Route Origin Authorization

$ rpki-client -vvvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3139382e302f32332d3234203d3e203136353039.roa
File:                     3136342e33372e3139382e302f32332d3234203d3e203136353039.roa (raw, json)
Hash identifier:          d+oTNMdcGsQlSvQaKsyhVXZw0NaZzVOP5t35bYzQAdM=
Subject key identifier:   20:67:31:D5:9E:13:BF:F2:68:E2:81:6A:4C:53:8C:3E:52:D3:32:CA
Certificate issuer:       /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
Certificate serial:       3160F910D6D86A5366863CBB4B747210584424E7
Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3139382e302f32332d3234203d3e203136353039.roa
Signing time:             Wed 26 Aug 2026 15:22:42 +0000
ROA not before:           Wed 26 Aug 2026 15:17:42 +0000
ROA not after:            Wed 25 Aug 2027 15:22:42 +0000
asID:                     16509
IP address blocks:        164.37.198.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl
                          rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 03 Sep 2026 18:02:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:60:f9:10:d6:d8:6a:53:66:86:3c:bb:4b:74:72:10:58:44:24:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
        Validity
            Not Before: Aug 26 15:17:42 2026 GMT
            Not After : Aug 25 15:22:42 2027 GMT
        Subject: CN=206731D59E13BFF268E2816A4C538C3E52D332CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:15:8c:d9:b6:67:f0:3d:bf:0a:b3:47:8b:bf:
                    ce:b3:ce:b8:6a:e3:0d:a1:24:ac:48:48:37:0d:51:
                    a1:1e:df:eb:ce:1f:35:28:62:b9:58:b7:04:8f:9a:
                    f9:73:8d:af:0c:9e:18:4b:5e:d1:99:dd:87:38:19:
                    3e:d7:b3:50:f9:a9:96:1a:29:9e:fb:78:83:b7:d2:
                    36:c8:c7:e6:7a:4a:81:a8:5c:66:9c:f4:14:cb:e3:
                    b8:7f:48:41:d8:92:9e:53:99:93:a4:42:2e:b7:fb:
                    48:de:c8:b8:e0:f0:76:3e:6f:4a:71:9f:5c:4d:53:
                    ba:40:b9:96:4f:8f:90:c4:45:1d:ad:5a:74:bb:d7:
                    8a:8a:4d:ee:30:ba:a3:1a:64:c6:ca:33:7b:1b:5c:
                    12:7d:e2:2f:a9:88:68:0a:cf:31:fa:9b:03:3b:22:
                    bd:da:c1:9a:6a:75:36:93:b1:08:2e:3f:07:8d:1c:
                    f5:a6:de:ba:a7:e4:24:c6:35:cb:d2:ea:f4:85:97:
                    e7:09:ec:b1:03:20:8f:5b:83:d9:bd:b4:73:30:b5:
                    b2:a8:50:00:2a:bc:18:8a:64:dd:6e:05:36:a8:1d:
                    3b:f0:b1:dc:51:38:6e:55:56:d2:7f:4b:0a:36:64:
                    89:aa:63:0c:1a:ee:28:94:79:f1:41:4b:33:42:f6:
                    6a:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:67:31:D5:9E:13:BF:F2:68:E2:81:6A:4C:53:8C:3E:52:D3:32:CA
            X509v3 Authority Key Identifier:
                keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3139382e302f32332d3234203d3e203136353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.37.198.0/23

    Signature Algorithm: sha256WithRSAEncryption
         67:7c:c6:7d:ef:1f:43:f8:9f:8e:78:2a:cb:db:ea:6b:3f:f9:
         18:d6:c1:44:97:7a:2f:e5:6e:f9:61:8d:86:f2:a7:a1:5a:32:
         3e:20:9d:c5:d2:5d:54:ce:79:39:16:c6:6e:6e:4c:50:88:b2:
         f7:be:44:2a:6d:19:14:17:b2:97:ef:40:cc:49:78:03:ea:16:
         8b:8c:72:22:16:8b:73:7a:44:12:3d:9b:92:27:7b:93:5a:35:
         a7:f7:69:ee:d8:85:11:87:cd:94:94:55:62:ff:82:3b:29:6f:
         85:1d:11:0c:7a:28:2d:ad:45:8f:36:dd:f1:cc:0c:2a:d7:c1:
         97:66:cb:3a:d1:c4:be:70:42:ad:71:35:79:65:11:71:65:d2:
         ac:25:d6:54:93:5f:ce:19:10:89:39:ed:e1:00:af:88:01:d1:
         92:7b:f6:e1:f7:8c:07:67:a4:db:c2:65:96:78:88:35:bc:fb:
         6c:18:3f:da:9b:b3:ff:b7:03:bb:63:8e:2b:09:63:54:6f:f1:
         88:c8:52:57:a7:c4:06:ef:80:a4:f9:7e:f4:55:85:53:b2:20:
         38:5d:72:cf:29:af:5c:c6:37:29:88:a3:6c:dd:4c:16:a6:a6:
         d4:ed:91:16:c0:33:c7:03:c2:b7:3b:9e:c0:d6:6f:d4:d6:56:
         1f:77:30:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 08:29:04 2026 by rpki-client