Route Origin Authorization

$ rpki-client -vvvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3139332e302f32342d3234203d3e2039333034.roa
File:                     3136342e33372e3139332e302f32342d3234203d3e2039333034.roa (raw, json)
Hash identifier:          86hlgqfeODStxdNdXoxg/JUROADDJ2p/oFJfVgKY7Q0=
Subject key identifier:   E1:E0:11:36:69:32:B8:27:86:DF:95:89:AA:2C:F9:5B:E5:A3:B9:67
Certificate issuer:       /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
Certificate serial:       7E9D68C4B885BB29229A8DE7D6148EDD060BB32F
Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3139332e302f32342d3234203d3e2039333034.roa
Signing time:             Mon 12 Oct 2026 00:02:09 +0000
ROA not before:           Sun 11 Oct 2026 23:57:09 +0000
ROA not after:            Mon 11 Oct 2027 00:02:09 +0000
asID:                     9304
IP address blocks:        164.37.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl
                          rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 18 Oct 2026 09:56:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:9d:68:c4:b8:85:bb:29:22:9a:8d:e7:d6:14:8e:dd:06:0b:b3:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
        Validity
            Not Before: Oct 11 23:57:09 2026 GMT
            Not After : Oct 11 00:02:09 2027 GMT
        Subject: CN=E1E011366932B82786DF9589AA2CF95BE5A3B967
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:a7:85:2f:fe:8a:f5:0a:a6:e6:ff:15:97:67:
                    13:25:e1:26:43:98:49:b9:76:6f:11:e0:13:06:ec:
                    86:48:ce:af:66:db:34:f1:34:0e:c4:59:f3:9c:15:
                    af:bd:ca:ee:3d:d3:c3:a6:a3:3c:8f:9c:d5:fd:81:
                    bf:0b:dc:d5:31:90:cd:cf:c0:af:71:9c:2e:ab:49:
                    52:99:07:2b:97:61:5b:52:93:a0:b5:2a:c8:e0:86:
                    a5:a3:9a:e8:64:26:4f:3e:c4:e0:ef:24:d2:77:71:
                    97:3d:80:71:b9:c6:0d:6e:8e:72:36:ab:00:e9:e8:
                    a8:69:57:b8:fd:9a:f5:0b:25:95:80:40:6d:c9:2e:
                    7d:1b:38:bb:d5:01:a7:32:3e:7c:6b:17:ad:45:ef:
                    08:ab:3b:4b:ac:89:a8:97:ef:f8:05:45:83:2a:2c:
                    99:cf:f8:cb:66:3d:60:8f:86:89:8c:fb:13:54:75:
                    27:70:c7:9f:38:34:ff:bf:58:fb:b0:57:71:af:4a:
                    b2:b0:3a:ec:49:c5:99:7a:bf:6b:c5:84:71:c5:11:
                    a3:be:db:6c:71:ff:fd:d7:12:d0:4d:76:1f:57:76:
                    01:4c:f8:6a:2e:35:39:10:56:18:a8:49:d2:0a:09:
                    50:da:d7:d2:af:2f:c0:f8:51:6b:7f:e5:a8:3d:7a:
                    9f:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:E0:11:36:69:32:B8:27:86:DF:95:89:AA:2C:F9:5B:E5:A3:B9:67
            X509v3 Authority Key Identifier:
                keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3139332e302f32342d3234203d3e2039333034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.37.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:03:5c:80:93:3a:bb:b5:30:35:40:bd:4d:ea:2c:80:87:7c:
         31:5b:bf:72:db:76:de:54:e7:ff:04:4f:f1:55:d9:81:37:d5:
         5c:2c:19:7a:76:31:b4:65:65:0e:43:88:f4:a3:b8:25:07:ff:
         43:fa:71:93:0f:cc:c0:f2:90:76:8a:81:6a:f8:4f:d2:85:d4:
         68:1f:b0:fa:d8:d7:64:9d:84:9d:cf:fb:0f:84:24:43:f2:ce:
         96:e5:15:f6:83:c7:4e:a1:8a:52:59:2e:da:5a:f2:2c:67:df:
         8a:dc:ce:df:f1:2b:d6:f8:1e:17:94:28:29:db:82:20:6c:96:
         d5:03:87:ea:23:01:f6:25:28:ac:c8:bc:05:36:27:d7:b7:e9:
         85:83:db:d2:d7:6f:4f:32:6a:4a:ef:d3:38:27:6c:af:83:e2:
         2a:a5:53:38:6a:f9:03:34:ce:e2:52:5a:e0:2a:c6:03:ce:f0:
         61:4b:f4:7c:0e:04:93:b9:fe:36:05:fa:9f:ea:8b:26:f7:eb:
         9d:55:06:f0:73:9f:ff:25:ca:28:60:72:3f:b0:7d:86:7b:9c:
         f6:99:b9:39:80:f4:23:85:54:2c:63:f2:ef:b7:c0:c1:a4:e1:
         d4:0c:5f:f4:19:6c:e7:3b:07:ed:60:75:47:5e:93:0f:28:50:
         9e:51:c3:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 01:36:36 2026 by rpki-client