Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3230342e302f32322d3234203d3e20383334.roa
File:                     3136342e33372e3230342e302f32322d3234203d3e20383334.roa (raw, json)
Hash identifier:          T1jk3TCtl6/nTxvfBvODsCTiuFLrkW1wqWtvgVMerF8=
Subject key identifier:   7C:6B:BF:4A:89:3A:8F:93:96:07:A8:91:FF:06:24:15:ED:47:79:9E
Certificate issuer:       /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
Certificate serial:       7FA72634D32955E9861936760ECC8F57A91972DE
Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3230342e302f32322d3234203d3e20383334.roa
Signing time:             Thu 13 Aug 2026 05:40:11 +0000
ROA not before:           Thu 13 Aug 2026 05:35:11 +0000
ROA not after:            Thu 12 Aug 2027 05:40:11 +0000
asID:                     834
IP address blocks:        164.37.204.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl
                          rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Aug 2026 06:28:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:a7:26:34:d3:29:55:e9:86:19:36:76:0e:cc:8f:57:a9:19:72:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
        Validity
            Not Before: Aug 13 05:35:11 2026 GMT
            Not After : Aug 12 05:40:11 2027 GMT
        Subject: CN=7C6BBF4A893A8F939607A891FF062415ED47799E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:44:67:b6:c3:ff:2e:11:84:89:ed:43:53:69:
                    38:3a:1e:11:9c:5c:dc:8f:2c:bf:78:7e:c5:23:90:
                    14:c0:2c:10:8f:58:9e:9e:e3:6b:fe:28:84:f8:51:
                    61:cc:3c:b9:de:f7:52:75:7f:53:6a:10:42:57:97:
                    2d:93:3c:a6:f3:33:61:35:11:58:f3:0e:65:49:cd:
                    9a:95:dd:36:fe:73:cb:2a:4e:1a:f8:71:41:06:75:
                    3c:4a:16:4f:d5:31:07:45:3b:5d:bd:9e:1d:72:ae:
                    2f:f9:10:d6:6f:9c:16:57:d6:ab:4b:0e:58:28:ec:
                    55:ef:f9:6a:ad:78:8a:e9:bc:09:fc:7b:5c:90:69:
                    e8:7f:06:a0:34:c4:ed:0a:dc:20:7d:9b:01:41:13:
                    26:92:53:cb:4e:ee:4c:56:2c:68:68:bd:c9:9a:9b:
                    c3:af:31:03:8d:6c:1d:7d:a7:4d:d9:6d:74:b6:60:
                    07:33:7e:57:ed:9e:8a:cc:09:d9:d9:74:d7:77:eb:
                    04:a4:92:c8:a7:0b:ec:86:d0:9f:46:46:b7:87:07:
                    f0:e2:f1:96:02:b3:d5:67:83:30:ce:c6:2d:ae:65:
                    90:38:91:0f:0e:9f:97:8b:a6:ee:82:b0:53:db:cf:
                    e7:93:52:d4:04:59:7e:49:45:6d:5a:d3:31:3e:9e:
                    3a:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:6B:BF:4A:89:3A:8F:93:96:07:A8:91:FF:06:24:15:ED:47:79:9E
            X509v3 Authority Key Identifier:
                keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3230342e302f32322d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.37.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ae:b7:4b:17:81:1b:00:22:ae:d5:4a:3a:41:5b:36:9c:7e:6c:
         f8:d0:17:b2:33:81:45:60:8d:17:a4:29:b8:45:c3:a0:61:44:
         75:9d:93:c5:1f:ac:8a:48:24:d4:38:56:e0:06:0e:68:6b:57:
         5f:9f:73:b8:50:92:50:b0:22:21:37:5a:41:92:03:bd:42:87:
         76:06:72:69:65:47:82:77:3b:ad:10:ee:71:0c:d3:a3:b0:bc:
         0e:2d:7a:ef:97:df:ec:89:43:85:d1:f2:4e:4f:9e:7b:0f:86:
         ab:6f:48:dc:6b:e8:f5:92:31:4a:d0:30:13:a0:b8:7e:5d:8f:
         28:56:95:b3:94:58:41:e0:10:61:07:27:66:01:c0:f7:b0:3c:
         4a:e7:21:36:02:cf:db:47:e1:d0:2d:5c:bd:e1:e6:02:ca:31:
         3e:49:fa:a8:45:b9:4a:d7:04:87:a3:32:3e:f0:6d:b8:8b:17:
         3b:17:6b:5b:5b:75:81:e1:8b:0e:31:f0:f1:e6:a9:1d:7e:e6:
         b3:65:c1:b1:4a:2d:b1:6f:c0:3e:70:72:27:c3:e5:f7:b3:45:
         e4:0f:5a:d4:3e:3f:1e:a2:73:ce:71:54:fd:33:e9:c4:5d:1e:
         b1:7a:d0:f0:31:69:fd:3b:b5:30:6d:7f:a2:37:a5:f4:52:52:
         6a:71:e9:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 12:19:31 2026 by rpki-client