Route Origin Authorization

$ rpki-client -vvvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/AS400618.roa
File:                     AS400618.roa (raw, json)
Hash identifier:          4R9D7St/ylZkGuJKpH6Ry0d55G3WFF74OwYsce/T69w=
Subject key identifier:   BB:C2:28:DE:92:77:EB:7F:D3:70:0F:11:F0:67:BD:FA:0F:B7:36:B5
Certificate issuer:       /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
Certificate serial:       76E065139FA97A3E4B3414E180DCD5AEA4279CFE
Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/AS400618.roa
Signing time:             Thu 10 Sep 2026 08:49:21 +0000
ROA not before:           Thu 10 Sep 2026 08:44:21 +0000
ROA not after:            Thu 09 Sep 2027 08:49:21 +0000
asID:                     400618
IP address blocks:        164.37.210.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl
                          rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 05:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:e0:65:13:9f:a9:7a:3e:4b:34:14:e1:80:dc:d5:ae:a4:27:9c:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
        Validity
            Not Before: Sep 10 08:44:21 2026 GMT
            Not After : Sep  9 08:49:21 2027 GMT
        Subject: CN=BBC228DE9277EB7FD3700F11F067BDFA0FB736B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:95:6f:b2:27:70:74:56:40:97:ce:61:ef:31:
                    d7:e8:04:31:ad:86:4a:68:b1:e3:05:0a:7b:3e:f3:
                    1e:48:c4:fb:d0:ad:d8:b9:b0:c2:74:ef:00:1b:d6:
                    ed:3d:d6:d3:f5:b9:e7:41:70:df:ab:cc:a3:8b:5e:
                    96:20:77:87:70:26:70:44:ee:15:88:f4:8d:c1:e9:
                    d3:a7:9a:0b:39:60:ca:ed:41:b6:ac:c2:0f:9b:f2:
                    ac:84:fe:68:09:de:63:a8:f9:1d:eb:5e:c6:63:3f:
                    1a:c9:b3:c0:79:27:37:b7:6c:82:29:72:55:98:01:
                    2b:30:64:0d:74:60:9b:ba:2c:d6:08:5a:83:68:4d:
                    0e:6e:f2:7c:40:d4:a6:87:98:77:39:ef:b2:13:e5:
                    08:3e:f0:5d:68:54:fb:4a:45:fd:8e:4d:25:1c:8f:
                    ae:bc:f2:55:f5:3c:45:f7:ce:cf:5b:21:dc:5b:5a:
                    1d:ff:bb:3c:b4:ff:b1:c2:62:25:7e:f6:9d:a9:c4:
                    48:58:ec:0c:01:5d:a6:bc:7d:1e:62:07:31:91:c8:
                    47:02:ab:71:62:1e:a4:21:2b:64:f2:93:bb:b3:9d:
                    2b:51:db:27:f9:e9:d8:54:5c:08:6b:53:20:98:d1:
                    82:2a:52:09:c4:fb:92:83:f4:aa:00:92:7c:39:76:
                    4d:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:C2:28:DE:92:77:EB:7F:D3:70:0F:11:F0:67:BD:FA:0F:B7:36:B5
            X509v3 Authority Key Identifier:
                keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/AS400618.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.37.210.0/23

    Signature Algorithm: sha256WithRSAEncryption
