Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/AS402257.roa
File:                     AS402257.roa (raw, json)
Hash identifier:          Aus7zb31e+z3HkzONN4snCNskr7NMcNwBSNT3YZpKe4=
Subject key identifier:   5F:BD:3B:02:AA:E4:2D:75:4E:F7:DC:3F:0E:D0:24:70:CD:38:35:E3
Certificate issuer:       /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
Certificate serial:       13F807E24A0A07A713C914317193135FC462272E
Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/AS402257.roa
Signing time:             Fri 10 Jul 2026 20:23:18 +0000
ROA not before:           Fri 10 Jul 2026 20:18:18 +0000
ROA not after:            Fri 09 Jul 2027 20:23:18 +0000
asID:                     402257
IP address blocks:        164.37.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl
                          rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Jul 2026 15:41:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:f8:07:e2:4a:0a:07:a7:13:c9:14:31:71:93:13:5f:c4:62:27:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
        Validity
            Not Before: Jul 10 20:18:18 2026 GMT
            Not After : Jul  9 20:23:18 2027 GMT
        Subject: CN=5FBD3B02AAE42D754EF7DC3F0ED02470CD3835E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:48:0e:8c:77:bc:f0:0f:e2:89:27:15:88:7f:
                    7b:95:82:70:5b:90:16:95:79:c0:81:ae:1a:43:3d:
                    24:6d:6a:07:97:b9:83:bd:b8:53:21:c3:6c:b4:dd:
                    7d:a5:b1:88:d1:54:13:e1:03:8d:be:60:1f:af:e3:
                    85:78:69:79:64:e7:00:d6:aa:a8:5e:78:a1:60:82:
                    f3:1e:a7:de:44:88:5e:14:c1:93:5d:75:f5:95:41:
                    36:7f:c4:5c:5a:dc:8f:bb:31:5e:31:e4:36:35:75:
                    c2:28:d5:47:16:a4:ab:05:75:b2:b7:fa:1f:bd:e1:
                    ba:cc:19:3c:d0:bf:f6:1e:1c:12:e0:fc:44:ac:14:
                    5f:33:14:72:19:a0:c4:fc:80:05:a0:36:e8:9c:89:
                    7b:60:fb:fc:0e:7d:7a:d0:13:52:5d:d9:16:ac:15:
                    78:53:11:e1:92:bd:be:96:26:8f:42:0a:24:c8:b6:
                    7b:02:cb:2b:82:2e:b1:6d:b5:fa:4e:12:6d:34:e8:
                    dd:8f:3d:85:12:05:f5:c7:f1:71:e6:8d:1a:9b:cc:
                    f9:96:3f:15:6e:67:46:ab:a3:d5:10:93:0a:22:76:
                    b0:6b:f5:a6:20:c3:1c:59:c1:85:b5:eb:fa:15:bc:
                    a8:2f:c4:98:49:ae:36:03:30:5f:41:84:21:e3:c6:
                    9d:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:BD:3B:02:AA:E4:2D:75:4E:F7:DC:3F:0E:D0:24:70:CD:38:35:E3
            X509v3 Authority Key Identifier:
                keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/AS402257.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.37.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:e3:21:24:66:87:12:37:a2:09:1a:c2:98:63:62:2c:3a:b1:
