Route Origin Authorization

$ rpki-client -vvvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e312e3233302e302f32342d3234203d3e20383334.roa
File:                     33372e312e3233302e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          ma9pnXFtqhnnOXuFebABoiAww1fKmn5NAvMz083i6Eg=
Subject key identifier:   3F:6C:1C:28:E6:32:0B:06:1F:89:4D:30:5E:4C:97:E8:20:72:4A:A2
Certificate issuer:       /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial:       53BABFC972348010F18A12E98AEB7C829758082A
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e312e3233302e302f32342d3234203d3e20383334.roa
Signing time:             Sun 08 Nov 2026 14:13:41 +0000
ROA not before:           Sun 08 Nov 2026 14:08:41 +0000
ROA not after:            Sun 07 Nov 2027 14:13:41 +0000
asID:                     834
IP address blocks:        37.1.230.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
                          rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 12 Nov 2026 09:20:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:ba:bf:c9:72:34:80:10:f1:8a:12:e9:8a:eb:7c:82:97:58:08:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
        Validity
            Not Before: Nov  8 14:08:41 2026 GMT
            Not After : Nov  7 14:13:41 2027 GMT
        Subject: CN=3F6C1C28E6320B061F894D305E4C97E820724AA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:0a:dc:2f:a1:fb:7e:bd:a6:ec:cb:3d:0c:03:
                    38:8b:ef:f0:07:00:c2:76:e5:5b:05:ca:3f:d0:3a:
                    43:82:b7:fa:fe:8e:95:27:73:0c:ae:59:b4:bc:e6:
                    e8:be:00:cb:de:bc:38:d1:2c:14:04:b8:60:f7:50:
                    e6:fc:98:92:03:f1:3e:1b:24:f4:3e:71:b3:60:ee:
                    42:c8:30:db:3e:2c:3d:3e:f7:db:cf:9a:0d:e5:b2:
                    da:57:68:6a:06:2b:6f:18:c0:0e:8a:1f:1f:96:30:
                    b3:e0:38:97:29:c4:41:b8:32:f8:df:0c:08:05:db:
                    b6:83:c1:78:56:02:f0:9b:64:7c:b7:55:86:f0:89:
                    5a:66:f6:19:2c:5d:f0:18:5a:64:79:73:4b:98:33:
                    c9:92:08:48:7e:0f:ca:c7:61:d5:d7:18:cc:6d:e7:
                    6b:be:15:74:60:6b:56:b6:42:fa:7a:7a:a3:fb:a2:
                    76:f0:1b:6e:a7:e9:d5:2d:86:9a:50:44:0e:fa:17:
                    09:79:16:7e:4b:3d:09:2f:a9:56:4c:8d:37:e8:3a:
                    8f:3e:04:a6:72:04:8f:36:f2:3c:48:ab:89:a2:5a:
                    12:88:38:ad:c2:05:c1:02:77:90:61:4c:68:8a:3b:
                    03:bf:3c:61:4a:e3:cc:8f:05:82:e4:80:dd:4d:59:
                    e2:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:6C:1C:28:E6:32:0B:06:1F:89:4D:30:5E:4C:97:E8:20:72:4A:A2
            X509v3 Authority Key Identifier:
                keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e312e3233302e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.1.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:62:49:de:5e:04:95:7e:91:02:f6:02:7f:6b:ff:15:11:ff:
         9e:3e:cc:52:57:20:5e:2d:64:c3:10:ea:6f:35:d1:ff:60:fe:
         ff:15:5b:f4:55:65:22:ce:63:7c:9a:37:3c:19:8c:25:07:97:
         33:f6:33:5c:8f:6d:44:3c:e4:8d:e8:e0:1e:9f:bd:e4:fd:a9:
         2a:f1:1c:51:89:4f:42:ad:1c:fa:ae:7f:4f:0d:1b:7f:05:53:
         a5:53:a1:35:e2:d7:ee:64:29:08:d0:66:66:65:9b:13:50:9a:
         95:16:83:ee:e1:8b:40:ff:bc:5e:30:cf:24:79:da:90:71:20:
         5a:f7:3e:a4:ab:90:63:65:fa:66:2d:79:6f:2a:72:78:e5:a4:
         b7:24:38:bc:f7:65:7d:9b:6d:cf:91:96:c6:a3:16:b7:60:83:
         1d:08:93:03:a4:4a:cf:b5:2b:79:4e:3c:3a:48:9c:ed:8f:43:
         26:29:1e:13:af:82:a8:20:c4:dd:be:ca:69:55:62:51:69:41:
         a4:e0:78:e6:84:88:d5:2c:99:af:c5:19:12:07:50:41:18:ba:
         ed:b6:25:fc:c0:4f:ff:39:99:0b:39:aa:a2:c4:80:30:3f:e4:
         15:57:77:87:09:00:97:d5:84:5d:71:b3:f2:d9:b5:05:6e:ff:
         e0:5e:56:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----