Route Origin Authorization

$ rpki-client -vvvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3232372e302f32342d3234203d3e20343032363433.roa
File:                     3136342e33372e3232372e302f32342d3234203d3e20343032363433.roa (raw, json)
Hash identifier:          J37qwM/a9OMwnqS0jmte8gs0b//RUbALv65nPp+Mdiw=
Subject key identifier:   A7:F2:00:A8:9F:78:43:1E:F8:3D:CB:FB:C6:3E:15:C1:8F:8F:62:B0
Certificate issuer:       /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
Certificate serial:       092C1F2DFD57B867D01E878F41B0F404EBAE0A2A
Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3232372e302f32342d3234203d3e20343032363433.roa
Signing time:             Sat 08 Aug 2026 15:40:55 +0000
ROA not before:           Sat 08 Aug 2026 15:35:55 +0000
ROA not after:            Sat 07 Aug 2027 15:40:55 +0000
asID:                     402643
IP address blocks:        164.37.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl
                          rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 01 Sep 2026 21:38:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:2c:1f:2d:fd:57:b8:67:d0:1e:87:8f:41:b0:f4:04:eb:ae:0a:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
        Validity
            Not Before: Aug  8 15:35:55 2026 GMT
            Not After : Aug  7 15:40:55 2027 GMT
        Subject: CN=A7F200A89F78431EF83DCBFBC63E15C18F8F62B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:38:9e:c4:35:7a:d7:5f:d9:e3:c6:79:30:7f:
                    3b:82:b1:de:fe:d8:96:63:52:fa:f4:e9:4e:da:a5:
                    62:98:c9:e8:47:82:a1:b3:f7:c9:e6:c0:c7:00:94:
                    aa:46:66:a3:f5:ae:7e:21:49:af:71:5c:18:8d:4c:
                    b6:f0:bb:05:21:45:34:a1:d9:c2:29:91:5d:05:a4:
                    a3:aa:1b:23:53:ac:c7:9b:6f:59:a2:73:60:a7:6c:
                    19:de:23:ed:45:a6:2a:5e:e1:af:8a:0b:6d:39:e3:
                    39:3c:97:12:ac:f1:45:33:8c:f7:91:79:5a:b8:d6:
                    57:d2:37:0b:01:dc:13:4f:e4:35:86:1a:d6:bd:87:
                    07:4d:52:b6:a2:aa:af:cf:6c:db:17:a4:ad:65:80:
                    1a:e5:ea:07:2d:b0:05:e7:1a:ba:39:0f:fa:c5:e1:
                    70:ad:b4:91:1f:ab:1c:31:ce:8f:e4:9c:09:bc:1f:
                    ef:a3:e8:ed:76:88:07:06:a8:4c:17:79:a5:b7:69:
                    ac:23:78:e8:0f:23:fe:41:d9:58:71:73:21:00:20:
                    1b:33:8b:4d:5e:f0:ae:50:3f:ba:8d:47:30:9b:6f:
                    ea:89:23:f1:f7:05:ec:5a:10:11:23:54:78:e9:91:
                    5b:94:b3:1f:8d:5c:53:d5:34:fd:4f:ee:7f:d2:91:
                    fb:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:F2:00:A8:9F:78:43:1E:F8:3D:CB:FB:C6:3E:15:C1:8F:8F:62:B0
            X509v3 Authority Key Identifier:
                keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3232372e302f32342d3234203d3e20343032363433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.37.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:8b:1e:eb:0e:08:92:02:bb:de:40:8a:37:08:57:12:f8:28:
         52:da:b9:8c:df:9c:99:71:49:58:06:a0:4c:d3:c7:f4:33:67:
         f4:22:8f:99:38:7e:e0:f7:71:bd:40:43:e9:23:a4:55:0d:b0:
         f2:bc:45:7d:c9:29:77:6c:6b:a7:31:8d:c2:26:99:9e:1f:51:
         48:1d:79:33:c7:f1:f8:72:bb:c8:eb:04:6c:74:5d:fe:7b:75:
         d1:c8:a4:3a:6b:4d:ed:9c:1d:10:59:32:29:2f:78:df:7d:a2:
         b3:7c:f9:71:40:8c:bd:97:f9:c8:f3:07:8f:c4:b3:58:23:62:
         0f:9f:26:cf:47:83:e6:bc:92:79:6f:7b:c0:fd:6a:f3:0e:a9:
         83:60:33:d1:d1:34:87:60:54:f3:81:3f:96:78:c9:36:a4:74:
         cf:c8:c9:82:3e:f5:69:97:a5:ae:10:32:93:3a:31:63:e5:c7:
         ae:3b:f6:08:b1:d4:b1:33:a4:a2:99:9f:59:fd:ee:df:b4:52:
         38:37:12:1d:bf:0e:38:27:19:18:2d:17:2e:92:8a:23:f5:9c:
         96:44:6d:9a:2f:0c:a1:a8:48:e7:ab:5d:da:5d:cb:c3:de:90:
         9a:df:e4:10:24:14:38:3d:33:e4:ac:c5:4c:0f:26:d8:c4:66:
         3a:80:2b:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 04:56:34 2026 by rpki-client