Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/AS46450.roa
File:                     AS46450.roa (raw, json)
Hash identifier:          tIXEtAPLBIyJ6F7GHhJHcerYwgoWmycNHQR784GKx7M=
Subject key identifier:   6D:E5:B3:86:C4:E8:2C:0C:B8:B9:E6:02:08:2D:E8:B9:98:C7:27:F2
Certificate issuer:       /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
Certificate serial:       0862E009A43B906C2AB26B0DF81D9272E8CA4CDB
Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/AS46450.roa
Signing time:             Fri 10 Jul 2026 20:23:19 +0000
ROA not before:           Fri 10 Jul 2026 20:18:19 +0000
ROA not after:            Fri 09 Jul 2027 20:23:19 +0000
asID:                     46450
IP address blocks:        164.37.240.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl
                          rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Jul 2026 15:41:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:62:e0:09:a4:3b:90:6c:2a:b2:6b:0d:f8:1d:92:72:e8:ca:4c:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
        Validity
            Not Before: Jul 10 20:18:19 2026 GMT
            Not After : Jul  9 20:23:19 2027 GMT
        Subject: CN=6DE5B386C4E82C0CB8B9E602082DE8B998C727F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:53:d2:48:fa:9b:48:24:f0:55:ac:c3:3a:e8:
                    9b:0b:1e:55:b4:1d:ab:df:4e:0d:f3:6f:2f:36:d1:
                    bc:71:be:ba:ee:4f:b2:c3:10:49:67:45:9c:94:3d:
                    22:c6:9c:77:e8:03:ac:89:d5:af:b2:e9:ce:55:fe:
                    12:6f:aa:fc:76:43:09:87:67:fc:be:82:10:6e:82:
                    f8:0d:da:3a:55:84:78:f9:86:b9:51:81:3f:6b:ed:
                    99:43:f3:ba:99:6a:fa:aa:e1:b4:e8:6b:c2:5c:34:
                    c2:90:a8:be:02:43:3d:cf:14:77:58:69:e0:c8:06:
                    bd:45:1b:55:aa:1d:f8:ec:73:66:e7:f5:79:73:f1:
                    01:8b:9f:7a:c9:f0:31:54:0c:a9:ce:d2:a6:4f:46:
                    b9:24:bb:b2:c2:8f:9b:b3:75:fa:f9:eb:ca:52:5d:
                    4e:67:03:6c:f3:6b:2f:a0:d1:49:e0:c2:4f:33:a8:
                    60:f8:19:ae:69:fa:10:76:00:4b:e2:91:fd:72:b1:
                    23:4b:b3:b8:72:70:78:85:b6:e0:38:d0:9f:e1:d4:
                    89:93:55:24:0c:74:e1:3d:f0:11:4a:ad:d5:e2:85:
                    98:9c:04:db:ec:27:db:85:ed:27:42:da:b5:b2:26:
                    79:a8:bb:5f:03:b1:a7:29:ff:d4:28:4f:6f:9c:c3:
                    53:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:E5:B3:86:C4:E8:2C:0C:B8:B9:E6:02:08:2D:E8:B9:98:C7:27:F2
            X509v3 Authority Key Identifier:
                keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/AS46450.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.37.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         42:90:04:c6:cd:6a:13:18:07:5b:ba:cb:62:00:1b:93:0d:af:
         df:32:8d:1b:06:97:97:ef:a4:87:23:fd:1a:69:db:e2:f0:a6:
         f3:37:21:06:5b:01:40:5f:87:41:98:86:32:aa:83:e2:da:08:
         08:d7:af:fa:cc:7c:e1:ef:5c:b6:1e:d8:aa:6b:eb:c4:4b:de:
         f0:9b:3b:dd:fb:bd:f8:f0:c6:c9:4d:90:98:a0:0d:48:02:b2:
         ce:45:9a:a2:c1:a2:71:30:70:24:2a:13:8f:41:bf:82:11:cd:
         a9:65:62:59:36:40:18:ad:74:8e:54:af:3f:44:e5:ec:1f:6c:
         57:59:98:01:64:32:d5:bf:88:ef:14:5d:09:6b:d6:f1:c3:24:
         8a:2c:48:96:c8:a9:b6:7d:bb:47:57:11:be:a3:20:27:bb:75:
         4e:ac:06:7e:ab:8b:ff:75:2d:db:72:a3:f0:fc:17:83:1e:62:
         91:45:d7:a0:dc:97:19:29:9c:1a:05:c6:4a:36:fb:db:bd:82:
         92:05:f3:53:2d:1c:46:e0:90:fc:a0:7f:b7:3d:d4:4c:05:29:
         53:41:53:07:ec:0d:61:0a:37:64:b2:46:42:b3:4f:ed:b2:d3:
         9b:d2:04:2c:5a:ff:7e:c5:4f:4e:ee:da:62:71:2d:9f:4b:12:
         fe:76:e3:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:24:19 2026 by rpki-client