Route Origin Authorization

$ rpki-client -vvvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3233382e302f32342d3234203d3e20323138383639.roa
File:                     3136342e33372e3233382e302f32342d3234203d3e20323138383639.roa (raw, json)
Hash identifier:          OjYnyp9bv64DKM0PRO6PzEQc8eExc+8ZZZJIVkLUzN4=
Subject key identifier:   4C:5E:C5:6C:55:79:49:3B:4F:0D:34:D7:07:66:5E:2C:C9:44:B0:5B
Certificate issuer:       /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
Certificate serial:       5A9F276D1721A6CEFAADBF8BA52E57A7A25302BE
Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3233382e302f32342d3234203d3e20323138383639.roa
Signing time:             Sun 30 Aug 2026 04:56:12 +0000
ROA not before:           Sun 30 Aug 2026 04:51:12 +0000
ROA not after:            Sun 29 Aug 2027 04:56:12 +0000
asID:                     218869
IP address blocks:        164.37.238.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl
                          rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 03 Sep 2026 18:02:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:9f:27:6d:17:21:a6:ce:fa:ad:bf:8b:a5:2e:57:a7:a2:53:02:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
        Validity
            Not Before: Aug 30 04:51:12 2026 GMT
            Not After : Aug 29 04:56:12 2027 GMT
        Subject: CN=4C5EC56C5579493B4F0D34D707665E2CC944B05B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:d4:ca:5b:6d:ba:56:01:18:4d:ac:dc:01:43:
                    f5:63:11:0c:03:0a:1a:ba:87:35:b5:e2:58:89:3a:
                    41:14:b2:d7:eb:ac:6d:00:af:0d:98:79:71:aa:c5:
                    c9:16:e8:7a:34:eb:5c:f1:a5:34:d2:72:c7:19:d5:
                    e2:2a:12:24:73:39:79:a0:7c:d5:04:ed:79:b1:30:
                    22:59:8a:2b:c6:24:87:6d:5f:ed:bc:dd:e6:2d:07:
                    7f:3f:73:7b:81:42:4f:16:22:b4:78:17:74:08:e5:
                    94:a8:9a:91:00:df:64:ba:e2:42:99:f1:62:24:05:
                    a2:f0:40:28:cb:22:6e:f1:b3:f1:ce:77:da:b4:30:
                    9d:ec:b6:df:39:9f:b6:57:bc:3b:e6:bb:6d:2a:ec:
                    48:92:10:1a:ea:29:91:d8:8b:3f:7b:39:df:55:66:
                    75:f4:65:3e:e7:2c:f6:e0:cd:d9:75:85:98:ab:fa:
                    a8:d2:ef:3d:56:59:66:8f:fd:3c:70:09:ff:22:37:
                    0c:6d:63:0e:9e:9e:40:bd:7e:50:09:c6:2f:aa:a7:
                    f2:17:a5:c3:88:1a:f2:59:42:c1:cc:0a:6d:3a:91:
                    7c:2c:cb:48:62:cc:9a:a6:23:0b:74:6e:8b:0f:06:
                    ff:ea:41:4e:c4:fd:47:62:af:6b:97:d1:eb:17:78:
                    61:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:5E:C5:6C:55:79:49:3B:4F:0D:34:D7:07:66:5E:2C:C9:44:B0:5B
            X509v3 Authority Key Identifier:
                keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3233382e302f32342d3234203d3e20323138383639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.37.238.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:7c:79:ad:0a:ab:c7:15:03:02:08:b8:11:d5:e0:25:a1:d6:
         9c:07:5e:ee:0d:00:25:5b:0f:f9:98:23:fe:82:ac:6d:42:d9:
         18:fc:60:c5:c5:61:99:a6:44:65:84:3a:77:95:3f:29:be:3b:
         3f:df:9b:0d:53:47:6f:ab:7d:13:b4:6b:94:3d:04:00:06:b7:
         7c:9b:fc:e4:98:5d:72:b8:da:cd:fb:91:97:bb:f3:68:42:c9:
         68:e1:d1:96:ff:e1:c9:0d:fe:b5:08:af:10:42:09:8b:0b:48:
         41:82:75:ae:63:a8:f6:40:16:50:58:61:3a:47:ce:c8:ff:0d:
         cf:71:d7:c6:a8:58:78:37:fe:22:ab:cb:f1:7d:3f:87:52:a6:
         88:45:a1:4f:08:8e:2f:78:7c:2c:f5:82:92:a1:f0:ba:52:57:
         26:99:24:f0:83:33:37:99:f2:78:a0:13:24:cd:65:0a:c4:ce:
         5c:e8:38:39:5c:48:42:23:e6:31:24:31:3a:3a:6a:49:c5:a9:
         8a:1b:c0:04:51:88:85:01:73:77:c2:d5:cf:b3:96:bb:ec:92:
         cc:0b:ad:2b:a8:40:c1:54:32:9a:ff:2c:0c:03:7e:b7:26:d7:
         f6:de:24:4c:40:a1:3c:ee:a2:49:0e:02:36:9d:56:6d:0a:ee:
         be:f3:32:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 09:21:40 2026 by rpki-client