Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS395374.roa
File:                     AS395374.roa (raw, json)
Hash identifier:          g8rpfUbFN+cz26SmmzhJPEqne31GtrAr7KTgkUwB0XM=
Subject key identifier:   10:B6:4A:09:A8:29:B7:6F:8A:61:86:BF:94:6F:88:6D:91:A0:74:77
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       6CF41DE0DDEE9C18DD74EF89C60EA699F650B79D
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS395374.roa
Signing time:             Fri 27 Jun 2025 09:44:26 +0000
ROA not before:           Fri 27 Jun 2025 09:39:26 +0000
ROA not after:            Fri 26 Jun 2026 09:44:26 +0000
asID:                     395374
IP address blocks:        89.116.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
                          rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 02 Jul 2025 08:57:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:f4:1d:e0:dd:ee:9c:18:dd:74:ef:89:c6:0e:a6:99:f6:50:b7:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: Jun 27 09:39:26 2025 GMT
            Not After : Jun 26 09:44:26 2026 GMT
        Subject: CN=10B64A09A829B76F8A6186BF946F886D91A07477
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:f5:d9:f2:f8:5b:a1:cd:2f:1b:2a:07:93:45:
                    08:f8:5a:ed:db:67:4f:29:58:00:37:9a:26:98:91:
                    9d:eb:fe:9d:03:13:2e:63:c5:71:54:f9:fe:03:96:
                    5d:81:8a:75:e6:63:39:aa:0b:8f:67:b4:b2:f8:6d:
                    9b:55:61:7d:cc:20:6f:6b:2c:66:ac:c1:41:6a:cd:
                    39:94:22:10:50:fe:f1:e5:b4:98:82:62:82:6d:8e:
                    5b:90:e8:35:10:32:86:93:c2:48:85:2d:81:13:5f:
                    be:2e:03:36:8a:76:f1:54:54:a0:0c:52:78:3b:19:
                    52:a5:fe:8b:52:1a:34:6d:ab:b2:5d:2d:78:fc:ed:
                    77:42:73:d9:cf:91:a2:06:7f:62:ec:0a:85:05:ad:
                    12:8e:d2:64:5f:ee:cf:30:21:2f:27:3b:e8:a0:d2:
                    42:d9:e3:ce:b8:8d:8e:b7:db:cf:a5:f1:f2:5a:14:
                    a2:48:61:5c:e2:84:a5:b6:00:ae:67:d6:9b:b7:45:
                    0a:49:06:8b:8b:ac:55:12:5c:0d:f3:4c:64:38:54:
                    59:7b:45:e2:47:a6:f6:00:31:65:a8:b7:63:84:4c:
                    a4:40:f4:5a:23:0d:8d:39:10:a6:5a:5f:fd:98:76:
                    00:92:50:08:96:7b:22:72:65:ec:bb:3e:0a:15:65:
                    fe:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:B6:4A:09:A8:29:B7:6F:8A:61:86:BF:94:6F:88:6D:91:A0:74:77
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS395374.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.116.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:9c:b0:d5:96:8b:f6:d2:09:91:45:0a:d1:0c:83:b8:f9:03:
         98:4b:bb:3b:ed:16:19:f5:09:06:85:45:dd:90:f4:0e:3a:12:
         1d:51:42:dd:e7:01:0a:57:21:0c:1c:3e:1d:70:bd:e4:91:e3:
         27:ed:f0:e2:bd:7d:ef:85:8c:c9:3b:d2:d9:51:65:f4:70:b3:
         b2:6d:d2:d7:39:51:fe:bb:16:f6:df:93:fc:bd:7c:c2:f3:cc:
         7c:21:f0:7b:7a:49:a1:2d:23:77:3a:c6:45:af:6c:41:b5:24:
         be:ff:ac:fd:70:e1:53:ce:27:3f:ea:34:5c:13:2c:1b:63:04:
         9a:53:04:3f:ec:4d:f6:11:bb:0c:01:a2:93:29:3d:31:a1:54:
         22:07:f0:c7:64:b2:2a:a6:ed:1e:25:9c:93:52:84:42:88:4d:
         12:18:d6:7b:71:8d:de:bd:50:51:08:ef:a6:5f:e3:00:6d:3b:
         1e:80:5b:ea:0d:3b:20:98:b0:75:df:10:dd:72:d4:fd:d3:17:
         e8:5e:2b:29:47:2b:7f:68:82:43:b7:5f:b8:f6:be:ee:42:81:
         a6:a1:48:00:0a:6e:75:3b:52:ed:c8:74:fd:47:2f:94:3c:9d:
         82:b5:d1:cf:0d:2e:24:dc:cf:a5:b2:b9:07:81:58:ae:29:18:
         0f:2f:22:1f
-----BEGIN CERTIFICATE-----
MIIFJTCCBA2gAwIBAgIUbPQd4N3unBjddO+Jxg6mmfZQt50wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDM0NjA2OTQ5RDM4NURCNDI3MTRGRTcxMjc0RkFDOTk0
OEVGMjc5QzAeFw0yNTA2MjcwOTM5MjZaFw0yNjA2MjYwOTQ0MjZaMDMxMTAvBgNV
BAMTKDEwQjY0QTA5QTgyOUI3NkY4QTYxODZCRjk0NkY4ODZEOTFBMDc0NzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCL9dny+FuhzS8bKgeTRQj4Wu3b
Z08pWAA3miaYkZ3r/p0DEy5jxXFU+f4Dll2BinXmYzmqC49ntLL4bZtVYX3MIG9r
LGaswUFqzTmUIhBQ/vHltJiCYoJtjluQ6DUQMoaTwkiFLYETX74uAzaKdvFUVKAM
Ung7GVKl/otSGjRtq7JdLXj87XdCc9nPkaIGf2LsCoUFrRKO0mRf7s8wIS8nO+ig
0kLZ4864jY6328+l8fJaFKJIYVzihKW2AK5n1pu3RQpJBouLrFUSXA3zTGQ4VFl7
ReJHpvYAMWWot2OETKRA9FojDY05EKZaX/2YdgCSUAiWeyJyZey7PgoVZf73AgMB
AAGjggIvMIICKzAdBgNVHQ4EFgQUELZKCagpt2+KYYa/lG+IbZGgdHcwHwYDVR0j
BBgwFoAU00YGlJ04XbQnFP5xJ0+smUjvJ5wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
NTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUwZWFkYTNkNzA1LTAvMC9EMzQ2MDY5
NDlEMzg1REI0MjcxNEZFNzEyNzRGQUM5OTQ4RUYyNzlDLmNybDCBngYIKwYBBQUH
AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5LzAwMmUwYmEzLWZlNjAtNDViMS05MTYwLTg2OGEy
ZjhhNDNiMS8zL0QzNDYwNjk0OUQzODVEQjQyNzE0RkU3MTI3NEZBQzk5NDhFRjI3
OUMuY2VyMHIGCCsGAQUFBwELBGYwZDBiBggrBgEFBQcwC4ZWcnN5bmM6Ly9yLm1h
Z2VsbGFuLmlweG8uY29tL3JlcG8vNTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUw
ZWFkYTNkNzA1LTAvMC9BUzM5NTM3NC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFl0LTANBgkqhkiG9w0B
AQsFAAOCAQEArpyw1ZaL9tIJkUUK0QyDuPkDmEu7O+0WGfUJBoVF3ZD0DjoSHVFC
3ecBClchDBw+HXC95JHjJ+3w4r1974WMyTvS2VFl9HCzsm3S1zlR/rsW9t+T/L18
wvPMfCHwe3pJoS0jdzrGRa9sQbUkvv+s/XDhU84nP+o0XBMsG2MEmlMEP+xN9hG7
DAGikyk9MaFUIgfwx2SyKqbtHiWck1KEQohNEhjWe3GN3r1QUQjvpl/jAG07HoBb
6g07IJiwdd8Q3XLU/dMX6F4rKUcrf2iCQ7dfuPa+7kKBpqFIAApudTtS7ch0/Ucv
lDydgrXRzw0uJNzPpbK5B4FYrikYDy8iHw==
-----END CERTIFICATE-----
Generated at Tue Jul 1 21:07:13 2025 by rpki-client