Route Origin Authorization

$ rpki-client -vvvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3233302e302f32342d3234203d3e20313437323831.roa
File:                     3136342e33372e3233302e302f32342d3234203d3e20313437323831.roa (raw, json)
Hash identifier:          sTx4Z/2lE4o2duXghkFyxWZ7Ju127dhDgjLDZk+NzZQ=
Subject key identifier:   96:72:00:47:E6:53:15:30:05:B7:DC:84:6E:C9:F3:8A:F5:6A:D4:72
Certificate issuer:       /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
Certificate serial:       783B2550DA1D32BAAD32D972E5ECF033DEFFDD6A
Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3233302e302f32342d3234203d3e20313437323831.roa
Signing time:             Wed 12 Aug 2026 06:41:01 +0000
ROA not before:           Wed 12 Aug 2026 06:36:01 +0000
ROA not after:            Wed 11 Aug 2027 06:41:01 +0000
asID:                     147281
IP address blocks:        164.37.230.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl
                          rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 15:54:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:3b:25:50:da:1d:32:ba:ad:32:d9:72:e5:ec:f0:33:de:ff:dd:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
        Validity
            Not Before: Aug 12 06:36:01 2026 GMT
            Not After : Aug 11 06:41:01 2027 GMT
        Subject: CN=96720047E653153005B7DC846EC9F38AF56AD472
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:43:25:30:01:cf:a5:74:28:b2:ed:1c:51:6e:
                    09:5b:e2:45:eb:b0:45:4b:d1:38:f3:30:bd:e5:df:
                    7e:66:f2:12:49:1b:32:de:86:30:60:ee:f8:10:f1:
                    95:1e:3c:10:85:bf:06:1a:2b:50:e3:94:2f:00:26:
                    52:99:97:3f:d3:ef:f4:49:47:0a:de:f2:cf:bf:5e:
                    aa:2c:5c:4d:3b:be:3e:8f:56:e0:41:d8:c8:44:c6:
                    67:6e:b5:bf:f2:29:3f:72:b4:a5:98:c2:10:d7:0e:
                    05:67:29:85:49:52:4b:ea:df:f1:fe:4b:b2:6a:60:
                    98:76:4f:14:61:d7:6a:b1:02:b7:cb:89:5d:eb:e0:
                    9f:1c:93:da:cc:6b:78:30:d6:fe:23:22:7d:9b:69:
                    fd:3b:cf:21:9b:af:5d:22:c5:d7:97:6b:17:5b:fd:
                    2e:2a:a8:fa:33:6a:c8:6f:83:10:c2:52:be:20:0e:
                    ff:40:34:81:9e:2c:93:ac:3d:b2:7b:ae:ad:a2:f7:
                    e0:22:17:5a:88:0f:99:21:2a:63:cd:25:88:e3:f8:
                    b5:e7:0e:73:4a:0e:00:fe:63:a5:a5:b6:53:a4:27:
                    f4:81:a7:f2:73:d1:6c:0b:58:77:04:30:2b:22:27:
                    68:48:b3:e0:7e:66:5a:5e:71:b2:03:20:57:c7:87:
                    fe:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:72:00:47:E6:53:15:30:05:B7:DC:84:6E:C9:F3:8A:F5:6A:D4:72
            X509v3 Authority Key Identifier:
                keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3233302e302f32342d3234203d3e20313437323831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.37.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:28:e6:67:9c:22:3e:dd:95:0d:8f:a2:59:65:3e:89:81:8d:
         87:d6:61:c1:ee:f0:73:63:a6:0b:18:cb:4c:53:9f:cb:01:05:
         c9:74:0d:7b:cb:3a:b7:dc:53:6d:c5:17:54:15:9c:2b:4f:65:
         db:b0:1b:e0:0e:bd:eb:50:8e:c8:88:24:d3:b6:21:be:c0:b8:
         49:f2:7c:ce:5c:b0:cd:7f:e6:e0:b9:6b:49:0b:02:1d:25:98:
         4c:b3:68:47:1d:42:06:b9:25:9e:ac:04:eb:67:61:44:22:eb:
         df:0a:24:c8:3d:75:15:25:ef:74:ca:af:bf:c2:5a:3e:fe:ba:
         c0:4b:fc:60:f9:76:91:4e:b9:4e:c9:14:9f:08:b7:cb:2c:d9:
         a0:7f:42:af:0a:0f:44:8d:b9:dc:57:85:47:8d:96:ca:b6:e1:
         52:dd:d3:b0:b9:05:79:0d:fd:ed:84:f0:8d:b0:2e:41:30:26:
         77:f7:59:28:4b:27:a1:76:6a:90:8e:94:44:86:e4:af:06:65:
         af:28:33:2a:eb:a2:18:30:cd:81:fe:34:d9:2f:75:ad:8b:43:
         7e:8a:fb:6b:1b:52:56:51:84:01:bf:97:9b:64:7a:b1:21:d7:
         12:8b:bc:b2:dc:2d:ff:9c:3b:c7:ba:a1:70:99:11:f7:b8:42:
         40:d9:ec:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 02:05:07 2026 by rpki-client