Route Origin Authorization

$ rpki-client -vvvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e36332e302f32342d3234203d3e20323139343237.roa
File:                     33372e3233302e36332e302f32342d3234203d3e20323139343237.roa (raw, json)
Hash identifier:          4+7crwSd7TW13zpTWATnLT8a/xuvTHCBixsMJtWBC1g=
Subject key identifier:   3F:26:5A:D6:4B:C9:DF:8A:EA:A1:4E:73:9C:F3:34:B9:85:3E:59:E3
Certificate issuer:       /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial:       665F038C06890442F595B45961665270F24677C6
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e36332e302f32342d3234203d3e20323139343237.roa
Signing time:             Tue 22 Sep 2026 09:03:04 +0000
ROA not before:           Tue 22 Sep 2026 08:58:04 +0000
ROA not after:            Tue 21 Sep 2027 09:03:04 +0000
asID:                     219427
IP address blocks:        37.230.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
                          rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 13:10:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:5f:03:8c:06:89:04:42:f5:95:b4:59:61:66:52:70:f2:46:77:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
        Validity
            Not Before: Sep 22 08:58:04 2026 GMT
            Not After : Sep 21 09:03:04 2027 GMT
        Subject: CN=3F265AD64BC9DF8AEAA14E739CF334B9853E59E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:0f:bc:ec:dd:31:2c:70:3b:b3:54:0d:e2:e3:
                    84:e6:71:c0:b7:c1:98:29:d7:0e:79:96:54:bb:1b:
                    d2:0c:d7:a9:2e:11:97:fd:48:d7:bc:a6:93:7b:f7:
                    00:8c:d5:6c:89:06:11:d2:c5:ce:72:96:71:45:11:
                    1c:d2:0f:63:74:25:81:8e:b8:48:cd:1c:9d:f7:ab:
                    c1:74:f2:c5:ac:23:b2:44:1e:f3:8c:5f:93:e4:9e:
                    38:f5:1e:60:5f:43:ee:e2:6f:87:34:46:81:91:27:
                    b8:bb:c1:e7:7e:aa:bc:74:8f:a6:d1:3a:6b:6d:6e:
                    a5:3d:33:8a:ae:7d:7c:59:60:6d:06:08:40:ce:ad:
                    8c:d8:20:bb:5d:11:3b:44:46:42:24:83:ef:7f:d8:
                    df:9a:ce:ea:92:6f:b5:52:23:eb:f9:f2:c7:62:ed:
                    00:64:db:57:3d:b1:3b:8c:47:86:ca:ed:bc:12:28:
                    53:e5:7d:4a:38:77:48:bb:be:96:c5:27:00:76:86:
                    62:82:39:55:e9:cd:41:05:fb:bb:ef:78:89:ce:fe:
                    bc:fb:be:f5:d7:ad:96:6b:bd:85:d8:e0:62:ee:29:
                    6d:83:c2:53:02:21:55:47:65:50:fd:8f:c6:ee:95:
                    21:60:8d:9d:0e:36:3d:78:55:87:bb:91:87:bf:1f:
                    21:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:26:5A:D6:4B:C9:DF:8A:EA:A1:4E:73:9C:F3:34:B9:85:3E:59:E3
            X509v3 Authority Key Identifier:
                keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e36332e302f32342d3234203d3e20323139343237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.230.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:db:f7:e3:1a:19:fe:9c:ba:09:7d:80:2b:bc:44:ae:a5:3b:
         ff:99:7f:fe:61:b5:05:9b:38:65:e9:75:c5:7b:6f:7e:56:39:
         12:a5:ce:13:a0:d8:80:1c:88:dd:15:68:cd:dc:30:df:2b:ee:
         fc:45:b8:36:39:b6:42:9c:cc:c0:6d:43:13:f8:02:3d:4f:5e:
         41:97:1c:91:43:c4:e5:3b:ef:a0:15:7c:44:43:a6:13:c0:92:
         40:b7:09:2e:81:0d:21:7e:7c:44:21:de:d4:b2:f4:d3:fa:5e:
         3d:3d:d2:38:61:e7:8a:f7:48:32:d1:bd:a8:c6:97:f8:12:09:
         bf:d8:4b:fd:41:dd:60:58:64:2e:67:a5:27:57:b4:25:15:f5:
         a7:81:12:fe:59:72:25:a9:65:94:6b:16:f0:44:b3:6e:ae:75:
         af:b6:f4:f4:8f:98:3a:99:8d:1c:96:92:95:db:2e:43:f9:cd:
         0f:63:e4:da:c8:ff:b0:ff:68:0c:88:7d:35:5c:60:9c:29:09:
         a5:83:db:7d:04:4b:ea:10:0e:29:0b:a6:1d:41:b3:73:5d:84:
         f5:4f:e8:32:e2:2e:aa:82:97:ba:4c:26:e0:2e:de:d5:bb:fb:
         fb:a2:2a:f6:c6:7f:ae:8f:c5:0c:14:04:b1:b2:ca:ce:f7:61:
         b2:c5:9a:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----