Route Origin Authorization

$ rpki-client -vvvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/AS834.roa
File:                     AS834.roa (raw, json)
Hash identifier:          o+rcq2bDPsq955+WhfTi0eiLzLshWbjCnzZ3HYMnRvw=
Subject key identifier:   6D:75:A2:5A:D6:C3:35:47:E0:2D:A3:F3:90:2C:BC:38:6A:19:B4:F5
Certificate issuer:       /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
Certificate serial:       33A5BDF4F0AC5F3B1437E6ED28FFB60B6DBC9EEC
Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/AS834.roa
Signing time:             Sun 20 Sep 2026 09:43:33 +0000
ROA not before:           Sun 20 Sep 2026 09:38:33 +0000
ROA not after:            Sun 19 Sep 2027 09:43:33 +0000
asID:                     834
IP address blocks:        62.144.58.0/24 maxlen: 24
                          164.37.200.0/24 maxlen: 24
                          164.37.206.0/23 maxlen: 24
                          164.37.233.0/24 maxlen: 24
                          164.37.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl
                          rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 05:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:a5:bd:f4:f0:ac:5f:3b:14:37:e6:ed:28:ff:b6:0b:6d:bc:9e:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
        Validity
            Not Before: Sep 20 09:38:33 2026 GMT
            Not After : Sep 19 09:43:33 2027 GMT
        Subject: CN=6D75A25AD6C33547E02DA3F3902CBC386A19B4F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f7:5d:d1:2e:69:19:af:79:02:30:ab:52:73:
                    29:8b:09:c9:06:5b:7e:3f:c9:cf:1f:2f:69:30:68:
                    3f:8d:55:1d:e8:53:1b:bf:6d:15:0c:9d:9d:dc:fd:
                    09:35:e3:01:32:2b:e3:c4:f7:95:18:fa:96:a3:8d:
                    ab:77:d6:02:7b:9d:ca:06:23:6e:ab:53:0c:45:71:
                    a5:58:7f:4a:3e:f1:64:71:60:e3:30:9f:b3:f7:07:
                    d6:45:d2:df:e5:27:ec:27:20:fe:65:d4:76:02:9a:
                    0b:b9:4f:39:dc:40:51:f9:34:1a:08:fb:9d:9b:e4:
                    8b:97:d4:a7:a2:7f:3f:4d:51:6e:0d:b7:38:e9:04:
                    1d:0f:c2:ab:2e:2a:b8:6a:52:6a:25:a9:70:c6:7f:
                    ca:44:9a:4d:c5:98:31:f5:13:89:15:38:41:56:ec:
                    8d:45:39:dd:ba:34:99:f5:38:70:26:ac:9d:e2:1f:
                    e8:71:48:f6:39:7b:1d:9e:97:91:67:dc:41:ae:dd:
                    a4:cd:bc:ae:45:cc:5d:88:98:20:98:18:e0:90:cf:
                    cb:4c:01:28:e4:b7:7c:a7:fc:a0:91:d4:8d:a2:8f:
                    e8:76:f4:2c:98:b8:2f:86:77:89:07:2b:c2:33:e6:
                    7b:5e:b6:26:31:29:3a:72:7b:1e:81:ff:7b:ac:07:
                    cf:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:75:A2:5A:D6:C3:35:47:E0:2D:A3:F3:90:2C:BC:38:6A:19:B4:F5
            X509v3 Authority Key Identifier:
                keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/AS834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.144.58.0/24
                  164.37.200.0/24
                  164.37.206.0/23
                  164.37.233.0/24
                  164.37.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:d0:dd:de:d0:4c:a7:09:67:62:19:a4:3e:4a:fe:99:3a:9e:
         e7:95:27:d3:9d:30:73:2c:ec:7f:a9:5c:ef:e1:96:09:1f:d9:
         36:cb:ad:95:45:1b:12:98:72:d4:e9:92:16:24:14:0b:58:73:
         3c:8d:c1:83:e0:cc:da:8d:05:7d:04:c6:42:98:b9:93:aa:06:
         6e:63:4a:4f:cb:9d:ba:44:de:66:5f:c1:59:d3:3f:ce:a9:a3:
         1d:2f:11:34:28:48:78:2d:7b:c8:79:74:36:35:e0:a4:9f:56:
         c8:49:30:53:1f:6f:f7:30:35:19:c3:2f:15:7a:61:b2:0a:f4:
         9c:b2:b5:b0:e3:ec:a1:70:c3:7c:35:c5:5a:06:96:c6:71:85:
         af:f0:2f:d7:4e:d3:21:5c:c4:47:a4:4a:6e:f6:d5:46:ab:f4:
         89:4d:c6:b4:47:6f:1d:b6:bf:ca:c4:39:75:2c:6f:b9:e9:0f:
         47:35:9f:c1:ec:d7:a4:07:04:bc:73:38:5f:88:0b:d7:28:1c:
         2f:7e:c3:6e:79:39:b3:65:98:ff:e0:0a:e3:f0:af:c5:19:a2:
         b2:2d:2a:8c:0c:3f:51:8a:c2:8c:56:98:b9:e4:3f:2f:10:81:
         1f:b0:3f:50:1e:15:e6:dc:78:97:b5:4d:8b:ed:3d:fb:26:22:
         8e:27:ea:e6
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Sep 20 15:44:37 2026 by rpki-client