Route Origin Authorization

$ rpki-client -vvvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e35302e302f32342d3234203d3e20383334.roa
File:                     33372e3233302e35302e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          68TfCeMZ8Ux3KzlDwov6tGkiu9Tpe6vkHnmju12oY4k=
Subject key identifier:   FB:5A:91:79:DB:CF:62:69:D5:A5:C7:C0:59:9D:0E:3D:4C:D2:A0:27
Certificate issuer:       /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial:       20898F5A6A8CBB70F81A2613CC68C011F0105A8F
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e35302e302f32342d3234203d3e20383334.roa
Signing time:             Sun 08 Nov 2026 00:12:20 +0000
ROA not before:           Sun 08 Nov 2026 00:07:20 +0000
ROA not after:            Sun 07 Nov 2027 00:12:20 +0000
asID:                     834
IP address blocks:        37.230.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
                          rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Nov 2026 04:07:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:89:8f:5a:6a:8c:bb:70:f8:1a:26:13:cc:68:c0:11:f0:10:5a:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
        Validity
            Not Before: Nov  8 00:07:20 2026 GMT
            Not After : Nov  7 00:12:20 2027 GMT
        Subject: CN=FB5A9179DBCF6269D5A5C7C0599D0E3D4CD2A027
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:66:1e:83:a9:89:d6:9b:9f:62:1d:a6:85:bb:
                    b6:08:86:36:8c:2e:57:45:dc:28:2b:20:a9:60:40:
                    22:ae:00:0f:01:c1:01:6c:df:6d:d0:13:4f:27:68:
                    83:60:4a:4f:2b:72:fe:ad:f1:56:f4:9f:7a:d3:6c:
                    f2:7e:21:88:2a:1f:1f:9c:c2:95:31:e5:be:bf:6b:
                    67:11:a8:02:eb:1a:10:41:2a:e3:23:73:11:b8:27:
                    d3:8c:12:06:18:59:64:fe:c6:67:7c:6d:5e:15:d2:
                    d7:f8:26:33:d5:2b:2c:1f:59:85:cd:77:91:f1:c3:
                    de:9a:3b:2f:10:81:39:a2:38:7d:49:ab:94:51:5c:
                    ce:05:53:91:6b:f8:d3:eb:5b:c0:01:c7:c4:63:40:
                    e2:36:f3:3e:e0:8b:4a:a0:0b:f1:cc:25:49:69:10:
                    d9:16:7f:aa:d3:1c:84:91:63:eb:8b:2f:73:ac:64:
                    f1:cd:20:ab:3e:95:60:42:f5:73:85:bf:1a:06:e6:
                    1b:45:c1:29:e3:88:3b:2f:6b:46:f1:13:9a:0d:8a:
                    36:cf:6d:a4:2e:86:f4:a4:b2:7e:c8:0b:f4:e3:27:
                    a4:e0:b3:23:fc:16:e0:02:5f:c4:0e:62:d5:4c:c6:
                    7a:eb:10:54:e3:b6:98:11:e4:77:82:5e:17:6c:70:
                    15:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:5A:91:79:DB:CF:62:69:D5:A5:C7:C0:59:9D:0E:3D:4C:D2:A0:27
            X509v3 Authority Key Identifier:
                keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e35302e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.230.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:38:80:46:ed:b4:c1:f3:a4:8b:fb:2f:dd:97:4e:9a:78:6b:
         79:3a:09:37:c0:9f:e7:58:fa:38:a6:9c:9a:3f:2c:03:aa:0f:
         df:7b:b5:53:81:58:b0:09:6b:84:e2:9f:61:03:fe:6d:dd:34:
         94:87:99:d7:4a:79:ef:40:e5:e6:87:11:8b:f9:52:c7:52:1d:
         72:eb:51:1a:f9:f1:ce:10:d7:b2:99:1b:f4:42:df:2d:69:24:
         0a:10:8d:9d:37:59:7d:5e:de:d0:c6:3b:25:9e:cc:79:61:7f:
         21:79:9e:73:bd:61:2d:21:f3:dc:49:99:f9:db:bc:98:e6:93:
         27:3c:01:c1:e9:1d:5e:5a:bb:a2:9d:ad:8c:28:ec:a9:9f:78:
         58:e8:b8:d5:1f:6a:3d:ba:59:5d:af:3f:ce:a9:2f:65:c5:75:
         d6:10:22:49:2a:f4:f7:d4:de:74:21:bc:eb:87:60:97:51:ca:
         fb:2f:79:50:66:79:d7:2f:de:ba:47:25:65:eb:7d:b1:ad:c0:
         4b:64:ad:94:05:f6:70:59:4c:5d:6c:f3:03:c3:c4:37:75:f5:
         b5:cd:a0:0b:b8:3d:68:29:c9:cb:4c:14:a5:1b:65:37:f8:8d:
         0a:82:3d:6d:07:8d:9a:42:81:45:c9:8d:1c:dd:e2:3a:89:fe:
         91:cd:0f:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----