Route Origin Authorization

$ rpki-client -vvvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/AS215114.roa
File:                     AS215114.roa (raw, json)
Hash identifier:          Ok4W5+Fj+LOBYOAmSq4H1eNcf8wwNBFFbXF2qvXVwj0=
Subject key identifier:   1D:DE:63:45:4C:A9:96:5F:90:BB:8D:B2:06:FA:F6:42:FD:20:99:5E
Certificate issuer:       /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
Certificate serial:       4D18DDD9C4C2F6EA8E970078449B618220AF5C6A
Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/AS215114.roa
Signing time:             Thu 10 Sep 2026 20:22:59 +0000
ROA not before:           Thu 10 Sep 2026 20:17:59 +0000
ROA not after:            Thu 09 Sep 2027 20:22:59 +0000
asID:                     215114
IP address blocks:        164.37.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl
                          rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 10:19:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:18:dd:d9:c4:c2:f6:ea:8e:97:00:78:44:9b:61:82:20:af:5c:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
        Validity
            Not Before: Sep 10 20:17:59 2026 GMT
            Not After : Sep  9 20:22:59 2027 GMT
        Subject: CN=1DDE63454CA9965F90BB8DB206FAF642FD20995E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c4:1d:cc:49:94:84:58:67:23:a5:de:14:d6:
                    31:ac:f0:e6:5f:fb:d5:0d:91:14:d4:fb:d8:7c:82:
                    7f:52:27:73:af:d8:12:45:f7:ea:45:43:a6:79:97:
                    f8:af:81:76:a9:62:5b:52:ab:21:15:54:87:ca:1f:
                    fe:0e:f8:b2:7c:e2:51:d0:0c:b6:89:1c:80:d2:15:
                    04:96:bb:78:70:87:dc:00:21:69:4a:b8:cd:fe:bc:
                    26:37:ca:6b:22:17:d4:72:4e:0f:37:cc:54:31:0f:
                    3c:68:eb:86:49:bf:55:f5:85:9c:38:0b:81:b9:ed:
                    38:1f:a3:05:c0:28:db:ad:80:36:f4:e0:8b:7d:f5:
                    56:22:84:96:d4:27:60:ad:31:ea:ba:c6:14:a0:43:
                    6c:2f:89:5a:f9:76:03:e1:2e:0f:9f:a1:76:0c:00:
                    a6:83:06:34:7a:3a:1f:3d:5a:68:ec:25:9b:b4:6a:
                    58:4c:8e:eb:d4:c0:c7:a3:76:a0:94:67:11:7f:79:
                    17:30:e3:c3:77:85:92:62:df:fe:b6:f4:a9:32:77:
                    0d:dc:42:b9:e8:2c:f3:1e:0f:9d:d3:06:b6:bb:7d:
                    85:c2:8a:8b:f0:ac:5b:67:74:5e:13:03:71:bd:83:
                    06:d8:bb:d4:21:15:e0:d8:ad:8b:45:9d:4a:d5:a3:
                    89:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:DE:63:45:4C:A9:96:5F:90:BB:8D:B2:06:FA:F6:42:FD:20:99:5E
            X509v3 Authority Key Identifier:
                keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/AS215114.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.37.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:01:bc:98:99:ed:15:4e:b3:d7:7c:99:77:51:b3:d5:bf:81:
         0d:1e:51:f5:46:8d:65:c1:c3:b4:05:5b:78:21:7e:ca:c0:c4:
         27:39:74:a3:9d:35:23:ee:67:a0:ca:db:cc:0b:6c:f5:a6:85:
         87:9c:4a:74:b2:e2:4d:02:d0:99:27:65:38:02:32:8a:e6:17:
         7e:a5:94:81:fc:bf:88:aa:4a:71:8e:42:f6:ed:ac:9d:b9:94:
         c7:14:3f:87:08:1b:21:c6:29:37:f3:89:aa:6c:9e:c4:65:f2:
         56:ec:37:e1:b4:0b:4b:dd:60:e7:1f:7c:b2:8e:7e:d1:e1:96:
         fb:ee:0f:02:a8:30:75:f2:4f:cf:89:3d:f8:17:a9:4b:c7:13:
         8b:46:b4:27:c0:91:65:5f:2e:42:c2:a2:85:ea:f1:ea:f1:2f:
         32:8e:30:c6:45:e7:81:fe:f6:72:b6:b3:68:90:ff:46:31:c3:
         ee:6c:b6:48:7d:cd:f3:06:be:e0:fb:b7:a8:6f:10:5a:7e:b5:
         ff:b1:84:f0:6a:f5:bb:bd:b7:42:64:c4:34:66:a3:de:25:b0:
         52:86:ec:45:de:38:ba:1b:f0:0d:db:f8:93:79:27:70:ba:6d:
         7f:16:d7:f8:af:d3:45:31:35:be:4f:ba:5b:3c:12:8e:e9:e3:
         7a:5c:76:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 19:20:49 2026 by rpki-client