Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3139362e302f32342d3234203d3e20343032323736.roa
File:                     3136342e33372e3139362e302f32342d3234203d3e20343032323736.roa (raw, json)
Hash identifier:          +SgqPv3HrB4dh1gDgYPX7g8mzjspXQOO6TEHe7cWk84=
Subject key identifier:   7B:86:87:9A:6F:EE:CB:6B:F2:A5:31:09:10:41:2A:32:67:9A:99:2C
Certificate issuer:       /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
Certificate serial:       4E50BEB04D7454A6638892E635720E2302ADC451
Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3139362e302f32342d3234203d3e20343032323736.roa
Signing time:             Mon 22 Jun 2026 03:13:45 +0000
ROA not before:           Mon 22 Jun 2026 03:08:45 +0000
ROA not after:            Mon 21 Jun 2027 03:13:45 +0000
asID:                     402276
IP address blocks:        164.37.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl
                          rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 11 Jul 2026 08:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:50:be:b0:4d:74:54:a6:63:88:92:e6:35:72:0e:23:02:ad:c4:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
        Validity
            Not Before: Jun 22 03:08:45 2026 GMT
            Not After : Jun 21 03:13:45 2027 GMT
        Subject: CN=7B86879A6FEECB6BF2A5310910412A32679A992C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:70:cd:fa:0f:65:4a:aa:c3:f0:30:5e:57:44:
                    2e:76:42:59:26:1e:b6:fa:06:55:c5:4f:5e:9f:f9:
                    20:e0:bb:90:4f:a8:6e:b6:05:e4:87:e0:bb:30:bc:
                    df:e7:0b:16:77:5c:e4:fa:6f:ec:18:f7:32:3b:5a:
                    b7:cf:37:49:ba:e2:0d:54:ca:d8:c8:4c:31:8e:dd:
                    02:32:95:85:b3:d8:b2:3f:3f:9f:7d:86:58:10:72:
                    de:20:a7:79:12:09:6d:39:a1:5b:ba:a3:fa:2f:d0:
                    dd:15:e4:b9:47:d8:09:c3:3f:87:21:01:4f:69:a0:
                    9e:1a:b5:cf:ab:fd:0d:50:77:1c:41:de:89:32:51:
                    4b:dd:e9:24:52:93:89:2b:4d:2e:29:9f:5c:21:64:
                    df:0e:d8:94:c6:5c:ec:37:9d:fb:37:de:b0:40:92:
                    12:90:6f:5d:be:aa:4b:7a:c1:30:85:87:77:b0:81:
                    31:10:b4:20:40:02:f5:eb:2c:e3:23:56:b7:62:cc:
                    7b:9d:13:c1:fd:2a:4a:fe:a3:bb:d4:04:69:ba:ab:
                    ee:46:d3:36:7d:dd:f5:32:1a:10:40:df:95:f6:4d:
                    44:9b:ee:27:3c:b4:d0:cf:5b:54:31:fc:a3:be:ab:
                    94:01:b4:d9:67:b1:f8:55:6f:94:2a:67:3c:3d:1d:
                    cd:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:86:87:9A:6F:EE:CB:6B:F2:A5:31:09:10:41:2A:32:67:9A:99:2C
            X509v3 Authority Key Identifier:
                keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3139362e302f32342d3234203d3e20343032323736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.37.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:97:b4:66:f7:e5:5c:9c:8e:49:59:93:22:fc:cf:cf:cf:64:
         9b:30:6e:8e:b2:18:68:e0:fd:98:fc:ce:f6:92:70:e3:0e:e5:
         95:35:55:9a:0b:5e:7c:b1:87:3e:84:e2:4b:b8:e5:99:57:d5:
         a0:86:95:2e:7b:24:4d:e8:47:f7:1a:d0:d0:5b:68:5b:8c:0a:
         a7:27:a3:03:10:5b:10:7b:ad:83:a7:83:76:ee:4c:92:a7:bf:
         b4:5b:bd:ed:13:fd:73:b1:c3:dd:01:17:97:b1:4b:e2:04:97:
         f2:bf:b5:e0:c9:8d:8a:27:dd:09:50:38:8f:88:23:88:b4:ec:
         9b:53:b8:61:d7:c7:57:d3:49:e8:f2:5c:28:20:b2:de:76:c6:
         bc:6a:25:37:26:02:99:d3:af:35:5c:9e:fc:ce:33:95:35:f9:
         c7:eb:59:98:3b:f2:b1:14:7c:0c:8f:ce:2f:ab:6a:61:25:ec:
         89:67:db:90:27:16:b0:ac:dd:60:80:35:65:3e:6c:cc:e8:1d:
         b3:71:52:b5:94:4c:d5:41:69:48:82:1c:ec:aa:83:61:f2:89:
         8f:62:ab:b8:11:b8:b6:32:38:27:de:88:84:e6:31:30:be:ee:
         b9:87:72:19:2a:a8:b1:64:22:57:41:a3:8e:11:ae:35:84:a5:
         ad:a5:89:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 10 15:30:27 2026 by rpki-client