Route Origin Authorization

$ rpki-client -vvvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3232372e302f32342d3234203d3e2039333034.roa
File:                     3136342e33372e3232372e302f32342d3234203d3e2039333034.roa (raw, json)
Hash identifier:          8MazjbNEoF2o9i8vtsfostsOVzk1tkPG+4sMU0nFwg8=
Subject key identifier:   B1:CF:B8:E2:F9:A5:EF:62:6A:94:AB:A8:47:71:EF:AB:A3:B3:88:E2
Certificate issuer:       /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
Certificate serial:       39DEC4DE47CD20622E17FBF4A07300F99E24E0
Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3232372e302f32342d3234203d3e2039333034.roa
Signing time:             Mon 12 Oct 2026 00:02:07 +0000
ROA not before:           Sun 11 Oct 2026 23:57:07 +0000
ROA not after:            Mon 11 Oct 2027 00:02:07 +0000
asID:                     9304
IP address blocks:        164.37.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl
                          rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 18 Oct 2026 22:29:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:de:c4:de:47:cd:20:62:2e:17:fb:f4:a0:73:00:f9:9e:24:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
        Validity
            Not Before: Oct 11 23:57:07 2026 GMT
            Not After : Oct 11 00:02:07 2027 GMT
        Subject: CN=B1CFB8E2F9A5EF626A94ABA84771EFABA3B388E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:07:65:cc:7c:53:d5:63:6d:89:81:1d:f3:dd:
                    8d:0b:07:f2:c1:f1:11:56:a5:cf:c1:a2:e6:1b:d8:
                    52:e9:1c:a3:8b:75:f9:48:b9:d6:b4:91:76:b1:85:
                    ee:96:ce:92:37:57:bb:38:8c:99:78:e1:a3:a8:dd:
                    8b:c6:f5:f6:b6:a9:5d:06:06:c2:ec:a7:8a:af:f8:
                    fb:d0:cc:b4:cb:69:76:87:e1:0c:60:94:84:eb:96:
                    f2:88:43:0b:06:b8:33:86:e8:02:4f:d7:fd:7c:a4:
                    1a:28:ba:d4:a1:d0:18:6a:d8:30:60:22:13:61:35:
                    60:a9:3c:84:e9:07:45:48:8c:36:35:55:1d:24:24:
                    ad:b7:24:3a:e7:50:f7:5b:23:67:d5:ed:fa:fb:36:
                    e1:ae:e6:ba:3f:8b:33:c3:a9:24:2a:d4:49:e2:3e:
                    69:3a:84:2a:cd:a3:b2:ee:3e:61:bd:4f:24:cd:e8:
                    0f:cb:07:2e:f8:f4:06:b1:90:14:d2:9b:62:98:c8:
                    b9:f4:fa:d4:ea:f6:b9:ac:81:f5:f5:f8:8f:ca:86:
                    cf:c9:34:bf:98:c5:5a:a7:52:c7:21:25:af:d4:be:
                    76:fa:3b:a2:90:c3:42:d7:fb:d5:54:d7:84:6d:03:
                    0e:7c:1d:80:b1:d0:82:96:15:31:70:8f:56:1f:1a:
                    f1:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:CF:B8:E2:F9:A5:EF:62:6A:94:AB:A8:47:71:EF:AB:A3:B3:88:E2
            X509v3 Authority Key Identifier:
                keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3232372e302f32342d3234203d3e2039333034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.37.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:fe:8f:53:bd:03:39:34:77:42:41:3c:dd:27:c7:32:db:47:
         0a:ce:3b:67:75:70:c8:82:47:64:be:84:76:61:61:bd:50:93:
         25:05:ab:89:47:2b:72:ea:33:cf:ec:4d:21:4c:34:d6:85:e2:
         65:74:b2:4b:7e:c8:c9:e0:2d:8c:ec:d1:b6:c7:cc:b7:e7:94:
         65:1f:2e:3e:59:db:1e:5e:75:15:ff:e1:34:61:6f:c6:d9:e0:
         e3:26:31:cc:27:da:3d:89:32:94:c8:f9:15:05:7d:26:f2:e5:
         51:0d:df:2f:35:15:fe:9a:2d:b4:9a:52:a8:e5:cc:2a:cd:ad:
         21:e2:70:29:e9:bb:ed:7a:53:3c:f8:f8:87:cd:c8:43:b1:a3:
         f6:f8:fc:4a:a7:bb:2a:13:f5:f2:8b:98:4e:55:9a:db:7f:b3:
         1a:9c:33:fd:cc:64:f6:59:dc:f8:fd:a3:fe:0c:0b:bb:f8:55:
         18:d1:4b:11:80:3f:79:cd:ea:99:72:eb:0d:ed:56:07:90:06:
         76:f0:9b:d3:5d:72:40:43:4f:50:13:10:9e:3a:38:40:63:15:
         e1:b0:95:8e:62:bd:23:dd:b0:3c:d9:f0:d1:e8:a8:3c:cd:4e:
         45:cc:8f:13:27:15:72:64:81:04:2f:67:16:f0:a6:52:67:5f:
         d9:59:32:37
-----BEGIN CERTIFICATE-----
MIIFVTCCBD2gAwIBAgITOd7E3kfNIGIuF/v0oHMA+Z4k4DANBgkqhkiG9w0BAQsF
ADAzMTEwLwYDVQQDEyhCMzU0RDMyOENCQkZEMUVGM0NEMjkyNjhBMjNCMEZDQzYw
RTNBMkM1MB4XDTI2MTAxMTIzNTcwN1oXDTI3MTAxMTAwMDIwN1owMzExMC8GA1UE
AxMoQjFDRkI4RTJGOUE1RUY2MjZBOTRBQkE4NDc3MUVGQUJBM0IzODhFMjCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMgHZcx8U9VjbYmBHfPdjQsH8sHx
EValz8Gi5hvYUukco4t1+Ui51rSRdrGF7pbOkjdXuziMmXjho6jdi8b19rapXQYG
wuyniq/4+9DMtMtpdofhDGCUhOuW8ohDCwa4M4boAk/X/XykGii61KHQGGrYMGAi
E2E1YKk8hOkHRUiMNjVVHSQkrbckOudQ91sjZ9Xt+vs24a7muj+LM8OpJCrUSeI+
aTqEKs2jsu4+Yb1PJM3oD8sHLvj0BrGQFNKbYpjIufT61Or2uayB9fX4j8qGz8k0
v5jFWqdSxyElr9S+dvo7opDDQtf71VTXhG0DDnwdgLHQgpYVMXCPVh8a8TsCAwEA
AaOCAmAwggJcMB0GA1UdDgQWBBSxz7ji+aXvYmqUq6hHce+ro7OI4jAfBgNVHSME
GDAWgBSzVNMoy7/R7zzSkmiiOw/MYOOixTAOBgNVHQ8BAf8EBAMCB4AwgYgGA1Ud
HwSBgDB+MHygeqB4hnZyc3luYzovL3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9h
MDM3NWIzOS1mOTQ5LTRjYjUtYjUxOS1mOTQwMDhiMTY1NGMtMC8wL0IzNTREMzI4
Q0JCRkQxRUYzQ0QyOTI2OEEyM0IwRkNDNjBFM0EyQzUuY3JsMIGeBggrBgEFBQcB
AQSBkTCBjjCBiwYIKwYBBQUHMAKGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJp
cGUubmV0L3JlcG9zaXRvcnkvNjE3MDhhNmItNmMzYS00MGEwLWEzMDItNTk1ZWNj
MTc4NDhjLzAvQjM1NEQzMjhDQkJGRDFFRjNDRDI5MjY4QTIzQjBGQ0M2MEUzQTJD
NS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8v
ci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvL2EwMzc1YjM5LWY5NDktNGNiNS1iNTE5
LWY5NDAwOGIxNjU0Yy0wLzAvMzEzNjM0MmUzMzM3MmUzMjMyMzcyZTMwMmYzMjM0
MmQzMjM0MjAzZDNlMjAzOTMzMzAzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKQl4zANBgkqhkiG9w0B
AQsFAAOCAQEAev6PU70DOTR3QkE83SfHMttHCs47Z3VwyIJHZL6EdmFhvVCTJQWr
iUcrcuozz+xNIUw01oXiZXSyS37IyeAtjOzRtsfMt+eUZR8uPlnbHl51Ff/hNGFv
xtng4yYxzCfaPYkylMj5FQV9JvLlUQ3fLzUV/pottJpSqOXMKs2tIeJwKem77XpT
PPj4h83IQ7Gj9vj8Sqe7KhP18ouYTlWa23+zGpwz/cxk9lnc+P2j/gwLu/hVGNFL
EYA/ec3qmXLrDe1WB5AGdvCb011yQENPUBMQnjo4QGMV4bCVjmK9I92wPNnw0eio
PM1ORcyPEycVcmSBBC9nFvCmUmdf2VkyNw==
-----END CERTIFICATE-----
Generated at Sun Oct 18 07:29:48 2026 by rpki-client