         3d:29:95:c5:54:69:cd:e9:8f:71:93:ab:dc:0c:c0:18:dd:86:
         09:d4:4e:d3:68:f9:00:fa:17:7b:0c:62:29:93:77:0b:63:77:
         72:54:a3:2e:3e:6f:4b:e5:b4:b9:16:98:77:41:fc:2e:e8:5b:
         10:02:6c:8c:8c:a6:74:01:f2:b1:ea:01:51:38:d6:05:4b:31:
         f7:3c:6c:da:10:6a:cd:c3:19:78:2b:79:22:69:15:70:7a:3a:
         56:76:c1:f1:97:8b:58:8a:b4:d4:b7:e6:7d:36:35:40:2b:d0:
         73:19:c6:c7:da:ad:75:5a:d2:9c:73:3a:36:c9:ba:70:62:56:
         86:83:53:52:6d:76:2c:16:83:74:91:28:fe:8b:da:7c:85:fb:
         a2:bd:0d:bf:82:7a:f8:0f:30:e9:20:2f:ab:ff:a8:37:2c:b7:
         86:89:42:a2:36:bd:29:2c:f1:b6:94:34:cc:53:ae:3f:09:67:
         91:15:52:6b:94:3e:cd:ff:c3:51:10:36:e8:84:d1:1b:a5:c1:
         14:0e:32:15:98:94:88:fb:61:58:69:5a:83:49:14:fa:4b:78:
         8e:1c:9c:3a:59:d7:f7:27:dc:53:8b:21:48:30:07:87:ce:af:
         d3:37:89:44
-----BEGIN CERTIFICATE-----
MIIFJTCCBA2gAwIBAgIUE/gH4koKB6cTyRQxcZMTX8RiJy4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjM1NEQzMjhDQkJGRDFFRjNDRDI5MjY4QTIzQjBGQ0M2
MEUzQTJDNTAeFw0yNjA3MTAyMDE4MThaFw0yNzA3MDkyMDIzMThaMDMxMTAvBgNV
BAMTKDVGQkQzQjAyQUFFNDJENzU0RUY3REMzRjBFRDAyNDcwQ0QzODM1RTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoSA6Md7zwD+KJJxWIf3uVgnBb
kBaVecCBrhpDPSRtageXuYO9uFMhw2y03X2lsYjRVBPhA42+YB+v44V4aXlk5wDW
qqheeKFggvMep95EiF4UwZNddfWVQTZ/xFxa3I+7MV4x5DY1dcIo1UcWpKsFdbK3
+h+94brMGTzQv/YeHBLg/ESsFF8zFHIZoMT8gAWgNuiciXtg+/wOfXrQE1Jd2Ras
FXhTEeGSvb6WJo9CCiTItnsCyyuCLrFttfpOEm006N2PPYUSBfXH8XHmjRqbzPmW
PxVuZ0aro9UQkwoidrBr9aYgwxxZwYW16/oVvKgvxJhJrjYDMF9BhCHjxp2NAgMB
AAGjggIvMIICKzAdBgNVHQ4EFgQUX707AqrkLXVO99w/DtAkcM04NeMwHwYDVR0j
BBgwFoAUs1TTKMu/0e880pJoojsPzGDjosUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
YTAzNzViMzktZjk0OS00Y2I1LWI1MTktZjk0MDA4YjE2NTRjLTAvMC9CMzU0RDMy
OENCQkZEMUVGM0NEMjkyNjhBMjNCMEZDQzYwRTNBMkM1LmNybDCBngYIKwYBBQUH
AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5LzYxNzA4YTZiLTZjM2EtNDBhMC1hMzAyLTU5NWVj
YzE3ODQ4Yy8wL0IzNTREMzI4Q0JCRkQxRUYzQ0QyOTI2OEEyM0IwRkNDNjBFM0Ey
QzUuY2VyMHIGCCsGAQUFBwELBGYwZDBiBggrBgEFBQcwC4ZWcnN5bmM6Ly9yLm1h
Z2VsbGFuLmlweG8uY29tL3JlcG8vYTAzNzViMzktZjk0OS00Y2I1LWI1MTktZjk0
MDA4YjE2NTRjLTAvMC9BUzQwMjI1Ny5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKQlzzANBgkqhkiG9w0B
AQsFAAOCAQEAAOMhJGaHEjeiCRrCmGNiLDqxPSmVxVRpzemPcZOr3AzAGN2GCdRO
02j5APoXewxiKZN3C2N3clSjLj5vS+W0uRaYd0H8LuhbEAJsjIymdAHyseoBUTjW
BUsx9zxs2hBqzcMZeCt5ImkVcHo6VnbB8ZeLWIq01LfmfTY1QCvQcxnGx9qtdVrS
nHM6Nsm6cGJWhoNTUm12LBaDdJEo/ovafIX7or0Nv4J6+A8w6SAvq/+oNyy3holC
oja9KSzxtpQ0zFOuPwlnkRVSa5Q+zf/DURA26ITRG6XBFA4yFZiUiPthWGlag0kU
+kt4jhycOlnX9yfcU4shSDAHh86v0zeJRA==
-----END CERTIFICATE-----
Generated at Sat Jul 18 03:24:19 2026 by rpki-client