Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/AS834.roa
File:                     AS834.roa (raw, json)
Hash identifier:          3VsSyAhyHGUpcK46876jJBk6472RJHfq7gTMkqwNdkM=
Subject key identifier:   26:42:3A:32:85:95:C0:E4:3D:E8:42:AD:61:DC:21:53:08:56:E7:1B
Certificate issuer:       /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
Certificate serial:       1CC50D229A3675A6C15186B5BED79564E510DB95
Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/AS834.roa
Signing time:             Fri 24 Jul 2026 02:06:08 +0000
ROA not before:           Fri 24 Jul 2026 02:01:08 +0000
ROA not after:            Fri 23 Jul 2027 02:06:08 +0000
asID:                     834
IP address blocks:        164.37.192.0/21 maxlen: 24
                          164.37.200.0/22 maxlen: 24
                          164.37.204.0/23 maxlen: 24
                          164.37.206.0/24 maxlen: 24
                          164.37.211.0/24 maxlen: 24
                          164.37.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl
                          rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 22:30:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:c5:0d:22:9a:36:75:a6:c1:51:86:b5:be:d7:95:64:e5:10:db:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
        Validity
            Not Before: Jul 24 02:01:08 2026 GMT
            Not After : Jul 23 02:06:08 2027 GMT
        Subject: CN=26423A328595C0E43DE842AD61DC21530856E71B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:e0:86:59:22:66:f2:9d:9c:ac:d2:12:0e:c1:
                    1b:93:5d:38:95:e6:be:5f:87:3e:04:66:87:77:8a:
                    13:73:3c:b6:e8:39:48:35:fa:6b:35:4b:e9:4c:c3:
                    12:a5:87:0a:ed:40:04:c1:cc:30:cd:7c:3d:6e:fb:
                    ea:0d:1f:9e:c3:17:57:fb:0f:3b:7a:64:33:87:43:
                    a5:34:36:30:3c:dc:58:5c:1a:cc:d4:5e:ae:75:74:
                    70:20:82:05:99:4d:77:05:33:78:5c:bc:67:37:c2:
                    4a:9f:40:b6:7b:7c:f8:e7:65:4d:de:6b:e8:92:d7:
                    5c:b8:45:c6:a0:93:f5:47:61:08:dd:9a:36:24:b9:
                    96:80:ab:69:ad:ba:5e:fd:2e:ff:8b:61:ef:59:95:
                    12:e0:9d:2b:b0:fc:6a:3c:e8:cf:85:0b:46:f5:58:
                    f5:82:b1:f0:f0:a4:5a:6e:d0:10:c8:3c:cf:35:6d:
                    80:c8:54:1e:8a:04:1f:bf:35:af:23:53:b0:d9:fb:
                    d5:30:0c:02:e5:02:2e:bb:ca:6b:62:be:1a:f8:c3:
                    23:29:09:f7:f4:28:31:11:a1:13:8f:ac:92:b4:d3:
                    0e:b7:b1:23:87:9f:ab:88:8d:5d:8a:80:c1:83:d3:
                    c2:f0:8a:ec:99:a8:ef:1a:c4:87:2d:d3:66:96:3a:
                    a8:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:42:3A:32:85:95:C0:E4:3D:E8:42:AD:61:DC:21:53:08:56:E7:1B
            X509v3 Authority Key Identifier:
                keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/AS834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.37.192.0-164.37.206.255
