Route Origin Authorization

$ rpki-client -vvvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/AS401984.roa
File:                     AS401984.roa (raw, json)
Hash identifier:          +NPIgfzIC5WDsUEKXlW8ZRcFzJChH9EoobrZfJnt6mU=
Subject key identifier:   61:12:05:8D:B1:AF:AE:71:92:F5:E6:0B:59:4C:1E:C7:3F:ED:B7:D7
Certificate issuer:       /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
Certificate serial:       75D800DD48957C45B04F48CC84798C6E48FEFBDB
Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/AS401984.roa
Signing time:             Thu 10 Sep 2026 08:49:20 +0000
ROA not before:           Thu 10 Sep 2026 08:44:20 +0000
ROA not after:            Thu 09 Sep 2027 08:49:20 +0000
asID:                     401984
IP address blocks:        164.37.210.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl
                          rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 05:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:d8:00:dd:48:95:7c:45:b0:4f:48:cc:84:79:8c:6e:48:fe:fb:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
        Validity
            Not Before: Sep 10 08:44:20 2026 GMT
            Not After : Sep  9 08:49:20 2027 GMT
        Subject: CN=6112058DB1AFAE7192F5E60B594C1EC73FEDB7D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:82:e0:25:e4:c8:f3:1c:91:f7:84:32:11:13:
                    fb:0f:2b:ea:08:1e:bf:ed:55:c8:c7:b3:40:87:66:
                    a0:82:94:d5:79:c1:19:55:66:e2:b2:6e:0a:b2:1a:
                    d8:1c:92:84:3f:3f:14:e1:ce:9e:49:49:f1:66:ce:
                    40:6a:5b:04:56:34:b9:9e:22:0d:03:7b:8f:a9:10:
                    ba:32:85:b6:6a:df:ad:85:57:29:7d:43:ac:42:18:
                    3e:d6:d7:a5:c0:d2:5d:be:e8:b0:98:bc:41:33:3a:
                    fd:8c:8d:91:9f:16:83:6d:5e:26:f1:65:9f:91:91:
                    13:de:4b:43:9d:a9:b2:df:79:95:66:a7:bb:b4:00:
                    74:d9:1d:d9:8f:c4:79:80:9c:fd:9f:1b:85:7a:81:
                    cc:70:d2:87:75:77:db:af:6d:4f:6d:99:90:67:83:
                    c9:ef:80:0b:cb:2d:5d:c7:9d:f7:f3:17:fc:e1:8e:
                    1d:15:13:f5:96:51:9d:39:b3:a8:d1:a6:47:fa:19:
                    74:f8:92:d1:1a:85:5e:7f:21:74:47:1e:a7:9a:b7:
                    6c:7d:dd:3d:72:44:cc:93:c4:31:02:60:a3:f9:67:
                    87:6e:b1:6e:e1:8d:48:b7:7a:91:6b:52:be:84:41:
                    eb:60:65:fb:b5:09:66:a0:3e:a7:e3:f4:6c:fc:cb:
                    05:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:12:05:8D:B1:AF:AE:71:92:F5:E6:0B:59:4C:1E:C7:3F:ED:B7:D7
            X509v3 Authority Key Identifier:
                keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/AS401984.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.37.210.0/23

    Signature Algorithm: sha256WithRSAEncryption
         55:65:63:69:7e:8b:be:17:27:16:dd:49:f4:cc:0e:53:03:49:
         1e:a0:d9:84:07:dc:03:84:b4:59:7b:be:53:94:98:a6:d1:d3:
         92:01:a8:10:91:93:6c:90:80:d2:54:4c:ad:c7:5b:c9:b0:dd:
         22:a1:63:80:4b:fe:be:f8:4b:e2:e8:ce:06:a9:d0:b3:58:3e:
         cd:67:0c:b2:62:e5:4a:25:7c:d6:bd:a1:91:ef:2e:62:a1:95:
         1a:ef:53:ce:d6:95:13:78:e9:87:58:3c:9b:88:f7:5d:56:0f:
         dd:3f:4b:8e:f6:9f:f1:cd:3a:6a:6c:c1:3d:2f:ce:65:b5:62:
         d7:39:ab:e9:6b:97:64:3e:5f:c7:fe:ff:f1:6b:42:68:99:ca:
         02:75:f9:91:33:ee:02:f1:36:ef:59:c2:9b:3f:19:ec:56:ab:
         53:e1:59:74:6c:1b:ac:55:8a:91:f9:f7:7b:34:94:c4:1e:47:
         70:aa:ab:be:cb:6a:d6:5d:1f:c4:6b:02:40:bb:fe:0d:3c:16:
         82:26:70:fa:9a:f1:93:d5:8f:06:64:3d:ee:63:7a:03:16:e4:
         12:91:92:6c:f1:ad:50:f1:88:27:05:bb:63:0f:38:a1:1b:2e:
         43:46:57:1c:96:9b:c3:1a:97:9b:64:e9:ba:57:cd:ae:55:0d:
         1a:f4:5f:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 15:44:49 2026 by rpki-client