Route Origin Authorization

$ rpki-client -vvvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e312e3233302e302f32342d3234203d3e20313938353636.roa
File:                     33372e312e3233302e302f32342d3234203d3e20313938353636.roa (raw, json)
Hash identifier:          eYxs3FPCLme59PMQw07iIa/M4v9s4Ln3D8cdP23CPrM=
Subject key identifier:   7B:B5:08:C4:EB:E2:1E:19:CF:32:32:36:62:42:78:DB:EA:98:A2:66
Certificate issuer:       /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial:       77F6067445BDC3B1C049F01FA83C1D6C65E409B1
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e312e3233302e302f32342d3234203d3e20313938353636.roa
Signing time:             Thu 08 Oct 2026 14:21:19 +0000
ROA not before:           Thu 08 Oct 2026 14:16:19 +0000
ROA not after:            Thu 07 Oct 2027 14:21:19 +0000
asID:                     198566
IP address blocks:        37.1.230.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
                          rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 21 Oct 2026 15:08:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:f6:06:74:45:bd:c3:b1:c0:49:f0:1f:a8:3c:1d:6c:65:e4:09:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
        Validity
            Not Before: Oct  8 14:16:19 2026 GMT
            Not After : Oct  7 14:21:19 2027 GMT
        Subject: CN=7BB508C4EBE21E19CF323236624278DBEA98A266
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:2e:ea:07:4c:5e:e4:1f:46:af:5a:3a:3f:1f:
                    db:27:1a:33:7d:5f:7b:39:83:95:c3:f4:60:ee:14:
                    fe:5e:49:0f:e4:04:71:bc:6b:0c:0c:46:58:b4:30:
                    93:9e:6f:ab:8d:fa:2e:36:d3:56:4c:a8:69:0b:58:
                    ca:1f:5c:53:09:8e:e0:40:27:d2:11:b3:4e:32:a8:
                    b9:ac:dc:9a:80:fd:63:c8:a7:47:0a:9c:63:e0:e7:
                    13:43:19:00:4a:72:fe:f1:d0:bb:4a:ec:78:23:b5:
                    16:ae:10:bf:f7:b0:29:e4:9e:52:53:30:06:95:43:
                    29:a8:c4:87:80:10:a7:89:bf:f0:c0:3e:71:f0:3d:
                    12:4e:4b:a6:41:a6:62:64:26:9d:56:e5:21:61:a7:
                    a4:e3:42:8e:61:25:00:c0:d8:1a:c7:91:b8:c2:95:
                    2f:24:d9:32:25:d1:54:04:ce:27:59:53:7d:53:d4:
                    8a:f4:b2:5c:b2:2f:58:04:64:76:96:ee:03:77:d5:
                    df:34:8e:c9:8b:49:02:67:b6:fc:ea:c3:73:a2:d8:
                    13:40:92:4c:d3:6c:80:ef:40:a8:72:33:93:df:6f:
                    79:d7:71:54:0f:c8:bd:f2:f8:c0:68:f8:c3:64:65:
                    d0:28:ef:9e:de:b3:4b:45:a2:c9:4c:6d:df:bc:2e:
                    06:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:B5:08:C4:EB:E2:1E:19:CF:32:32:36:62:42:78:DB:EA:98:A2:66
            X509v3 Authority Key Identifier:
                keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e312e3233302e302f32342d3234203d3e20313938353636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.1.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:98:1d:1a:d7:36:78:95:eb:f6:d1:c7:2a:1c:2e:b5:f2:31:
         29:01:f6:d4:7c:e1:c9:ce:0e:dc:64:85:4a:2c:81:1c:5b:25:
         a9:24:2e:ad:07:28:90:30:e4:fb:4e:bd:be:a1:c8:86:19:ec:
         9f:53:8c:99:bf:f2:88:1c:13:3d:81:7d:85:f4:f6:25:45:2c:
         ea:cf:46:16:c5:62:31:e3:8c:e4:90:3f:90:e0:c9:b8:e7:3b:
         af:a9:fe:16:27:4b:7e:36:21:ec:5a:fe:01:28:b8:41:ad:27:
         c0:24:47:de:43:73:d4:e6:5f:20:2d:ec:1e:86:f6:dc:38:dc:
         23:31:8a:b0:82:f4:f4:82:a5:51:39:d3:1b:62:75:51:66:03:
         df:2a:87:b8:9b:10:2f:13:93:3d:1f:e0:da:0d:84:16:82:6a:
         4f:ee:57:fc:95:b9:42:ba:b9:b4:bd:f1:96:10:08:a7:a4:57:
         bf:c3:6e:19:f1:fc:9d:82:f2:5a:67:32:fd:0f:f9:da:25:c9:
         e5:92:2c:ef:6d:ad:ae:0c:2c:38:a4:26:96:da:a8:7b:a6:96:
         4a:77:ec:e1:b6:24:91:fb:9d:ef:c2:b1:44:a7:0e:70:56:20:
         0c:b6:b6:f4:af:79:29:c1:e4:51:d0:3a:59:1b:60:04:a7:94:
         ce:0f:34:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----