Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3139362e302f32332d3234203d3e2032343937.roa
File:                     3136342e33372e3139362e302f32332d3234203d3e2032343937.roa (raw, json)
Hash identifier:          y+CveEWGb8ntXCTgCZcZtj1afthlLqEvP9qI/4QmR60=
Subject key identifier:   80:02:81:18:D7:69:D2:39:AB:13:A7:A5:AA:6B:95:32:DF:8B:6A:F4
Certificate issuer:       /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
Certificate serial:       4C8ACB22836A640BB10EF50D1F6B2FA6C5A6FEEF
Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3139362e302f32332d3234203d3e2032343937.roa
Signing time:             Mon 10 Aug 2026 04:49:48 +0000
ROA not before:           Mon 10 Aug 2026 04:44:48 +0000
ROA not after:            Mon 09 Aug 2027 04:49:48 +0000
asID:                     2497
IP address blocks:        164.37.196.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl
                          rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 21 Aug 2026 09:49:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:8a:cb:22:83:6a:64:0b:b1:0e:f5:0d:1f:6b:2f:a6:c5:a6:fe:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
        Validity
            Not Before: Aug 10 04:44:48 2026 GMT
            Not After : Aug  9 04:49:48 2027 GMT
        Subject: CN=80028118D769D239AB13A7A5AA6B9532DF8B6AF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:86:e9:a7:0e:66:ce:a8:b0:87:d5:22:44:4c:
                    4c:6a:18:41:d4:34:da:3d:64:10:d7:4a:63:62:51:
                    7c:b8:c6:cf:f1:70:16:03:cc:7f:78:35:72:de:2b:
                    b0:97:c4:09:62:11:d6:9f:09:c5:2c:04:73:83:74:
                    bf:e4:58:d9:26:e2:93:42:4a:ae:72:09:79:ad:1c:
                    f0:1f:ba:aa:a8:c4:0f:12:c2:74:f8:87:cf:af:0f:
                    ab:e3:61:e6:64:65:3c:06:f9:e5:a6:e8:e4:74:c5:
                    a8:1e:c8:34:1a:fc:00:23:0e:2e:4b:23:35:bf:ac:
                    a3:e3:1c:1c:4b:82:76:fc:ba:3c:53:4a:91:11:2f:
                    ab:09:e5:8e:4b:0e:e5:c6:21:ba:29:9a:a3:9e:a7:
                    43:a0:40:5d:e2:b4:a6:e9:e3:b9:a0:9f:d7:d5:24:
                    39:c7:b8:fa:92:eb:df:1d:72:ef:a0:4d:8a:16:53:
                    bc:18:f4:76:a1:6a:86:44:57:3a:6e:58:6f:cf:8f:
                    f4:4b:84:96:69:8a:99:c9:8b:e0:cf:53:74:82:1e:
                    21:f9:ab:06:db:aa:f6:5b:ff:41:ba:34:c8:3c:91:
                    d6:cb:64:fc:80:bf:c2:52:ef:bb:bd:ac:ee:3f:33:
                    23:ca:96:e8:21:5c:82:e6:a5:85:fc:51:02:4d:94:
                    1d:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:02:81:18:D7:69:D2:39:AB:13:A7:A5:AA:6B:95:32:DF:8B:6A:F4
            X509v3 Authority Key Identifier:
                keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3139362e302f32332d3234203d3e2032343937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.37.196.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6c:c2:66:d4:87:3d:81:f3:21:0b:c9:db:4f:9b:5b:b7:64:0c:
         90:3e:c2:3b:b8:3d:e3:bd:7e:80:3c:88:e7:4c:41:00:29:d0:
         6d:b9:9e:53:09:7d:90:d7:0d:f4:ef:4c:9d:aa:e0:ce:4f:68:
         b3:7a:7e:4d:bc:e7:f7:28:0a:03:e2:ff:b6:56:80:7c:33:17:
         79:3c:44:39:e4:0e:c9:dc:04:ed:2d:35:28:06:32:5a:20:d0:
         97:d2:5c:3f:6e:69:f7:0d:fd:74:03:f9:ff:84:74:00:bb:53:
         f6:05:81:07:e5:14:db:17:99:7a:66:ba:78:ae:54:c5:42:87:
         11:15:fa:50:b1:74:b7:48:1f:a3:22:79:01:b8:6c:3b:19:23:
         cc:1f:33:52:42:15:8b:77:c1:6b:8f:a9:8f:33:c3:1b:5e:53:
         00:eb:04:11:5b:e6:2e:c7:dc:72:00:e5:37:da:c6:a5:4e:86:
         82:22:e2:46:8a:51:3b:2b:15:2d:28:83:79:8f:91:8a:e8:c6:
         c7:3c:26:eb:4c:3e:6f:10:ee:cf:1d:66:2c:34:c5:a4:ea:0c:
         54:d5:d7:c2:ee:4d:a9:91:aa:8e:5c:ae:5e:a0:2f:33:bc:c1:
         03:ca:3b:5f:f2:8f:41:7d:cb:ff:e7:79:d8:11:86:30:c4:5d:
         69:2c:00:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 02:23:57 2026 by rpki-client