Route Origin Authorization

$ rpki-client -vvvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e35362e302f32322d3234203d3e20323730303532.roa
File:                     33372e3233302e35362e302f32322d3234203d3e20323730303532.roa (raw, json)
Hash identifier:          O2dMdB7hfdY+lCbx1NP161yThNeeEWiJcB/tqw8VXKU=
Subject key identifier:   87:33:37:3D:36:2B:B7:AF:4B:66:51:C0:EB:10:9A:DF:AD:82:FB:A4
Certificate issuer:       /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial:       5D59416AE5AFCEB3690A3ED8E9871797D9BAE453
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e35362e302f32322d3234203d3e20323730303532.roa
Signing time:             Tue 22 Sep 2026 13:36:26 +0000
ROA not before:           Tue 22 Sep 2026 13:31:26 +0000
ROA not after:            Tue 21 Sep 2027 13:36:26 +0000
asID:                     270052
IP address blocks:        37.230.56.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
                          rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 08:20:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:59:41:6a:e5:af:ce:b3:69:0a:3e:d8:e9:87:17:97:d9:ba:e4:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
        Validity
            Not Before: Sep 22 13:31:26 2026 GMT
            Not After : Sep 21 13:36:26 2027 GMT
        Subject: CN=8733373D362BB7AF4B6651C0EB109ADFAD82FBA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:0a:8f:7c:92:8e:53:c6:a9:42:e8:4f:4e:53:
                    18:cb:1d:2e:9b:01:63:49:ca:50:a1:87:a9:35:e8:
                    2a:99:a3:4d:61:cd:71:0c:c7:53:b0:f4:55:d4:dc:
                    78:5e:58:38:00:b0:d0:26:d3:da:11:a6:66:65:5b:
                    12:36:c8:cd:75:de:60:f8:e2:21:00:b9:14:8d:88:
                    ca:4d:10:cc:f3:6e:03:56:4e:c1:4f:ee:ae:ef:99:
                    e9:73:0c:39:44:e3:c2:ad:a5:fd:cf:f1:af:dc:ae:
                    d0:29:5c:50:40:9c:43:24:e8:07:20:08:b9:e7:ca:
                    3b:94:e5:0d:e5:bb:6d:8e:dc:d7:21:20:82:b8:96:
                    e5:95:bc:86:56:3d:47:2f:40:28:90:10:64:25:55:
                    21:8e:86:b6:e0:6c:51:84:df:9b:42:45:cd:4d:fa:
                    6e:83:85:e5:09:7f:08:b0:bd:55:39:b2:96:e5:54:
                    87:28:15:e5:04:61:42:b0:92:c9:ca:a6:27:2a:15:
                    23:9a:b7:85:b2:5c:95:b8:c9:70:cd:ed:d3:46:d2:
                    8b:b0:78:08:57:13:57:08:9d:8f:15:bd:5a:06:55:
                    93:01:bf:6b:ad:33:2e:45:5e:d1:2e:4d:69:16:eb:
                    eb:de:b6:27:38:a4:67:4a:03:3d:bb:dd:ed:f1:eb:
                    83:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:33:37:3D:36:2B:B7:AF:4B:66:51:C0:EB:10:9A:DF:AD:82:FB:A4
            X509v3 Authority Key Identifier:
                keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e35362e302f32322d3234203d3e20323730303532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.230.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         68:bf:e4:42:d6:38:fa:35:7b:d0:e9:19:91:63:51:7f:fe:ba:
         d4:ac:18:92:ce:32:72:ad:86:bd:7f:cf:f2:02:ef:21:8d:a9:
         23:88:cf:18:bf:56:00:fa:80:ec:5e:e4:a1:32:b2:cb:4c:be:
         bf:12:aa:24:25:e3:3a:79:ae:eb:76:91:72:ac:e1:87:ff:0e:
         2d:3a:5f:36:16:2f:e4:4b:01:5e:68:41:39:a1:b1:01:95:2c:
         31:f6:62:4b:94:ae:27:bc:c6:30:74:63:31:c9:d8:04:a5:7b:
         fd:0b:87:f3:06:fc:b5:6e:e0:fd:70:7e:20:81:bd:8c:a5:67:
         e9:b8:35:7c:9d:13:c9:2a:5a:2d:1f:d7:78:4d:65:f7:76:13:
         37:0d:57:f6:e1:75:3d:e2:40:4b:b6:b8:5c:d5:0e:9b:b1:58:
         eb:a5:b4:8c:ce:89:09:86:02:c3:3c:8c:fe:63:4e:5a:ba:0c:
         7f:fe:d9:fc:f1:fc:32:28:d8:4a:62:72:16:10:fd:e3:dd:4d:
         b8:bc:71:f2:fa:d7:ab:fb:c9:3b:39:98:69:84:77:16:f3:b4:
         cc:ef:f9:58:22:93:88:82:18:1b:bf:4d:c3:e1:7b:49:cf:20:
         90:a3:15:e1:da:34:e1:7d:27:7d:b1:83:77:cd:2d:cf:03:42:
         c3:b2:9a:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----