Route Origin Authorization

$ rpki-client -vvvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3231382e302f32342d3234203d3e2039333034.roa
File:                     3136342e33372e3231382e302f32342d3234203d3e2039333034.roa (raw, json)
Hash identifier:          TLpdeUAcZx3B2/g91GAqbJjgNnWMbsaeu0hS/BdUlQE=
Subject key identifier:   4B:5D:D0:82:46:06:D8:22:9A:69:09:00:1B:DF:C4:36:31:AA:9D:7F
Certificate issuer:       /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
Certificate serial:       1CCBF6DD5117D874A43C476D9ACFC4221EB757C4
Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3231382e302f32342d3234203d3e2039333034.roa
Signing time:             Mon 12 Oct 2026 00:02:07 +0000
ROA not before:           Sun 11 Oct 2026 23:57:07 +0000
ROA not after:            Mon 11 Oct 2027 00:02:07 +0000
asID:                     9304
IP address blocks:        164.37.218.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl
                          rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 18 Oct 2026 22:29:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:cb:f6:dd:51:17:d8:74:a4:3c:47:6d:9a:cf:c4:22:1e:b7:57:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
        Validity
            Not Before: Oct 11 23:57:07 2026 GMT
            Not After : Oct 11 00:02:07 2027 GMT
        Subject: CN=4B5DD0824606D8229A6909001BDFC43631AA9D7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:5f:4a:e0:b4:c8:ba:c6:95:8d:b7:c6:4e:d6:
                    29:31:9c:6e:f7:29:f7:ae:9c:13:8c:7f:0b:7b:d1:
                    5a:69:f7:00:c6:a0:f5:e7:a2:d1:ad:40:2c:39:22:
                    97:71:67:ac:81:bb:37:58:61:ff:44:b9:bb:75:09:
                    ac:d3:40:8d:a0:18:00:0d:0b:82:b6:74:d6:52:3b:
                    49:66:fa:e3:ca:cc:e3:93:87:6f:7e:dd:3a:da:35:
                    aa:06:98:97:23:f6:7d:dc:32:0f:c7:02:89:e9:c0:
                    40:0a:a7:04:fa:59:47:d5:46:28:e9:e9:5d:77:fd:
                    f4:e5:a2:c9:32:b1:f6:c5:9e:f2:c6:dd:a6:1b:33:
                    54:d3:57:07:eb:9e:6b:ce:97:7d:b8:8f:89:c5:00:
                    33:bb:55:f6:51:c9:68:84:99:10:ba:28:91:4c:22:
                    43:fe:44:77:6d:b2:94:6b:d7:4a:3c:60:76:27:a4:
                    85:bf:35:c8:58:21:c0:a3:6a:f4:b4:c1:a8:b6:39:
                    0f:7f:9d:ff:c8:e4:5c:01:96:82:ba:7f:04:c0:39:
                    e4:6b:85:28:f6:a2:19:b9:17:43:4f:c9:80:ed:ab:
                    ca:28:29:7d:de:e8:1d:4b:cf:74:cf:84:05:3f:9f:
                    db:2e:34:df:6b:25:46:af:e1:f0:c6:e4:ab:17:8c:
                    3f:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:5D:D0:82:46:06:D8:22:9A:69:09:00:1B:DF:C4:36:31:AA:9D:7F
            X509v3 Authority Key Identifier:
                keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3231382e302f32342d3234203d3e2039333034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.37.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:bf:13:7e:d0:84:f9:8c:6e:8d:cf:06:ed:16:3e:1c:30:c0:
         b1:b1:f1:10:7d:1b:d3:bc:ec:16:c1:f4:1f:9d:fd:47:d7:b5:
         80:1d:77:26:52:53:8e:22:5b:7f:ae:9f:f9:38:f5:27:d5:90:
         45:d6:12:01:d6:83:97:a4:4d:90:cd:52:1b:13:7a:1a:1f:f6:
         53:54:32:c5:62:bf:4f:f9:40:e1:0f:2f:c4:ad:d2:b6:ee:38:
         3e:d3:89:e2:8b:16:12:46:cf:dc:a7:cc:37:81:53:b2:67:ac:
         d7:df:b9:1f:aa:c5:7a:03:74:79:0f:58:a3:a7:12:a9:8d:6a:
         0c:e0:e9:31:c5:f5:44:15:a8:00:ee:20:5e:ca:1d:71:0e:05:
         78:5e:44:a9:95:be:9a:a6:0d:f1:bc:da:00:e3:9b:a9:39:71:
         d3:f6:32:e7:1f:0b:60:f1:4e:58:4b:71:10:64:5b:78:f9:0c:
         e9:ed:60:9a:d5:d6:43:af:f6:4f:76:f6:9c:8a:39:0e:68:8e:
         67:d1:32:97:be:ce:7d:53:cf:3a:f7:7f:77:ec:e0:64:e7:2e:
         ae:e6:13:60:f8:ca:55:0d:13:ba:76:8e:ac:d8:a2:d0:56:6a:
         6b:aa:d7:86:6d:16:02:e1:ca:88:0e:6f:09:87:38:11:0b:39:
         1a:89:6e:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 07:29:31 2026 by rpki-client