Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/AS154612.roa
File:                     AS154612.roa (raw, json)
Hash identifier:          fXoCuXsxD4hpj1PZsRqmKRJpN0yvQrIw2Zt5A9EY6+E=
Subject key identifier:   5B:8E:A3:7B:4E:15:8C:47:FC:78:0F:21:A2:7E:04:B9:C6:FA:9B:8B
Certificate issuer:       /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
Certificate serial:       01D9F7773AFBEE02A2C29676F667A2D57AF21F2E
Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/AS154612.roa
Signing time:             Fri 10 Jul 2026 20:23:19 +0000
ROA not before:           Fri 10 Jul 2026 20:18:19 +0000
ROA not after:            Fri 09 Jul 2027 20:23:19 +0000
asID:                     154612
IP address blocks:        164.37.201.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl
                          rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Jul 2026 15:41:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:d9:f7:77:3a:fb:ee:02:a2:c2:96:76:f6:67:a2:d5:7a:f2:1f:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
        Validity
            Not Before: Jul 10 20:18:19 2026 GMT
            Not After : Jul  9 20:23:19 2027 GMT
        Subject: CN=5B8EA37B4E158C47FC780F21A27E04B9C6FA9B8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:25:3b:8e:e7:97:98:c5:a9:4a:27:d6:09:c4:
                    e3:12:ae:0d:42:3d:2b:ce:3e:48:a7:ab:b4:e7:a1:
                    a2:a6:04:65:25:0a:f7:df:b2:aa:93:63:d0:53:65:
                    7a:28:a4:70:f4:3b:ae:0e:d1:f0:a1:37:74:98:51:
                    4c:ef:ad:04:35:6b:0e:a7:3b:bb:a2:f2:3e:88:76:
                    18:1a:32:22:53:7a:3e:09:17:a2:3f:ba:28:d4:74:
                    c1:bf:e0:7e:49:78:e2:45:88:bd:42:0f:cd:4b:3c:
                    7b:d1:be:5c:7a:64:b8:ca:42:bb:75:e8:91:60:1d:
                    22:99:c1:72:c6:53:89:4d:05:c3:3c:a5:cd:cb:8d:
                    8e:98:e9:fe:c3:66:84:2b:53:5c:a4:ff:14:3b:94:
                    34:81:9d:a2:79:b5:55:f1:af:4f:a8:ae:5e:d3:e1:
                    0c:33:e6:44:fa:22:bb:d9:21:17:58:d7:4a:ae:5c:
                    63:da:e2:82:93:63:e6:fa:3f:93:54:91:cf:d9:1f:
                    cf:7e:d6:86:c1:68:43:9a:59:cd:0c:b2:6d:06:25:
                    48:e3:d8:d5:f4:19:45:40:68:6e:9c:35:da:22:7a:
                    7a:79:ff:25:9e:8a:b7:c8:a6:1a:8d:76:a8:c1:f7:
                    8b:f9:b4:45:81:0c:9c:9c:26:61:81:4b:51:59:8c:
                    e6:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:8E:A3:7B:4E:15:8C:47:FC:78:0F:21:A2:7E:04:B9:C6:FA:9B:8B
            X509v3 Authority Key Identifier:
                keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/AS154612.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.37.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:1e:da:35:f1:85:8a:81:12:ca:3e:3d:2b:6b:d3:02:ee:41:
