Route Origin Authorization

$ rpki-client -vvvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3233362e302f32342d3234203d3e20323138393739.roa
File:                     3136342e33372e3233362e302f32342d3234203d3e20323138393739.roa (raw, json)
Hash identifier:          1P7Bev7F3DNlUPwaSKAv/UNYaFzQT5hrB0JtSRKIGrA=
Subject key identifier:   C1:3B:6B:42:C5:6B:62:8F:E5:AE:B2:A6:EF:1B:F8:34:66:A5:34:D6
Certificate issuer:       /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
Certificate serial:       49A6B8C899B394ED345656AE055FFB78FE58902E
Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3233362e302f32342d3234203d3e20323138393739.roa
Signing time:             Fri 21 Aug 2026 06:47:35 +0000
ROA not before:           Fri 21 Aug 2026 06:42:35 +0000
ROA not after:            Fri 20 Aug 2027 06:47:35 +0000
asID:                     218979
IP address blocks:        164.37.236.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl
                          rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 04 Sep 2026 07:42:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:a6:b8:c8:99:b3:94:ed:34:56:56:ae:05:5f:fb:78:fe:58:90:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
        Validity
            Not Before: Aug 21 06:42:35 2026 GMT
            Not After : Aug 20 06:47:35 2027 GMT
        Subject: CN=C13B6B42C56B628FE5AEB2A6EF1BF83466A534D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:0d:ea:ae:ed:ba:77:da:4d:10:92:10:6c:a2:
                    8c:81:fb:90:ae:db:7f:16:94:43:e3:ea:37:14:bf:
                    ab:70:bd:e6:1f:fe:d6:72:4e:70:3d:e5:de:20:8a:
                    e8:19:d9:1b:85:9a:47:24:17:6b:46:29:2d:fe:a4:
                    e5:94:20:36:a1:f4:15:f3:44:73:18:02:b0:d1:e1:
                    51:40:3f:4c:d2:62:8e:4d:75:d2:be:b4:5b:a6:83:
                    1b:a2:0f:e0:93:92:31:93:9e:c5:90:fe:2d:cb:a6:
                    0d:4f:06:95:0e:9a:8b:02:d4:b4:96:d1:6e:7b:9d:
                    94:03:5a:7c:f4:b8:c8:1d:34:a4:67:e6:ee:6d:7d:
                    0e:36:fe:83:6a:d6:c7:7b:b3:32:1b:a9:56:7c:35:
                    16:96:6c:47:0f:78:eb:06:0f:68:5b:a8:77:5e:4b:
                    9e:bd:47:03:a0:66:68:aa:3b:4c:85:c1:79:2b:40:
                    1e:77:2a:07:74:aa:a9:be:83:96:af:27:cc:8f:aa:
                    09:0b:37:35:30:cb:4e:bf:f7:46:ba:35:dd:4a:4b:
                    f0:74:f1:32:52:de:12:d4:33:95:09:88:91:c9:e8:
                    a6:37:ad:3e:0b:f9:b9:a3:5e:05:85:47:a7:d9:6f:
                    5c:58:50:85:d4:49:75:30:1f:4c:0c:6a:22:5f:d1:
                    de:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:3B:6B:42:C5:6B:62:8F:E5:AE:B2:A6:EF:1B:F8:34:66:A5:34:D6
            X509v3 Authority Key Identifier:
                keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3233362e302f32342d3234203d3e20323138393739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.37.236.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:7b:e4:0e:c9:f1:24:71:bd:c2:99:0d:73:c7:b4:2f:9a:de:
         e9:d7:c7:3b:92:0d:8a:65:47:7d:d9:6e:2f:63:99:ef:f1:f8:
         a2:b6:f8:d5:23:ef:6c:fb:c4:48:94:96:a3:7f:36:df:09:73:
         07:42:83:8b:92:3e:f1:81:33:a0:77:e6:50:3b:5e:07:fa:5d:
         7d:2a:b7:9b:89:4c:d5:ed:17:3e:e0:6a:e7:61:8d:33:48:94:
         34:37:23:b1:d6:dc:f9:4f:92:1b:01:85:88:bf:ee:86:73:cd:
         84:0a:c1:03:94:96:ed:fe:63:5a:6d:88:8a:2f:a8:33:44:79:
         4f:ca:80:06:00:74:e6:ab:ad:0e:f5:63:fa:e9:60:a1:0c:83:
         2b:88:4e:e7:4e:70:1c:36:66:bc:00:34:25:08:b2:6a:e7:b6:
         14:80:c8:2e:7d:1c:e9:53:db:1f:37:bc:64:87:fb:2d:47:2b:
         9f:5d:a2:c0:ee:1e:29:88:d8:a6:2a:88:2e:62:d0:55:6d:e4:
         1f:d6:6a:8f:60:77:3c:2e:6b:59:03:54:7d:a6:72:1b:5f:d7:
         b4:36:14:dd:79:31:a7:56:fa:4f:b7:8c:8c:70:1d:67:b7:a2:
         60:6e:c8:43:ca:f6:2f:2f:30:dd:96:12:a8:32:71:e2:9e:9e:
         47:ab:e4:9b
-----BEGIN CERTIFICATE-----
MIIFWjCCBEKgAwIBAgIUSaa4yJmzlO00VlauBV/7eP5YkC4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjM1NEQzMjhDQkJGRDFFRjNDRDI5MjY4QTIzQjBGQ0M2
MEUzQTJDNTAeFw0yNjA4MjEwNjQyMzVaFw0yNzA4MjAwNjQ3MzVaMDMxMTAvBgNV
BAMTKEMxM0I2QjQyQzU2QjYyOEZFNUFFQjJBNkVGMUJGODM0NjZBNTM0RDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcDequ7bp32k0QkhBsooyB+5Cu
238WlEPj6jcUv6twveYf/tZyTnA95d4giugZ2RuFmkckF2tGKS3+pOWUIDah9BXz
RHMYArDR4VFAP0zSYo5NddK+tFumgxuiD+CTkjGTnsWQ/i3Lpg1PBpUOmosC1LSW
0W57nZQDWnz0uMgdNKRn5u5tfQ42/oNq1sd7szIbqVZ8NRaWbEcPeOsGD2hbqHde
S569RwOgZmiqO0yFwXkrQB53Kgd0qqm+g5avJ8yPqgkLNzUwy06/90a6Nd1KS/B0
8TJS3hLUM5UJiJHJ6KY3rT4L+bmjXgWFR6fZb1xYUIXUSXUwH0wMaiJf0d5bAgMB
AAGjggJkMIICYDAdBgNVHQ4EFgQUwTtrQsVrYo/lrrKm7xv4NGalNNYwHwYDVR0j
BBgwFoAUs1TTKMu/0e880pJoojsPzGDjosUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
YTAzNzViMzktZjk0OS00Y2I1LWI1MTktZjk0MDA4YjE2NTRjLTAvMC9CMzU0RDMy
OENCQkZEMUVGM0NEMjkyNjhBMjNCMEZDQzYwRTNBMkM1LmNybDCBngYIKwYBBQUH
AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5LzYxNzA4YTZiLTZjM2EtNDBhMC1hMzAyLTU5NWVj
YzE3ODQ4Yy8wL0IzNTREMzI4Q0JCRkQxRUYzQ0QyOTI2OEEyM0IwRkNDNjBFM0Ey
QzUuY2VyMIGmBggrBgEFBQcBCwSBmTCBljCBkwYIKwYBBQUHMAuGgYZyc3luYzov
L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9hMDM3NWIzOS1mOTQ5LTRjYjUtYjUx
OS1mOTQwMDhiMTY1NGMtMC8wLzMxMzYzNDJlMzMzNzJlMzIzMzM2MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzIzMTM4MzkzNzM5LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApCXsMA0GCSqG
SIb3DQEBCwUAA4IBAQBHe+QOyfEkcb3CmQ1zx7Qvmt7p18c7kg2KZUd92W4vY5nv
8fiitvjVI+9s+8RIlJajfzbfCXMHQoOLkj7xgTOgd+ZQO14H+l19KrebiUzV7Rc+
4GrnYY0zSJQ0NyOx1tz5T5IbAYWIv+6Gc82ECsEDlJbt/mNabYiKL6gzRHlPyoAG
AHTmq60O9WP66WChDIMriE7nTnAcNma8ADQlCLJq57YUgMgufRzpU9sfN7xkh/st
RyufXaLA7h4piNimKoguYtBVbeQf1mqPYHc8LmtZA1R9pnIbX9e0NhTdeTGnVvpP
t4yMcB1nt6JgbshDyvYvLzDdlhKoMnHinp5Hq+Sb
-----END CERTIFICATE-----
Generated at Thu Sep 3 12:55:56 2026 by rpki-client