Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3139372e302f32342d3234203d3e20343032333135.roa
File:                     3136342e33372e3139372e302f32342d3234203d3e20343032333135.roa (raw, json)
Hash identifier:          HRjDKXzNO5rvMwvoqDrjf0NvJcH528dShOnexDpB/Rg=
Subject key identifier:   C5:0E:F6:14:C7:62:84:CD:0C:3D:03:C3:6E:33:28:99:78:61:EF:3F
Certificate issuer:       /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
Certificate serial:       2BEAA2B21A6BDA1FE46D4C9153D709F33F8B18E3
Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3139372e302f32342d3234203d3e20343032333135.roa
Signing time:             Mon 22 Jun 2026 03:13:56 +0000
ROA not before:           Mon 22 Jun 2026 03:08:56 +0000
ROA not after:            Mon 21 Jun 2027 03:13:56 +0000
asID:                     402315
IP address blocks:        164.37.197.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl
                          rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 27 Jun 2026 12:40:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:ea:a2:b2:1a:6b:da:1f:e4:6d:4c:91:53:d7:09:f3:3f:8b:18:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
        Validity
            Not Before: Jun 22 03:08:56 2026 GMT
            Not After : Jun 21 03:13:56 2027 GMT
        Subject: CN=C50EF614C76284CD0C3D03C36E3328997861EF3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:78:c7:d9:b9:18:3d:e5:e3:7d:43:e8:2b:67:
                    e4:3c:aa:b1:be:30:a3:25:23:2e:39:d4:dc:ee:46:
                    6e:6b:26:8b:00:f9:74:ef:12:e3:77:9b:5c:83:eb:
                    75:f7:74:c6:b2:6d:9e:8c:88:89:6a:a5:7f:23:6b:
                    de:3d:3c:13:99:d0:b8:b5:c0:6e:51:f1:31:74:c6:
                    37:7a:37:17:f1:0a:8e:c2:5c:af:6f:64:03:1b:0e:
                    0e:97:15:ed:c1:2e:61:0e:e2:c7:61:22:8d:e3:c0:
                    b3:70:82:f4:c9:a5:09:80:a7:4b:bc:0b:3c:01:62:
                    61:d2:33:89:0a:6e:97:8a:46:7c:93:be:b9:4a:c3:
                    8a:10:c5:3a:7a:17:ee:8e:a9:bc:0a:f1:77:63:26:
                    7e:c1:1d:de:01:ca:84:05:24:86:b6:74:16:91:5f:
                    12:20:0f:1b:66:b2:31:7c:21:e8:87:16:ce:1b:68:
                    7a:f5:fc:06:ab:b2:d4:88:8d:27:b2:18:49:cb:fa:
                    ef:4e:12:42:6e:a8:f2:2a:8a:85:70:06:b3:7f:6b:
                    35:a9:1f:fa:e3:27:f4:7e:66:d7:91:14:8d:29:c7:
                    11:84:c1:e5:43:2a:a5:97:91:b7:b8:4a:fa:e3:eb:
                    11:9b:fb:c3:bf:f8:00:99:04:4d:a4:4a:3f:33:3d:
                    04:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:0E:F6:14:C7:62:84:CD:0C:3D:03:C3:6E:33:28:99:78:61:EF:3F
            X509v3 Authority Key Identifier:
                keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3139372e302f32342d3234203d3e20343032333135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.37.197.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:27:58:b2:4d:89:f9:4a:c6:fa:0f:63:3c:9a:1c:e5:40:2e:
         08:09:bf:72:53:c1:9c:ec:94:39:27:2e:ed:52:23:8d:f0:1d:
         1f:f5:fd:37:da:a2:b5:6f:a6:f7:7f:be:e4:9f:42:41:cc:c3:
         7e:d7:65:cb:4f:6a:87:62:29:03:ba:ab:e7:61:56:d0:9e:16:
         02:27:9f:57:4c:b3:0a:51:85:9f:32:a9:ca:74:ad:2e:ed:fd:
         e8:55:6d:db:14:2e:99:5d:41:ba:78:f4:11:49:4a:5e:32:1e:
         19:a9:1d:3c:e3:d8:2f:5e:9f:94:3a:a8:e2:22:a3:09:55:4c:
         6b:3d:60:09:d4:4d:4b:55:f2:ff:5b:f9:e9:a8:f7:aa:40:2a:
         c0:01:99:d0:5e:34:5c:7c:71:82:71:9b:29:9a:10:9d:51:8a:
         8c:b5:95:31:d1:04:57:86:61:80:01:e8:58:30:15:68:07:45:
         1e:c2:af:8e:48:38:2d:87:af:c7:06:d5:33:52:13:4e:50:63:
         1e:d6:3f:53:df:f1:68:86:71:7a:18:fc:f2:1c:d2:b8:dd:e2:
         85:8b:19:82:aa:d6:be:5f:04:b9:c4:d2:cd:15:7d:78:63:d2:
         21:8f:5b:5e:bf:1c:1d:eb:bd:2f:bf:d0:87:14:3f:00:b6:0e:
         90:08:fa:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 27 02:07:55 2026 by rpki-client