         5f:85:a3:0f:02:53:17:b9:06:ff:ed:80:13:a5:f4:1d:51:aa:
         9b:fe:cd:7d:cf:9d:36:dd:98:85:fb:52:fe:7a:67:f9:a0:f3:
         ef:7b:f3:87:b8:ab:6f:98:d4:d9:e8:48:70:49:9c:7d:c6:b9:
         90:b0:21:57:78:d7:3d:67:8c:14:18:44:f6:09:ac:8b:1a:31:
         39:0c:9d:8d:bf:67:cf:65:85:c7:de:ab:0a:a9:ec:94:e0:99:
         d1:a6:d0:ae:64:56:9f:e2:6a:2d:79:9b:ae:5d:cf:7e:42:c5:
         67:68:25:7d:d5:b5:0f:33:f5:81:90:a2:7e:fb:46:40:c1:d7:
         59:89:e0:ed:61:25:a6:85:34:3b:2c:ee:d6:10:9d:e5:95:1e:
         b5:36:3e:72:9a:c5:3a:cf:13:32:f4:9c:cf:9b:a2:c0:22:0c:
         dc:e4:de:83:2c:70:0f:50:f0:fd:30:30:2a:b3:3d:8e:ab:8c:
         4a:0d:0e:5a:46:43:82:a6:8d:75:63:81:14:33:3c:4c:5e:47:
         c9:fb:5a:a6:2a:8d:8a:a7:e1:47:cc:f5:90:85:0f:82:e9:42:
         d0:17:05:22:17:45:31:77:cb:01:3e:c6:0f:af:15:60:2b:fc:
         0f:5f:ee:e8
-----BEGIN CERTIFICATE-----
MIIFJTCCBA2gAwIBAgIUAdn3dzr77gKiwpZ29mei1XryHy4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjM1NEQzMjhDQkJGRDFFRjNDRDI5MjY4QTIzQjBGQ0M2
MEUzQTJDNTAeFw0yNjA3MTAyMDE4MTlaFw0yNzA3MDkyMDIzMTlaMDMxMTAvBgNV
BAMTKDVCOEVBMzdCNEUxNThDNDdGQzc4MEYyMUEyN0UwNEI5QzZGQTlCOEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwJTuO55eYxalKJ9YJxOMSrg1C
PSvOPkinq7TnoaKmBGUlCvffsqqTY9BTZXoopHD0O64O0fChN3SYUUzvrQQ1aw6n
O7ui8j6IdhgaMiJTej4JF6I/uijUdMG/4H5JeOJFiL1CD81LPHvRvlx6ZLjKQrt1
6JFgHSKZwXLGU4lNBcM8pc3LjY6Y6f7DZoQrU1yk/xQ7lDSBnaJ5tVXxr0+orl7T
4Qwz5kT6IrvZIRdY10quXGPa4oKTY+b6P5NUkc/ZH89+1obBaEOaWc0Msm0GJUjj
2NX0GUVAaG6cNdoienp5/yWeirfIphqNdqjB94v5tEWBDJycJmGBS1FZjOZLAgMB
AAGjggIvMIICKzAdBgNVHQ4EFgQUW46je04VjEf8eA8hon4Eucb6m4swHwYDVR0j
BBgwFoAUs1TTKMu/0e880pJoojsPzGDjosUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
YTAzNzViMzktZjk0OS00Y2I1LWI1MTktZjk0MDA4YjE2NTRjLTAvMC9CMzU0RDMy
OENCQkZEMUVGM0NEMjkyNjhBMjNCMEZDQzYwRTNBMkM1LmNybDCBngYIKwYBBQUH
AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5LzYxNzA4YTZiLTZjM2EtNDBhMC1hMzAyLTU5NWVj
YzE3ODQ4Yy8wL0IzNTREMzI4Q0JCRkQxRUYzQ0QyOTI2OEEyM0IwRkNDNjBFM0Ey
QzUuY2VyMHIGCCsGAQUFBwELBGYwZDBiBggrBgEFBQcwC4ZWcnN5bmM6Ly9yLm1h
Z2VsbGFuLmlweG8uY29tL3JlcG8vYTAzNzViMzktZjk0OS00Y2I1LWI1MTktZjk0
MDA4YjE2NTRjLTAvMC9BUzE1NDYxMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKQlyTANBgkqhkiG9w0B
AQsFAAOCAQEAgB7aNfGFioESyj49K2vTAu5BX4WjDwJTF7kG/+2AE6X0HVGqm/7N
fc+dNt2YhftS/npn+aDz73vzh7irb5jU2ehIcEmcfca5kLAhV3jXPWeMFBhE9gms
ixoxOQydjb9nz2WFx96rCqnslOCZ0abQrmRWn+JqLXmbrl3PfkLFZ2glfdW1DzP1
gZCifvtGQMHXWYng7WElpoU0Oyzu1hCd5ZUetTY+cprFOs8TMvScz5uiwCIM3OTe
gyxwD1Dw/TAwKrM9jquMSg0OWkZDgqaNdWOBFDM8TF5HyftapiqNiqfhR8z1kIUP
gulC0BcFIhdFMXfLAT7GD68VYCv8D1/u6A==
-----END CERTIFICATE-----
Generated at Sat Jul 18 03:24:21 2026 by rpki-client