Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3230312e302f32342d3234203d3e20313334323839.roa
File:                     3136342e33372e3230312e302f32342d3234203d3e20313334323839.roa (raw, json)
Hash identifier:          vp9+gWRVu/rC0Dq2jZpNSJXxP4FCW7K+9Dv423XUQE4=
Subject key identifier:   35:18:80:8A:D9:09:B7:EC:6D:65:56:1D:61:0A:8E:47:12:C7:7F:DA
Certificate issuer:       /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
Certificate serial:       58558D66767C41888FE801B718F88ACA256421EE
Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3230312e302f32342d3234203d3e20313334323839.roa
Signing time:             Mon 22 Jun 2026 18:57:45 +0000
ROA not before:           Mon 22 Jun 2026 18:52:45 +0000
ROA not after:            Mon 21 Jun 2027 18:57:45 +0000
asID:                     134289
IP address blocks:        164.37.201.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl
                          rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 23 Jun 2026 17:26:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:55:8d:66:76:7c:41:88:8f:e8:01:b7:18:f8:8a:ca:25:64:21:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
        Validity
            Not Before: Jun 22 18:52:45 2026 GMT
            Not After : Jun 21 18:57:45 2027 GMT
        Subject: CN=3518808AD909B7EC6D65561D610A8E4712C77FDA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:30:42:06:a3:9e:5b:9e:3f:76:a6:d4:75:b0:
                    6a:5a:e2:0a:2e:3c:2b:7a:0e:3d:ed:b9:c2:72:29:
                    4c:88:06:30:84:3d:2e:9a:c1:94:8a:13:fd:21:c7:
                    20:2c:63:1f:07:fc:d7:01:44:7c:b7:47:f9:22:84:
                    48:09:70:84:de:9f:24:81:47:95:c6:ac:2c:a4:7d:
                    c7:83:eb:8f:de:62:47:e6:07:6c:b4:8a:45:59:52:
                    34:60:7f:52:ea:d2:d2:37:e0:e6:c3:24:07:1b:a1:
                    0c:06:48:3d:5c:55:6c:9f:00:0d:1f:8f:d6:60:33:
                    28:c2:ba:ef:4c:3a:c3:45:86:69:be:b6:4c:58:43:
                    2e:12:b9:40:21:33:0c:e3:bd:48:9e:58:2f:89:55:
                    88:38:f9:69:7f:05:ec:63:62:11:5e:3c:b8:97:1c:
                    91:bb:c1:f3:df:c4:36:b2:f2:e1:20:cf:21:2c:cf:
                    07:ec:2b:eb:99:13:ab:35:07:6e:31:f5:64:3e:36:
                    7e:b1:5e:fd:fb:75:4b:6a:65:5e:6d:d3:fb:2a:6b:
                    81:c5:a2:6e:04:07:06:13:f9:c2:e7:a6:7a:8b:1f:
                    29:da:6c:9e:82:02:7a:ea:e0:b5:02:b3:6b:78:c9:
                    d7:37:e3:c5:49:18:d9:42:21:c4:94:24:90:ed:3e:
                    34:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:18:80:8A:D9:09:B7:EC:6D:65:56:1D:61:0A:8E:47:12:C7:7F:DA
            X509v3 Authority Key Identifier:
                keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3230312e302f32342d3234203d3e20313334323839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.37.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:81:6e:11:25:1d:cb:d1:31:46:d0:3d:df:dc:1c:d0:15:c7:
         9d:57:24:d9:2b:e7:e3:e1:e1:55:e6:b3:fd:6e:65:38:c3:d4:
         ff:29:63:1a:4f:ba:23:e5:52:3a:0c:38:bd:b8:ba:c7:aa:35:
         f5:0c:22:66:ea:6d:67:82:e9:07:36:61:93:94:5d:64:01:23:
         87:26:f9:69:48:76:ac:ba:42:b4:ff:08:29:cf:ad:fa:ed:11:
         61:ed:bd:11:7e:62:3d:b0:b0:36:50:ec:d3:ec:d5:55:a6:13:
         69:10:25:c2:0f:ab:55:5d:ed:b7:c8:e1:b0:38:52:68:ea:db:
         9d:0a:7c:3c:99:dc:a5:ec:b8:c1:43:0b:ca:a2:bd:c4:50:49:
         54:52:71:fc:4e:e6:69:3b:99:f4:86:9d:c4:3c:f4:97:a9:dd:
         98:93:04:b3:4e:ea:1c:cf:09:9d:f7:45:5e:f5:c2:64:f8:be:
         32:7a:b7:64:22:49:ca:46:c6:55:f4:8a:48:46:d6:49:79:a8:
         93:b8:c8:2b:88:79:2b:eb:0c:51:05:2f:a8:b7:b0:97:76:8a:
         57:63:80:73:34:18:60:18:75:c3:2f:71:99:19:f6:b3:17:a2:
         cd:8c:91:ac:12:84:75:75:63:8b:8d:9c:bb:d4:d8:e5:4c:b9:
         59:ab:8c:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 23 06:39:35 2026 by rpki-client