4:78:0d:ee:
                    31:65:05:a9:57:05:e4:c5:59:03:14:fc:fe:69:6a:
                    48:40:98:2e:7e:bf:75:7a:b9:48:2b:a1:dd:03:86:
                    54:a8:b3:76:d4:e2:a0:3d:8e:61:42:66:13:9a:1a:
                    5a:a0:29:5c:26:12:02:20:fa:0b:8a:66:2a:aa:44:
                    d6:be:c7:06:49:7b:59:e7:05:74:46:36:75:d6:08:
                    88:5d:19:cf:2a:12:64:61:9a:e3:1d:bb:24:f4:90:
                    f2:69:89:37:89:5f:ae:1e:15:66:62:c1:38:d2:8f:
                    7d:84:f8:44:51:5a:01:7b:ca:a1:5f:49:84:92:a8:
                    5a:32:6c:13:2f:92:2f:f5:24:f7:97:10:08:ae:ab:
                    79:f4:b2:c5:d9:54:8e:0b:53:59:2b:0f:c8:e5:7a:
                    52:69:3f:70:09:a5:df:4e:6a:64:a6:0f:f2:3c:b7:
                    e8:34:fd:7c:44:d3:28:aa:21:d0:44:01:ce:4f:fa:
                    45:8f:0a:5a:22:7c:e7:83:37:72:67:cc:f3:7a:d6:
                    4b:eb:06:05:81:5d:e5:b5:9a:7a:2c:b8:2e:d3:5c:
                    eb:00:2e:44:67:61:b3:5f:d5:a2:c1:de:b8:7b:3e:
                    d4:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:36:FB:3C:31:94:5D:41:A6:BA:48:15:FC:7B:60:F6:F9:FF:9C:3C
            X509v3 Authority Key Identifier:
                keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3139332e302f32342d3234203d3e20343032323231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.37.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:24:d1:49:32:a9:57:9a:d9:9d:52:cc:9c:61:1a:56:a5:66:
         c5:65:52:d4:5d:21:7d:31:8b:ac:e2:55:ce:69:39:dc:30:ab:
         86:c3:60:81:77:76:6b:c6:cd:a8:9f:eb:d9:cd:d8:18:cc:85:
         73:7e:a3:95:45:16:6d:8c:03:2d:e8:84:89:ae:48:d3:cc:73:
         33:83:99:2a:69:ef:ce:a3:19:70:bb:ae:e7:96:86:ae:77:14:
         78:76:12:3f:43:8b:25:3a:f7:c5:5d:84:b9:9d:b1:5f:85:c6:
         0e:cc:89:79:38:00:a4:1c:65:f7:86:86:1f:31:9b:13:ae:1e:
         e4:e4:7c:2a:0d:e0:20:44:01:d7:31:36:0f:b4:1d:78:ac:eb:
         39:ce:8b:d0:6b:30:d8:af:27:b9:c2:e0:21:96:33:b5:8e:45:
         4e:81:3e:72:35:b3:5e:41:95:3b:b0:f7:3b:bb:1b:63:66:fd:
         12:45:e9:8d:e0:e7:a9:90:7a:41:55:30:6e:30:67:16:d1:a5:
         2c:e1:6e:a7:19:bb:d6:4b:74:41:e1:43:82:fc:4b:5a:53:47:
         44:b1:3b:ff:96:d6:f2:54:ba:8c:b0:8d:30:3a:92:10:64:26:
         bd:dc:ae:3c:43:70:b4:8e:88:c6:13:91:ed:a7:74:fe:4a:69:
         cf:43:d8:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 22:11:48 2026 by rpki-client