Route Origin Authorization

$ rpki-client -vvvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e35302e302f32342d3234203d3e20323035343839.roa
File:                     33372e3233302e35302e302f32342d3234203d3e20323035343839.roa (raw, json)
Hash identifier:          T+FPp13VQ9E1k/VK9DMZVhQScguoBC9avrux0oxaopY=
Subject key identifier:   70:3D:54:33:3A:E7:8A:AD:F3:A7:A6:F4:EE:4A:C2:A1:4B:55:DA:00
Certificate issuer:       /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial:       4FDCF503F35BA2F67ACB2C983156AA4CA09C8260
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e35302e302f32342d3234203d3e20323035343839.roa
Signing time:             Thu 12 Nov 2026 18:49:09 +0000
ROA not before:           Thu 12 Nov 2026 18:44:09 +0000
ROA not after:            Thu 11 Nov 2027 18:49:09 +0000
asID:                     205489
IP address blocks:        37.230.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
                          rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 05:11:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:dc:f5:03:f3:5b:a2:f6:7a:cb:2c:98:31:56:aa:4c:a0:9c:82:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
        Validity
            Not Before: Nov 12 18:44:09 2026 GMT
            Not After : Nov 11 18:49:09 2027 GMT
        Subject: CN=703D54333AE78AADF3A7A6F4EE4AC2A14B55DA00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:bb:16:50:81:72:de:c7:df:af:f8:d3:c4:52:
                    76:f7:10:1c:a5:87:dd:a5:ab:e7:23:e2:86:8c:c4:
                    09:3a:3e:47:84:36:cd:17:d4:a4:01:4f:ee:9c:cf:
                    4f:0d:51:4a:51:70:db:ee:2f:3a:e5:fa:e2:12:17:
                    4e:7c:ca:50:dd:b7:ed:fa:fd:4b:63:2a:7d:a4:d1:
                    65:a0:e9:6c:b8:7b:8f:c0:80:cf:ef:06:1c:2d:a5:
                    e3:d0:77:d7:7a:92:b3:c7:6c:01:be:71:aa:c7:3f:
                    db:4d:53:d4:af:1d:45:88:5b:83:e7:bd:5b:aa:39:
                    57:ec:03:ea:c8:21:44:ae:8c:f8:43:fc:e7:38:f9:
                    47:22:40:e7:e7:08:51:cb:b5:22:52:e8:91:76:df:
                    c2:ed:91:73:61:a8:21:0f:c4:08:2d:e5:f1:fe:a5:
                    eb:31:9c:8a:5d:d4:6d:07:8b:d7:5c:bf:20:00:07:
                    eb:5b:02:f5:6b:b7:2d:73:33:16:6b:1e:6d:c9:a1:
                    2d:73:8b:a9:6c:47:60:c0:a9:24:8f:74:20:9e:1a:
                    23:79:dc:39:ef:2a:69:14:c6:a4:d4:10:dd:ac:e5:
                    10:79:bb:ef:1d:88:07:5d:a6:c6:96:e0:2b:ea:ff:
                    f3:e7:06:3e:6a:76:b5:9f:2b:31:7a:4f:b2:dd:49:
                    10:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:3D:54:33:3A:E7:8A:AD:F3:A7:A6:F4:EE:4A:C2:A1:4B:55:DA:00
            X509v3 Authority Key Identifier:
                keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e35302e302f32342d3234203d3e20323035343839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.230.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:ea:c6:6b:db:7f:29:79:18:6c:b1:f0:79:5b:01:08:bd:f9:
         00:5c:35:5e:99:43:a9:1f:26:b1:73:fc:49:73:33:dc:9d:9e:
         12:d8:a7:e4:61:60:18:d2:ae:49:cc:11:c7:1f:13:0d:6f:db:
         9a:5b:36:8b:ab:8d:54:37:19:05:2f:e2:fa:74:3d:bf:f9:cb:
         0a:71:b5:3a:ba:a3:93:46:b7:b5:1d:a5:c3:27:ab:72:45:1a:
         4f:55:b3:8c:b6:4a:5f:a2:c2:7f:51:89:1f:bb:c4:06:20:a3:
         34:cd:83:0a:f7:45:50:00:ef:73:da:5c:c2:5d:c3:7d:43:ba:
         d6:eb:5b:d4:8e:22:60:fc:32:dd:12:07:12:91:a1:44:6c:3a:
         5e:72:cb:20:94:75:9f:c8:b5:b8:49:58:d2:3d:b2:f8:6c:e6:
         74:e8:d5:6c:e2:19:d6:08:5f:bf:2c:8c:93:23:f5:ae:d5:19:
         a4:0a:63:ef:c4:1d:51:7f:3a:2e:ae:17:9e:eb:42:72:1d:67:
         17:c2:af:65:f8:03:00:25:08:cb:ca:b9:0c:f1:a0:74:cc:bf:
         2d:e5:f8:88:b4:a5:51:d6:95:32:02:02:0d:53:75:15:28:03:
         1c:31:50:77:7e:bf:c0:32:cd:4b:d1:1f:38:52:71:72:ac:8d:
         01:f6:ae:b0
-----BEGIN CERTIFICATE-----
MIIFWDCCBECgAwIBAgIUT9z1A/NbovZ6yyyYMVaqTKCcgmAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkEyRkI0REIwQUE0RDAwNjk1ODMxNjg3MkU0NjdCNTU0
RTBGRDBCRTAeFw0yNjExMTIxODQ0MDlaFw0yNzExMTExODQ5MDlaMDMxMTAvBgNV
BAMTKDcwM0Q1NDMzM0FFNzhBQURGM0E3QTZGNEVFNEFDMkExNEI1NURBMDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmuxZQgXLex9+v+NPEUnb3EByl
h92lq+cj4oaMxAk6PkeENs0X1KQBT+6cz08NUUpRcNvuLzrl+uISF058ylDdt+36
/UtjKn2k0WWg6Wy4e4/AgM/vBhwtpePQd9d6krPHbAG+carHP9tNU9SvHUWIW4Pn
vVuqOVfsA+rIIUSujPhD/Oc4+UciQOfnCFHLtSJS6JF238LtkXNhqCEPxAgt5fH+
pesxnIpd1G0Hi9dcvyAAB+tbAvVrty1zMxZrHm3JoS1zi6lsR2DAqSSPdCCeGiN5
3DnvKmkUxqTUEN2s5RB5u+8diAddpsaW4Cvq//PnBj5qdrWfKzF6T7LdSRBnAgMB
AAGjggJiMIICXjAdBgNVHQ4EFgQUcD1UMzrniq3zp6b07krCoUtV2gAwHwYDVR0j
BBgwFoAUKi+02wqk0AaVgxaHLkZ7VU4P0L4wDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
YTZmMjE0N2EtZGU4YS00NDQwLWJjYTItNmQ4YjdjODc2ZmRhLTAvMC8yQTJGQjRE
QjBBQTREMDA2OTU4MzE2ODcyRTQ2N0I1NTRFMEZEMEJFLmNybDCBngYIKwYBBQUH
AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5LzlkZjMzYTU3LTdlNGYtNDg0NC04NGUyLWI3MTUz
YjU1MTFiNC8wLzJBMkZCNERCMEFBNEQwMDY5NTgzMTY4NzJFNDY3QjU1NEUwRkQw
QkUuY2VyMIGkBggrBgEFBQcBCwSBlzCBlDCBkQYIKwYBBQUHMAuGgYRyc3luYzov
L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9hNmYyMTQ3YS1kZThhLTQ0NDAtYmNh
Mi02ZDhiN2M4NzZmZGEtMC8wLzMzMzcyZTMyMzMzMDJlMzUzMDJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMyMzAzNTM0MzgzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEACXmMjANBgkqhkiG
9w0BAQsFAAOCAQEAh+rGa9t/KXkYbLHweVsBCL35AFw1XplDqR8msXP8SXMz3J2e
Etin5GFgGNKuScwRxx8TDW/bmls2i6uNVDcZBS/i+nQ9v/nLCnG1Orqjk0a3tR2l
wyerckUaT1WzjLZKX6LCf1GJH7vEBiCjNM2DCvdFUADvc9pcwl3DfUO61utb1I4i
YPwy3RIHEpGhRGw6XnLLIJR1n8i1uElY0j2y+GzmdOjVbOIZ1ghfvyyMkyP1rtUZ
pApj78QdUX86Lq4XnutCch1nF8KvZfgDACUIy8q5DPGgdMy/LeX4iLSlUdaVMgIC
DVN1FSgDHDFQd36/wDLNS9EfOFJxcqyNAfausA==
-----END CERTIFICATE-----