Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3233312e302f32342d3234203d3e20383334.roa
File:                     3136342e33372e3233312e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          X+Lp2G3giPz5RFCg6WHhiLyLUUVYLcruks4HNh5Glgw=
Subject key identifier:   F0:4D:78:AF:08:01:AD:9D:2D:E6:D2:A5:D2:49:66:BA:9E:C7:55:16
Certificate issuer:       /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
Certificate serial:       6B31C156ADB1A8F556EB126D9BD446834A836651
Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3233312e302f32342d3234203d3e20383334.roa
Signing time:             Wed 12 Aug 2026 06:41:26 +0000
ROA not before:           Wed 12 Aug 2026 06:36:26 +0000
ROA not after:            Wed 11 Aug 2027 06:41:26 +0000
asID:                     834
IP address blocks:        164.37.231.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl
                          rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Aug 2026 06:28:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:31:c1:56:ad:b1:a8:f5:56:eb:12:6d:9b:d4:46:83:4a:83:66:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
        Validity
            Not Before: Aug 12 06:36:26 2026 GMT
            Not After : Aug 11 06:41:26 2027 GMT
        Subject: CN=F04D78AF0801AD9D2DE6D2A5D24966BA9EC75516
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:93:eb:54:ef:fa:a2:41:e9:95:3d:a2:cb:de:
                    09:b1:6d:75:eb:d1:76:4b:98:bc:1a:97:03:fe:2b:
                    13:f5:b3:77:50:67:e8:ad:64:a8:ec:97:4e:94:96:
                    13:22:09:47:8f:57:84:a9:19:ce:7b:5b:2e:5c:91:
                    30:40:cd:98:19:42:08:0a:c3:99:9e:78:c3:fd:83:
                    5e:4c:3f:86:fd:db:25:fa:20:32:76:ec:c0:e8:62:
                    5a:57:4c:21:ac:0d:57:4c:35:53:7b:34:d1:62:63:
                    d6:bc:63:04:d9:41:9b:34:df:bf:24:6a:74:ee:1e:
                    20:fa:ed:32:e4:e0:73:94:e7:bc:4f:76:02:f3:81:
                    e1:38:aa:cf:66:93:e6:ba:ab:3c:e8:23:db:56:2b:
                    e1:6d:dd:c9:a8:04:a6:f6:d5:28:02:d1:d1:74:c9:
                    e2:be:38:ec:1d:dc:9a:38:01:72:a9:e9:a8:2c:86:
                    f8:c7:05:0e:00:77:a5:7b:7a:ad:84:69:7b:78:77:
                    c1:41:a8:21:2f:4a:6f:06:c8:80:de:66:1d:fb:10:
                    4d:03:b8:ed:1e:47:04:aa:4e:79:e0:bd:dd:dc:0d:
                    1d:a2:26:17:0b:9d:b7:53:7e:1a:e2:2b:73:67:44:
                    8a:bd:36:e4:96:d9:9b:56:3a:f5:06:08:93:fe:7c:
                    b6:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:4D:78:AF:08:01:AD:9D:2D:E6:D2:A5:D2:49:66:BA:9E:C7:55:16
            X509v3 Authority Key Identifier:
                keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3233312e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.37.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:53:00:56:1e:6f:30:e5:ad:a2:da:af:3d:9a:41:f5:84:53:
         1b:29:88:7e:05:56:12:f7:75:56:17:b3:9d:5d:27:b6:f1:88:
         27:e6:e1:a1:93:a9:21:51:26:0b:c3:9d:3b:16:ba:86:64:ec:
         5a:5f:fe:59:ad:60:81:28:4a:55:26:24:8c:db:b6:87:7c:5c:
         ec:21:96:54:74:51:ce:3e:c9:b5:91:47:b5:ed:f2:31:c9:3b:
         92:6c:c2:2d:8b:66:2d:5a:c0:b5:5a:73:eb:bd:7c:e9:43:83:
         8d:da:72:cf:de:ff:48:06:12:f9:d3:86:b0:cc:99:eb:8c:86:
         b5:45:0c:fc:d9:c5:4f:80:19:53:86:c2:a5:27:2f:35:49:f4:
         54:6d:71:d1:a7:13:c1:ff:f7:d7:e5:fd:26:af:fc:c9:14:e5:
         7a:d5:ce:36:69:a5:ba:a6:39:68:20:47:fa:92:cb:3e:64:bf:
         ef:81:cb:df:ed:c1:34:81:83:3d:84:7f:53:20:f2:81:8a:3d:
         46:a7:ec:cd:06:8b:6e:d5:81:bf:39:ae:da:03:96:3f:ac:76:
         f2:d6:18:ad:5b:0f:f9:b1:4c:9e:07:a2:b9:ff:59:3d:24:2a:
         be:87:63:79:33:05:ac:a1:f2:83:e0:f3:72:53:8f:27:9c:e4:
         8c:07:01:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 12:19:32 2026 by rpki-client