Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS206092.roa
File:                     AS206092.roa (raw, json)
Hash identifier:          8aXPt6/duxUbRGf4sS/aXQ1k7pia864zmhiDNisKXe8=
Subject key identifier:   79:BC:A5:38:C0:8E:7A:41:9C:89:FC:69:E0:E7:96:9F:9E:68:07:95
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       68E12B3FC191B21009D78578FE12D0652DBAD295
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS206092.roa
Signing time:             Sat 01 Nov 2025 00:15:06 +0000
ROA not before:           Sat 01 Nov 2025 00:10:06 +0000
ROA not after:            Sat 31 Oct 2026 00:15:06 +0000
asID:                     206092
IP address blocks:        89.116.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
                          rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 15:58:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:e1:2b:3f:c1:91:b2:10:09:d7:85:78:fe:12:d0:65:2d:ba:d2:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: Nov  1 00:10:06 2025 GMT
            Not After : Oct 31 00:15:06 2026 GMT
        Subject: CN=79BCA538C08E7A419C89FC69E0E7969F9E680795
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:6a:54:af:c6:b3:c2:47:aa:7f:fe:bd:82:8a:
                    8c:3d:84:8e:e2:5d:c1:2c:6d:84:d5:80:0f:f7:2f:
                    d7:ef:b1:f9:34:4d:9a:1e:f7:bd:84:40:f4:31:8b:
                    76:18:2c:5a:b9:be:27:14:50:d5:9a:c9:d7:fe:97:
                    cb:b5:ee:24:fc:a6:09:86:ad:ce:43:6f:d7:8e:5b:
                    bd:0d:02:6c:a9:24:ef:9a:cc:ac:43:56:66:a6:a7:
                    0f:b7:f1:9f:e3:77:8c:03:6c:8c:03:c9:1a:7a:b0:
                    69:ec:70:42:0d:38:f7:dc:f7:81:eb:a6:94:1f:af:
                    08:36:8b:cb:27:bd:8a:22:bb:88:dd:e8:2b:32:72:
                    3a:98:e3:61:ba:37:98:f0:8e:05:ab:c8:ac:49:50:
                    12:fa:da:e5:de:f9:62:b3:a1:45:59:9d:df:61:f6:
                    8d:fc:20:ac:c3:c3:c0:b7:81:c5:14:95:48:e4:a8:
                    0a:7e:df:f8:b1:f5:79:a8:5d:e2:49:36:38:d5:40:
                    79:b9:e0:ae:a8:f5:5e:1c:8a:a1:d0:8b:33:bd:83:
                    41:46:12:f7:70:15:db:41:b5:43:0d:11:39:20:06:
                    98:ce:27:4d:bc:4a:0a:62:e5:33:f7:f6:cb:0c:8d:
                    47:d6:db:61:0f:aa:5c:0f:2c:d2:c4:4b:ea:4a:5b:
                    98:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:BC:A5:38:C0:8E:7A:41:9C:89:FC:69:E0:E7:96:9F:9E:68:07:95
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS206092.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.116.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:b1:7d:df:ac:90:8e:b2:f2:07:53:bd:d4:b5:a4:86:df:5e:
         76:7b:22:26:fd:67:dc:c0:56:16:bd:89:3c:1b:18:36:a1:b6:
         d0:26:2e:aa:3a:b0:71:78:3d:98:29:27:2c:fc:1b:af:32:23:
         02:73:06:82:7c:2e:95:91:ec:77:31:f9:51:1a:10:27:a2:44:
         39:9f:4f:81:e7:7a:4b:fe:db:b6:4f:1e:aa:59:1f:0e:13:4c:
         26:7c:57:53:db:02:4d:e7:eb:d4:cf:86:16:f8:f7:3e:fc:3f:
         49:47:f8:ca:c0:64:3b:03:93:4e:55:34:3e:bd:3d:d5:a2:fb:
         5e:0b:e3:40:49:d6:90:8f:ac:34:11:d2:4c:61:4c:47:17:05:
         a3:bb:e8:7b:5c:27:ba:6f:de:1f:dd:9e:94:0a:86:f8:68:dd:
         96:e4:ac:39:7e:09:56:ef:31:65:de:da:d8:8d:03:4e:cd:2b:
         ca:28:f8:ca:b2:74:c3:a3:42:ed:37:75:c5:b0:05:98:a3:8c:
         47:5b:80:7b:01:99:4f:07:8c:1b:75:a8:80:ca:bf:db:0e:0e:
         fa:67:84:27:3c:6b:40:d8:55:24:c1:56:fd:6c:08:71:fa:10:
         6d:38:50:58:84:c1:be:7e:38:96:12:5f:ed:09:df:ba:0f:e9:
         bf:65:96:96
-----BEGIN CERTIFICATE-----
MIIFJTCCBA2gAwIBAgIUaOErP8GRshAJ14V4/hLQZS260pUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDM0NjA2OTQ5RDM4NURCNDI3MTRGRTcxMjc0RkFDOTk0
OEVGMjc5QzAeFw0yNTExMDEwMDEwMDZaFw0yNjEwMzEwMDE1MDZaMDMxMTAvBgNV
BAMTKDc5QkNBNTM4QzA4RTdBNDE5Qzg5RkM2OUUwRTc5NjlGOUU2ODA3OTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCLalSvxrPCR6p//r2Ciow9hI7i
XcEsbYTVgA/3L9fvsfk0TZoe972EQPQxi3YYLFq5vicUUNWaydf+l8u17iT8pgmG
rc5Db9eOW70NAmypJO+azKxDVmampw+38Z/jd4wDbIwDyRp6sGnscEINOPfc94Hr
ppQfrwg2i8snvYoiu4jd6CsycjqY42G6N5jwjgWryKxJUBL62uXe+WKzoUVZnd9h
9o38IKzDw8C3gcUUlUjkqAp+3/ix9XmoXeJJNjjVQHm54K6o9V4ciqHQizO9g0FG
EvdwFdtBtUMNETkgBpjOJ028Sgpi5TP39ssMjUfW22EPqlwPLNLES+pKW5gbAgMB
AAGjggIvMIICKzAdBgNVHQ4EFgQUebylOMCOekGcifxp4OeWn55oB5UwHwYDVR0j
BBgwFoAU00YGlJ04XbQnFP5xJ0+smUjvJ5wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
NTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUwZWFkYTNkNzA1LTAvMC9EMzQ2MDY5
NDlEMzg1REI0MjcxNEZFNzEyNzRGQUM5OTQ4RUYyNzlDLmNybDCBngYIKwYBBQUH
AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5LzAwMmUwYmEzLWZlNjAtNDViMS05MTYwLTg2OGEy
ZjhhNDNiMS8zL0QzNDYwNjk0OUQzODVEQjQyNzE0RkU3MTI3NEZBQzk5NDhFRjI3
OUMuY2VyMHIGCCsGAQUFBwELBGYwZDBiBggrBgEFBQcwC4ZWcnN5bmM6Ly9yLm1h
Z2VsbGFuLmlweG8uY29tL3JlcG8vNTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUw
ZWFkYTNkNzA1LTAvMC9BUzIwNjA5Mi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFl0TDANBgkqhkiG9w0B
AQsFAAOCAQEAarF936yQjrLyB1O91LWkht9ednsiJv1n3MBWFr2JPBsYNqG20CYu
qjqwcXg9mCknLPwbrzIjAnMGgnwulZHsdzH5URoQJ6JEOZ9Pged6S/7btk8eqlkf
DhNMJnxXU9sCTefr1M+GFvj3Pvw/SUf4ysBkOwOTTlU0Pr091aL7XgvjQEnWkI+s
NBHSTGFMRxcFo7voe1wnum/eH92elAqG+GjdluSsOX4JVu8xZd7a2I0DTs0ryij4
yrJ0w6NC7Td1xbAFmKOMR1uAewGZTweMG3WogMq/2w4O+meEJzxrQNhVJMFW/WwI
cfoQbThQWITBvn44lhJf7Qnfug/pv2WWlg==
-----END CERTIFICATE-----
Generated at Wed Nov 5 01:59:03 2025 by rpki-client