Route Origin Authorization

$ rpki-client -vvvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3230362e302f32342d3234203d3e20323030313035.roa
File:                     3136342e33372e3230362e302f32342d3234203d3e20323030313035.roa (raw, json)
Hash identifier:          BqUvTKyBMcju2uUU/NmIHrxDRbSu+EKnNvCXe7jNMcg=
Subject key identifier:   4E:15:7F:64:C2:BD:00:21:CE:E1:EA:CB:2B:A6:14:CB:2C:EF:AF:6F
Certificate issuer:       /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
Certificate serial:       0A9E5780B73738B7ACB97A8282F2AB8019E4CA96
Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3230362e302f32342d3234203d3e20323030313035.roa
Signing time:             Wed 19 Aug 2026 10:42:21 +0000
ROA not before:           Wed 19 Aug 2026 10:37:21 +0000
ROA not after:            Wed 18 Aug 2027 10:42:21 +0000
asID:                     200105
IP address blocks:        164.37.206.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl
                          rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 22 Aug 2026 07:01:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:9e:57:80:b7:37:38:b7:ac:b9:7a:82:82:f2:ab:80:19:e4:ca:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
        Validity
            Not Before: Aug 19 10:37:21 2026 GMT
            Not After : Aug 18 10:42:21 2027 GMT
        Subject: CN=4E157F64C2BD0021CEE1EACB2BA614CB2CEFAF6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:de:65:82:1e:2a:6c:d9:e5:3a:57:33:20:d8:
                    e6:ed:2c:61:ab:5b:ce:34:cf:22:6f:3b:dd:e0:80:
                    7d:6e:57:01:94:db:c7:45:cd:af:c5:22:52:0d:11:
                    d8:79:76:78:97:ee:af:0d:f0:86:d1:e5:9b:04:61:
                    b0:6b:dd:b7:fe:1b:85:e3:c3:9a:50:93:28:bb:ac:
                    b8:0b:32:82:b0:10:11:81:a7:f3:c9:6a:93:b4:4a:
                    d1:36:01:c2:1f:3a:5c:82:c1:3d:fc:fd:47:9e:a3:
                    e8:1f:67:69:df:a5:c8:b1:94:e9:16:bc:0a:1c:42:
                    36:0d:20:be:af:2e:c7:d4:83:bd:1c:67:08:e1:f8:
                    21:33:8f:85:8d:ca:39:33:8f:10:3b:a8:76:2e:c9:
                    3c:7f:95:22:00:94:08:dd:a8:ab:15:6f:b0:8d:29:
                    69:d1:0b:71:ac:15:45:91:0e:e1:1a:e5:32:86:03:
                    1d:8b:55:00:a1:48:a1:5c:fb:d5:01:a3:60:eb:bf:
                    af:73:9f:91:41:6a:9a:12:f3:02:b5:c3:4c:ee:fc:
                    63:77:ba:47:5a:63:54:1a:17:39:4e:82:fe:f7:77:
                    bf:f8:1e:0c:65:05:c6:10:a4:eb:7b:5f:1e:71:e5:
                    c2:c7:0f:7a:38:80:a0:76:9f:77:8a:2e:64:72:63:
                    9e:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:15:7F:64:C2:BD:00:21:CE:E1:EA:CB:2B:A6:14:CB:2C:EF:AF:6F
            X509v3 Authority Key Identifier:
                keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3230362e302f32342d3234203d3e20323030313035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.37.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:c7:ac:78:9d:b4:4b:5d:06:61:ee:7c:51:c9:86:93:8a:4e:
         35:69:22:72:c8:15:71:fa:c3:94:58:3a:16:3d:3c:6e:2f:40:
         ed:33:eb:74:dd:c2:a5:d0:fd:8d:98:78:95:c1:7e:1a:fb:1a:
         56:1c:a9:2b:2b:dc:03:e9:74:10:b3:c7:ac:6d:7e:d9:af:84:
         8a:49:4b:33:e7:a4:5a:57:6a:af:31:6a:f6:f1:ad:65:15:f9:
         06:96:7e:3c:d2:e0:c5:c3:df:b2:9c:d1:be:40:0e:16:ad:ce:
         69:5d:33:47:f8:6a:6d:e2:9d:ef:96:d1:6a:35:c0:22:eb:33:
         36:79:4b:a6:4a:ac:fd:c6:dd:ae:54:fb:4c:8a:6b:41:0a:ee:
         a4:0f:3f:be:1d:22:f4:c2:3f:ba:a2:45:8e:f5:55:9c:90:39:
         67:94:3e:5a:f2:45:d1:a9:3f:a3:a5:99:bc:17:7a:37:f7:af:
         99:79:97:35:e8:90:be:c3:43:3c:e6:a8:a7:c1:54:8c:ca:0c:
         f7:0c:b1:d6:57:ae:eb:73:3c:63:bc:eb:0e:d1:dd:2d:c9:e5:
         69:55:6b:03:bc:e9:da:2f:f9:05:d6:d2:cc:1e:5f:10:ab:30:
         03:18:57:6d:01:0e:bb:15:8b:3f:af:01:a0:72:f5:ae:62:21:
         50:b7:b4:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 22:04:06 2026 by rpki-client