                  164.37.211.0/24
                  164.37.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b5:24:74:03:6d:1a:7d:72:a7:83:b8:e7:8d:76:4f:58:bd:17:
         50:ac:d7:7e:27:cd:7b:5b:bf:4e:f4:81:e9:b2:f1:25:a5:45:
         36:e3:7c:96:54:cf:40:0c:c7:be:4e:7c:e9:53:66:d5:41:9e:
         40:53:f9:6f:85:0d:b4:f4:a1:bb:cc:79:f1:35:f8:f2:a9:39:
         e9:65:dc:09:06:4d:0d:e6:b2:39:21:38:9f:93:7e:b3:a9:10:
         29:9f:c3:bb:60:d2:f6:cd:c3:4f:54:83:b2:ea:23:dc:df:8d:
         a4:48:55:1c:c2:26:e4:13:04:d1:da:e9:bd:9e:92:79:df:f7:
         57:99:4f:65:54:68:17:05:71:b0:71:eb:cc:93:45:65:49:00:
         71:e9:6f:df:29:8e:aa:87:49:36:7e:e3:bd:2d:d5:45:e3:2b:
         40:81:f4:f7:58:25:01:9c:eb:3b:08:54:11:72:01:51:99:f5:
         de:74:f6:51:bc:9e:5e:67:67:d2:20:49:0a:e5:42:5e:19:5c:
         8e:40:55:36:26:66:f4:f1:db:8a:a4:98:d7:ae:2a:93:90:90:
         16:82:50:89:18:bf:9f:65:d4:5a:1d:cc:97:05:cd:a8:3a:f9:
         ae:09:9f:f8:fd:6c:44:5f:48:f4:96:ec:b5:16:bd:0d:d5:8c:
         4f:92:f9:88
-----BEGIN CERTIFICATE-----
MIIFNjCCBB6gAwIBAgIUHMUNIpo2dabBUYa1vteVZOUQ25UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjM1NEQzMjhDQkJGRDFFRjNDRDI5MjY4QTIzQjBGQ0M2
MEUzQTJDNTAeFw0yNjA3MjQwMjAxMDhaFw0yNzA3MjMwMjA2MDhaMDMxMTAvBgNV
BAMTKDI2NDIzQTMyODU5NUMwRTQzREU4NDJBRDYxREMyMTUzMDg1NkU3MUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE4IZZImbynZys0hIOwRuTXTiV
5r5fhz4EZod3ihNzPLboOUg1+ms1S+lMwxKlhwrtQATBzDDNfD1u++oNH57DF1f7
Dzt6ZDOHQ6U0NjA83FhcGszUXq51dHAgggWZTXcFM3hcvGc3wkqfQLZ7fPjnZU3e
a+iS11y4Rcagk/VHYQjdmjYkuZaAq2mtul79Lv+LYe9ZlRLgnSuw/Go86M+FC0b1
WPWCsfDwpFpu0BDIPM81bYDIVB6KBB+/Na8jU7DZ+9UwDALlAi67ymtivhr4wyMp
Cff0KDERoROPrJK00w63sSOHn6uIjV2KgMGD08LwiuyZqO8axIct02aWOqhxAgMB
AAGjggJAMIICPDAdBgNVHQ4EFgQUJkI6MoWVwOQ96EKtYdwhUwhW5xswHwYDVR0j
BBgwFoAUs1TTKMu/0e880pJoojsPzGDjosUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
YTAzNzViMzktZjk0OS00Y2I1LWI1MTktZjk0MDA4YjE2NTRjLTAvMC9CMzU0RDMy
OENCQkZEMUVGM0NEMjkyNjhBMjNCMEZDQzYwRTNBMkM1LmNybDCBngYIKwYBBQUH
AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5LzYxNzA4YTZiLTZjM2EtNDBhMC1hMzAyLTU5NWVj
YzE3ODQ4Yy8wL0IzNTREMzI4Q0JCRkQxRUYzQ0QyOTI2OEEyM0IwRkNDNjBFM0Ey
QzUuY2VyMG8GCCsGAQUFBwELBGMwYTBfBggrBgEFBQcwC4ZTcnN5bmM6Ly9yLm1h
Z2VsbGFuLmlweG8uY29tL3JlcG8vYTAzNzViMzktZjk0OS00Y2I1LWI1MTktZjk0
MDA4YjE2NTRjLTAvMC9BUzgzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAzBggrBgEFBQcBBwEB/wQkMCIwIAQCAAEwGjAMAwQGpCXAAwQApCXOAwQApCXT
AwQApCXlMA0GCSqGSIb3DQEBCwUAA4IBAQC1JHQDbRp9cqeDuOeNdk9YvRdQrNd+
J817W79O9IHpsvElpUU243yWVM9ADMe+TnzpU2bVQZ5AU/lvhQ209KG7zHnxNfjy
qTnpZdwJBk0N5rI5ITifk36zqRApn8O7YNL2zcNPVIOy6iPc342kSFUcwibkEwTR
2um9npJ53/dXmU9lVGgXBXGwcevMk0VlSQBx6W/fKY6qh0k2fuO9LdVF4ytAgfT3
WCUBnOs7CFQRcgFRmfXedPZRvJ5eZ2fSIEkK5UJeGVyOQFU2Jmb08duKpJjXriqT
kJAWglCJGL+fZdRaHcyXBc2oOvmuCZ/4/WxEX0j0luy1Fr0N1YxPkvmI
-----END CERTIFICATE-----
Generated at Fri Jul 24 09:37:03 2026 by rpki-client