Route Origin Authorization

$ rpki-client -vvvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/AS42954.roa
File:                     AS42954.roa (raw, json)
Hash identifier:          Ila4qxLsfvui8mS6gTQNCSFAXPD2iX1EpKiqFQX5CdY=
Subject key identifier:   96:C3:FC:04:C1:70:A4:77:A6:AF:BA:58:54:6F:CF:69:8E:BE:49:F7
Certificate issuer:       /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
Certificate serial:       5629072D60961C8C10568D29B6C8E45248A26875
Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/AS42954.roa
Signing time:             Thu 10 Sep 2026 08:49:22 +0000
ROA not before:           Thu 10 Sep 2026 08:44:22 +0000
ROA not after:            Thu 09 Sep 2027 08:49:22 +0000
asID:                     42954
IP address blocks:        164.37.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl
                          rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 05:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:29:07:2d:60:96:1c:8c:10:56:8d:29:b6:c8:e4:52:48:a2:68:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
        Validity
            Not Before: Sep 10 08:44:22 2026 GMT
            Not After : Sep  9 08:49:22 2027 GMT
        Subject: CN=96C3FC04C170A477A6AFBA58546FCF698EBE49F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:86:b3:fd:e0:b7:bc:7a:71:61:c4:e2:de:7b:
                    1b:f5:d6:b7:92:b4:d6:f1:96:89:fb:1f:6f:7d:a1:
                    aa:3e:42:8f:9d:33:f8:1d:74:8c:a2:49:cc:6c:e4:
                    79:4d:03:aa:7a:a9:97:3e:11:21:b0:81:43:f6:ff:
                    b5:48:a3:ba:e7:fc:6e:37:94:38:ce:c9:d5:df:d5:
                    4f:8b:38:49:fa:41:20:e4:f0:e5:36:76:6a:a5:6f:
                    53:82:23:f1:3f:c9:42:45:ec:e7:9a:59:ab:1e:f9:
                    63:29:20:02:45:d7:c1:9d:ed:3f:56:79:66:96:a3:
                    cb:8d:27:3c:51:f2:97:63:09:4f:c3:53:a8:ea:8a:
                    bc:c2:df:2c:99:b6:ca:86:81:c4:86:36:19:dd:9a:
                    a6:13:de:9f:e2:5c:25:7b:ed:eb:c7:6e:7d:9e:c9:
                    e5:4f:85:f5:ee:d0:e4:f9:fe:75:e0:62:11:54:06:
                    20:78:7b:e0:98:e2:35:2f:85:7e:4e:fd:b4:22:7d:
                    20:33:fb:47:56:27:ad:8d:a1:94:7c:76:f3:1a:17:
                    6b:ab:8e:1a:b3:81:85:2d:d8:73:dc:62:54:8b:fd:
                    7c:1f:8c:6d:72:39:a9:83:03:66:87:28:92:79:71:
                    e3:81:e5:af:70:dc:0c:1f:f1:b2:cf:7a:49:eb:af:
                    13:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:C3:FC:04:C1:70:A4:77:A6:AF:BA:58:54:6F:CF:69:8E:BE:49:F7
            X509v3 Authority Key Identifier:
                keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/AS42954.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.37.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:5e:c1:ee:a6:6c:6d:6b:c9:a8:c8:f7:6b:c9:e5:51:93:11:
         9e:90:17:da:09:9d:1f:14:b2:6c:ca:ba:c8:03:e8:83:19:9f:
         a6:59:a5:1e:a8:c4:c6:e1:71:ca:3a:cc:76:b1:28:61:55:c4:
         56:2f:d7:27:fb:52:20:20:bf:f3:13:ad:41:c3:14:e7:3e:72:
         7d:35:92:59:0a:12:10:77:0c:b8:a0:90:c7:23:a2:f0:3c:de:
         8b:d0:88:22:d9:e9:08:59:e7:c5:83:02:48:10:66:60:b6:21:
         1c:7c:3b:d2:87:ab:b0:f9:2c:70:f8:8e:1c:a3:67:7b:3c:70:
         27:84:e6:19:35:c7:76:0a:7e:91:00:fa:16:58:0a:95:92:d0:
         c1:59:a9:75:55:da:27:ce:0e:fa:7c:9a:04:92:f7:67:b7:7e:
         eb:10:5e:30:16:c1:16:39:4e:18:1b:50:e1:d1:99:cb:45:32:
         fd:ae:29:44:7d:c0:2a:51:eb:cf:49:a5:22:f3:e0:28:71:1f:
         8a:be:36:54:14:4f:2f:39:51:bc:b2:ce:6e:c0:94:a0:c8:95:
         09:aa:65:84:fc:c2:c2:2c:5e:83:83:72:83:4f:6f:bc:ec:53:
         b0:13:c1:90:5e:25:c3:64:2b:02:b4:5b:c1:08:5a:d8:a9:14:
         f7:0c:24:18
-----BEGIN CERTIFICATE-----
MIIFJDCCBAygAwIBAgIUVikHLWCWHIwQVo0ptsjkUkiiaHUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjM1NEQzMjhDQkJGRDFFRjNDRDI5MjY4QTIzQjBGQ0M2
MEUzQTJDNTAeFw0yNjA5MTAwODQ0MjJaFw0yNzA5MDkwODQ5MjJaMDMxMTAvBgNV
BAMTKDk2QzNGQzA0QzE3MEE0NzdBNkFGQkE1ODU0NkZDRjY5OEVCRTQ5RjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPhrP94Le8enFhxOLeexv11reS
tNbxlon7H299oao+Qo+dM/gddIyiScxs5HlNA6p6qZc+ESGwgUP2/7VIo7rn/G43
lDjOydXf1U+LOEn6QSDk8OU2dmqlb1OCI/E/yUJF7OeaWase+WMpIAJF18Gd7T9W
eWaWo8uNJzxR8pdjCU/DU6jqirzC3yyZtsqGgcSGNhndmqYT3p/iXCV77evHbn2e
yeVPhfXu0OT5/nXgYhFUBiB4e+CY4jUvhX5O/bQifSAz+0dWJ62NoZR8dvMaF2ur
jhqzgYUt2HPcYlSL/XwfjG1yOamDA2aHKJJ5ceOB5a9w3Awf8bLPeknrrxM9AgMB
AAGjggIuMIICKjAdBgNVHQ4EFgQUlsP8BMFwpHemr7pYVG/PaY6+SfcwHwYDVR0j
BBgwFoAUs1TTKMu/0e880pJoojsPzGDjosUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
YTAzNzViMzktZjk0OS00Y2I1LWI1MTktZjk0MDA4YjE2NTRjLTAvMC9CMzU0RDMy
OENCQkZEMUVGM0NEMjkyNjhBMjNCMEZDQzYwRTNBMkM1LmNybDCBngYIKwYBBQUH
AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5LzYxNzA4YTZiLTZjM2EtNDBhMC1hMzAyLTU5NWVj
YzE3ODQ4Yy8wL0IzNTREMzI4Q0JCRkQxRUYzQ0QyOTI2OEEyM0IwRkNDNjBFM0Ey
QzUuY2VyMHEGCCsGAQUFBwELBGUwYzBhBggrBgEFBQcwC4ZVcnN5bmM6Ly9yLm1h
Z2VsbGFuLmlweG8uY29tL3JlcG8vYTAzNzViMzktZjk0OS00Y2I1LWI1MTktZjk0
MDA4YjE2NTRjLTAvMC9BUzQyOTU0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApCXtMA0GCSqGSIb3DQEB
CwUAA4IBAQCNXsHupmxta8moyPdryeVRkxGekBfaCZ0fFLJsyrrIA+iDGZ+mWaUe
qMTG4XHKOsx2sShhVcRWL9cn+1IgIL/zE61BwxTnPnJ9NZJZChIQdwy4oJDHI6Lw
PN6L0Igi2ekIWefFgwJIEGZgtiEcfDvSh6uw+Sxw+I4co2d7PHAnhOYZNcd2Cn6R
APoWWAqVktDBWal1Vdonzg76fJoEkvdnt37rEF4wFsEWOU4YG1Dh0ZnLRTL9rilE
fcAqUevPSaUi8+AocR+KvjZUFE8vOVG8ss5uwJSgyJUJqmWE/MLCLF6Dg3KDT2+8
7FOwE8GQXiXDZCsCtFvBCFrYqRT3DCQY
-----END CERTIFICATE-----
Generated at Sun Sep 20 15:44:52 2026 by rpki-client