         01:d9:84:b4:a9:29:ad:cb:fb:6b:b9:b0:14:0d:96:47:27:8a:
         3c:80:cc:18:68:cb:39:0e:ff:c9:e2:81:d6:a5:75:47:11:fe:
         5f:96:09:19:3e:d1:7b:d7:b9:47:07:f7:f3:87:59:54:01:9c:
         e8:e0:04:7f:d4:9b:86:c1:6d:af:2a:75:53:f0:49:7f:58:38:
         65:18:e3:c4:cb:e6:20:13:e1:44:85:8d:60:c7:d0:8a:b3:7e:
         f4:ed:b1:fa:5a:aa:1d:23:f1:0c:a0:45:88:c4:73:6c:10:a6:
         98:4b:f2:b0:93:eb:18:02:79:d8:c3:d2:0b:ad:7d:ec:85:77:
         38:59:85:c2:a0:2f:e9:e0:f7:18:cc:ab:c9:45:24:3d:54:08:
         99:5e:73:c5:bc:ac:61:13:fc:fa:37:a1:8b:02:e2:80:b5:23:
         e9:fe:e3:6d:15:1f:3d:66:15:7a:3f:47:67:be:74:15:68:2f:
         b0:69:5a:7f:e0:3a:cd:70:9b:95:1c:81:c1:4d:fc:f1:5f:2d:
         1e:5b:51:57:47:b2:5e:35:4a:ed:66:80:0c:5a:bc:7f:ad:6d:
         ef:a5:8a:5e:c8:5f:f9:9c:be:52:af:fa:c5:60:81:89:ef:79:
         da:ee:35:33:7d:f6:2f:b6:0d:7e:1d:db:3f:77:5c:c3:f6:5a:
         90:d9:a8:3e
-----BEGIN CERTIFICATE-----
MIIFJTCCBA2gAwIBAgIUduBlE5+pej5LNBThgNzVrqQnnP4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjM1NEQzMjhDQkJGRDFFRjNDRDI5MjY4QTIzQjBGQ0M2
MEUzQTJDNTAeFw0yNjA5MTAwODQ0MjFaFw0yNzA5MDkwODQ5MjFaMDMxMTAvBgNV
BAMTKEJCQzIyOERFOTI3N0VCN0ZEMzcwMEYxMUYwNjdCREZBMEZCNzM2QjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZlW+yJ3B0VkCXzmHvMdfoBDGt
hkposeMFCns+8x5IxPvQrdi5sMJ07wAb1u091tP1uedBcN+rzKOLXpYgd4dwJnBE
7hWI9I3B6dOnmgs5YMrtQbaswg+b8qyE/mgJ3mOo+R3rXsZjPxrJs8B5Jze3bIIp
clWYASswZA10YJu6LNYIWoNoTQ5u8nxA1KaHmHc577IT5Qg+8F1oVPtKRf2OTSUc
j6688lX1PEX3zs9bIdxbWh3/uzy0/7HCYiV+9p2pxEhY7AwBXaa8fR5iBzGRyEcC
q3FiHqQhK2Tyk7uznStR2yf56dhUXAhrUyCY0YIqUgnE+5KD9KoAknw5dk2dAgMB
AAGjggIvMIICKzAdBgNVHQ4EFgQUu8Io3pJ363/TcA8R8Ge9+g+3NrUwHwYDVR0j
BBgwFoAUs1TTKMu/0e880pJoojsPzGDjosUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
YTAzNzViMzktZjk0OS00Y2I1LWI1MTktZjk0MDA4YjE2NTRjLTAvMC9CMzU0RDMy
OENCQkZEMUVGM0NEMjkyNjhBMjNCMEZDQzYwRTNBMkM1LmNybDCBngYIKwYBBQUH
AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5LzYxNzA4YTZiLTZjM2EtNDBhMC1hMzAyLTU5NWVj
YzE3ODQ4Yy8wL0IzNTREMzI4Q0JCRkQxRUYzQ0QyOTI2OEEyM0IwRkNDNjBFM0Ey
QzUuY2VyMHIGCCsGAQUFBwELBGYwZDBiBggrBgEFBQcwC4ZWcnN5bmM6Ly9yLm1h
Z2VsbGFuLmlweG8uY29tL3JlcG8vYTAzNzViMzktZjk0OS00Y2I1LWI1MTktZjk0
MDA4YjE2NTRjLTAvMC9BUzQwMDYxOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAaQl0jANBgkqhkiG9w0B
AQsFAAOCAQEAAdmEtKkprcv7a7mwFA2WRyeKPIDMGGjLOQ7/yeKB1qV1RxH+X5YJ
GT7Re9e5Rwf384dZVAGc6OAEf9SbhsFtryp1U/BJf1g4ZRjjxMvmIBPhRIWNYMfQ
irN+9O2x+lqqHSPxDKBFiMRzbBCmmEvysJPrGAJ52MPSC6197IV3OFmFwqAv6eD3
GMyryUUkPVQImV5zxbysYRP8+jehiwLigLUj6f7jbRUfPWYVej9HZ750FWgvsGla
f+A6zXCblRyBwU388V8tHltRV0eyXjVK7WaADFq8f61t76WKXshf+Zy+Uq/6xWCB
ie952u41M332L7YNfh3bP3dcw/ZakNmoPg==
-----END CERTIFICATE-----
Generated at Sun Sep 20 15:44:41 2026 by rpki-client