Route Origin Authorization

$ rpki-client -vvvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/AS152666.roa
File:                     AS152666.roa (raw, json)
Hash identifier:          4rIZfWCCOyKZlDxLQSC53dp/nTc5hphj2uHv63xcFIk=
Subject key identifier:   56:A3:44:AF:0E:A0:35:6C:33:F9:ED:B2:96:67:9D:82:3D:E7:E9:AA
Certificate issuer:       /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
Certificate serial:       137833286E48067ACAED100EB4C906CCD3547D71
Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/AS152666.roa
Signing time:             Fri 02 Oct 2026 03:49:45 +0000
ROA not before:           Fri 02 Oct 2026 03:44:45 +0000
ROA not after:            Fri 01 Oct 2027 03:49:45 +0000
asID:                     152666
IP address blocks:        164.37.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl
                          rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 Oct 2026 06:30:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:78:33:28:6e:48:06:7a:ca:ed:10:0e:b4:c9:06:cc:d3:54:7d:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
        Validity
            Not Before: Oct  2 03:44:45 2026 GMT
            Not After : Oct  1 03:49:45 2027 GMT
        Subject: CN=56A344AF0EA0356C33F9EDB296679D823DE7E9AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:73:ff:81:da:ee:ba:39:59:7f:9a:f6:e8:c4:
                    e7:10:e8:b8:c6:5c:16:56:58:0f:12:3f:c4:07:8e:
                    78:fc:aa:99:f2:02:9e:d1:2c:f8:50:2d:d4:93:6d:
                    9e:14:30:24:49:51:21:00:b6:b3:c6:4b:65:50:e6:
                    e5:da:6e:d6:47:ca:b2:f8:8c:f9:54:d0:af:fa:d7:
                    1d:60:3a:f3:48:ce:fc:4f:be:3a:03:c8:71:b5:47:
                    cb:37:b9:49:80:79:df:ac:01:cb:1f:2a:4c:bc:7e:
                    ee:7c:a5:12:88:a6:b9:71:ba:e2:57:d4:9d:81:6d:
                    01:6d:72:a0:08:11:9a:da:5f:53:0d:4f:00:90:fb:
                    91:ff:ea:d1:7b:11:89:20:3d:65:b7:d4:61:6b:5d:
                    ca:c0:58:0f:4e:9c:34:a1:e9:1f:5d:02:f4:fd:91:
                    48:05:c2:5b:2a:88:03:1a:02:36:f8:8c:d7:91:fa:
                    b1:60:39:98:e7:fa:92:e8:d4:19:24:aa:b6:ee:ac:
                    96:4f:18:8f:b3:7d:45:8d:30:1a:ba:38:ea:1e:9e:
                    45:ea:f0:7c:32:b7:30:1b:c4:32:57:10:fb:3d:0b:
                    1d:73:df:80:f2:d7:bb:76:5d:7d:12:9a:ba:b4:14:
                    90:00:7e:00:b2:80:b6:03:0c:99:80:60:6d:87:bf:
                    2d:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:A3:44:AF:0E:A0:35:6C:33:F9:ED:B2:96:67:9D:82:3D:E7:E9:AA
            X509v3 Authority Key Identifier:
                keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/AS152666.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.37.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:14:cd:70:b1:9b:4a:98:8f:20:30:47:41:44:06:10:1b:72:
         0b:f9:1c:1c:47:15:6b:af:09:79:5c:af:d0:d2:4b:b1:88:6d:
         22:58:44:7d:dd:bb:55:7b:ab:9c:df:0c:cf:f3:2c:b9:b1:8e:
         85:e2:28:11:49:b7:8a:13:f7:c7:30:c2:7e:8c:d2:7c:b6:d8:
         74:d5:5f:e7:d0:12:67:ac:e7:0c:27:a4:11:a5:db:e4:e3:9c:
         ad:64:87:f2:f0:a5:5c:e2:18:89:43:d9:27:49:83:2e:1e:0c:
         95:bf:2b:67:ee:96:97:38:6e:d1:bc:b4:30:5e:ab:61:fc:9e:
         49:b3:6f:9c:95:5b:3a:44:fa:71:76:e9:95:d9:83:c9:8c:cf:
         de:6a:c9:21:e1:9b:bd:91:86:51:73:62:5d:1f:74:fd:b2:d0:
         3d:23:28:40:ce:fa:0e:52:19:ae:a4:69:45:b5:22:dc:c2:2a:
         42:6a:ef:db:a3:1a:b1:36:bc:99:ea:df:3e:54:f8:38:45:3b:
         3f:1c:a9:12:bb:d0:af:c3:b0:8f:cf:90:e5:48:79:b4:a3:53:
         4d:be:df:dd:1e:8c:69:51:cd:83:b5:b2:c6:84:22:e7:98:8f:
         79:5b:a3:03:12:cb:17:a8:0e:cb:29:fe:ef:02:80:e8:b4:c1:
         c4:aa:9e:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 21:47:01 2026 by rpki-client