Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3233372e302f32342d3234203d3e20313531333839.roa
File:                     3136342e33372e3233372e302f32342d3234203d3e20313531333839.roa (raw, json)
Hash identifier:          m4NBn/FwtwSWl6hnV1mojDuU+skwXaXmkiwjhQmuwic=
Subject key identifier:   EA:25:3C:F3:77:2C:1C:D3:94:B4:39:9E:AC:EA:41:36:9D:C9:E6:EF
Certificate issuer:       /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
Certificate serial:       1A3DF509A904DAC9382CBF959F3ED416ED5F8047
Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3233372e302f32342d3234203d3e20313531333839.roa
Signing time:             Sun 28 Jun 2026 12:18:13 +0000
ROA not before:           Sun 28 Jun 2026 12:13:13 +0000
ROA not after:            Sun 27 Jun 2027 12:18:13 +0000
asID:                     151389
IP address blocks:        164.37.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl
                          rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 Jul 2026 09:45:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:3d:f5:09:a9:04:da:c9:38:2c:bf:95:9f:3e:d4:16:ed:5f:80:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
        Validity
            Not Before: Jun 28 12:13:13 2026 GMT
            Not After : Jun 27 12:18:13 2027 GMT
        Subject: CN=EA253CF3772C1CD394B4399EACEA41369DC9E6EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:a9:13:1f:bd:47:df:6c:03:26:d2:65:3b:ed:
                    9b:8d:c9:fe:49:31:50:d0:37:81:41:3f:5f:24:9a:
                    e5:9b:a5:75:b2:62:b5:b4:21:b5:7b:44:9b:4a:76:
                    80:a7:a5:7e:c9:c9:37:f4:ce:05:24:56:31:0b:44:
                    7f:db:dd:f8:15:34:50:7c:e8:e0:c2:1b:20:e0:2e:
                    19:63:fe:1c:93:69:27:75:56:06:67:e2:e8:22:31:
                    53:af:57:f5:00:92:7d:72:a3:c0:56:f8:45:23:7b:
                    af:50:af:1e:fd:b6:f6:ac:cb:6c:02:ed:64:00:cf:
                    dd:fd:0d:a1:73:0d:bd:69:80:51:bd:01:31:82:f9:
                    da:9e:91:15:98:4b:14:4f:48:af:0e:75:80:e9:8b:
                    74:8e:97:6a:63:38:6c:e7:53:db:b2:88:e8:4e:f3:
                    c1:55:47:84:97:bc:f1:f0:7c:f5:20:0d:1c:62:a3:
                    79:b9:66:70:73:18:2f:54:dc:1a:9c:ae:26:ec:04:
                    aa:fb:d0:ba:38:7c:ff:dd:59:bd:a9:bf:8b:1d:15:
                    1a:0e:7d:a6:44:38:8a:a7:78:4c:05:b5:6c:a6:27:
                    38:c0:8a:0d:04:e2:56:e4:d8:e7:c0:e0:cb:20:da:
                    8d:f1:d9:69:1c:33:99:99:c1:01:e0:d9:fa:83:41:
                    ee:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:25:3C:F3:77:2C:1C:D3:94:B4:39:9E:AC:EA:41:36:9D:C9:E6:EF
            X509v3 Authority Key Identifier:
                keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3233372e302f32342d3234203d3e20313531333839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.37.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:2a:8f:7b:b8:36:78:d1:8f:b4:e1:cc:c3:a3:b5:4a:ba:29:
         eb:53:79:1d:99:83:7d:a4:60:36:f2:d0:33:43:02:64:13:12:
         6a:2b:4c:21:90:63:a3:37:ae:3b:53:be:fb:6c:55:67:4d:8f:
         8f:1f:62:98:f6:44:22:31:ef:e7:15:40:f4:14:9a:c6:13:e7:
         4e:34:73:2a:1e:d7:77:ac:b4:6e:94:3d:7e:18:4b:28:e2:3c:
         75:e6:f4:53:96:ae:44:dd:67:f1:24:97:85:68:57:0c:3b:ce:
         66:b7:ba:b9:f8:47:d2:68:7e:16:a6:fc:82:e5:f7:7d:d8:8e:
         ea:5a:ca:81:2a:10:f5:10:66:b7:27:84:6e:7e:6b:bb:0b:5f:
         00:02:7c:23:f5:23:21:d9:71:4f:d9:ee:c9:05:d2:5c:72:a1:
         87:50:77:fe:35:81:30:dd:db:9e:bf:45:3f:2e:43:a3:da:ef:
         db:03:85:69:ba:9e:55:f6:d9:08:8b:2b:c8:d3:9e:ac:a7:d8:
         34:9c:52:7a:27:73:8b:62:0a:0c:ba:a1:d9:ee:99:fe:01:8c:
         e1:d3:0d:8c:ff:fa:fb:3c:69:01:c4:dc:b0:9a:02:70:bc:26:
         cb:8e:87:63:37:20:00:4e:82:31:61:d6:0c:0e:17:d9:0e:5e:
         dd:45:e5:e2
-----BEGIN CERTIFICATE-----
MIIFWjCCBEKgAwIBAgIUGj31CakE2sk4LL+Vnz7UFu1fgEcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjM1NEQzMjhDQkJGRDFFRjNDRDI5MjY4QTIzQjBGQ0M2
MEUzQTJDNTAeFw0yNjA2MjgxMjEzMTNaFw0yNzA2MjcxMjE4MTNaMDMxMTAvBgNV
BAMTKEVBMjUzQ0YzNzcyQzFDRDM5NEI0Mzk5RUFDRUE0MTM2OURDOUU2RUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgqRMfvUffbAMm0mU77ZuNyf5J
MVDQN4FBP18kmuWbpXWyYrW0IbV7RJtKdoCnpX7JyTf0zgUkVjELRH/b3fgVNFB8
6ODCGyDgLhlj/hyTaSd1VgZn4ugiMVOvV/UAkn1yo8BW+EUje69Qrx79tvasy2wC
7WQAz939DaFzDb1pgFG9ATGC+dqekRWYSxRPSK8OdYDpi3SOl2pjOGznU9uyiOhO
88FVR4SXvPHwfPUgDRxio3m5ZnBzGC9U3BqcribsBKr70Lo4fP/dWb2pv4sdFRoO
faZEOIqneEwFtWymJzjAig0E4lbk2OfA4Msg2o3x2WkcM5mZwQHg2fqDQe5JAgMB
AAGjggJkMIICYDAdBgNVHQ4EFgQU6iU883csHNOUtDmerOpBNp3J5u8wHwYDVR0j
BBgwFoAUs1TTKMu/0e880pJoojsPzGDjosUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
YTAzNzViMzktZjk0OS00Y2I1LWI1MTktZjk0MDA4YjE2NTRjLTAvMC9CMzU0RDMy
OENCQkZEMUVGM0NEMjkyNjhBMjNCMEZDQzYwRTNBMkM1LmNybDCBngYIKwYBBQUH
AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5LzYxNzA4YTZiLTZjM2EtNDBhMC1hMzAyLTU5NWVj
YzE3ODQ4Yy8wL0IzNTREMzI4Q0JCRkQxRUYzQ0QyOTI2OEEyM0IwRkNDNjBFM0Ey
QzUuY2VyMIGmBggrBgEFBQcBCwSBmTCBljCBkwYIKwYBBQUHMAuGgYZyc3luYzov
L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9hMDM3NWIzOS1mOTQ5LTRjYjUtYjUx
OS1mOTQwMDhiMTY1NGMtMC8wLzMxMzYzNDJlMzMzNzJlMzIzMzM3MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNTMxMzMzODM5LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApCXtMA0GCSqG
SIb3DQEBCwUAA4IBAQAVKo97uDZ40Y+04czDo7VKuinrU3kdmYN9pGA28tAzQwJk
ExJqK0whkGOjN647U777bFVnTY+PH2KY9kQiMe/nFUD0FJrGE+dONHMqHtd3rLRu
lD1+GEso4jx15vRTlq5E3WfxJJeFaFcMO85mt7q5+EfSaH4WpvyC5fd92I7qWsqB
KhD1EGa3J4Rufmu7C18AAnwj9SMh2XFP2e7JBdJccqGHUHf+NYEw3duev0U/LkOj
2u/bA4Vpup5V9tkIiyvI056sp9g0nFJ6J3OLYgoMuqHZ7pn+AYzh0w2M//r7PGkB
xNywmgJwvCbLjodjNyAAToIxYdYMDhfZDl7dReXi
-----END CERTIFICATE-----
Generated at Tue Jul 7 02:21:46 2026 by rpki-client