Route Origin Authorization

$ rpki-client -vvvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e312e3232342e302f32342d3234203d3e20383334.roa
File:                     33372e312e3232342e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          bakGKp+ZvdZzxclrP2w3dO7GA5GS7wtzH7hvgzrgR2I=
Subject key identifier:   EE:D8:70:CA:CF:81:45:ED:2B:89:BD:50:A0:99:64:41:9B:A2:08:2C
Certificate issuer:       /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial:       3F0C787743D44FE1C1B5F2098FAAEF701742D62F
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e312e3232342e302f32342d3234203d3e20383334.roa
Signing time:             Thu 17 Sep 2026 22:04:45 +0000
ROA not before:           Thu 17 Sep 2026 21:59:45 +0000
ROA not after:            Thu 16 Sep 2027 22:04:45 +0000
asID:                     834
IP address blocks:        37.1.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
                          rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 10:15:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:0c:78:77:43:d4:4f:e1:c1:b5:f2:09:8f:aa:ef:70:17:42:d6:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
        Validity
            Not Before: Sep 17 21:59:45 2026 GMT
            Not After : Sep 16 22:04:45 2027 GMT
        Subject: CN=EED870CACF8145ED2B89BD50A09964419BA2082C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:06:f6:91:8a:11:61:01:df:51:d1:6e:4f:90:
                    a3:d5:08:fa:06:c5:60:2f:40:d0:c8:aa:68:ba:98:
                    55:87:11:81:cf:fd:07:c2:59:59:12:93:65:6f:36:
                    30:ef:ba:58:30:6b:65:24:7d:df:b8:1b:67:72:69:
                    a0:21:16:6e:bc:66:0c:89:72:bb:18:79:0c:5f:1c:
                    9b:87:b8:96:00:b0:dd:27:60:be:97:d9:40:7e:f9:
                    85:f2:1f:30:a4:bc:6e:c0:b6:e9:fe:2e:9a:77:f3:
                    6a:33:16:35:a2:a9:0e:71:72:c8:4a:f5:55:e9:84:
                    26:5d:8b:34:a3:49:29:c2:47:d3:27:9e:f7:8c:9e:
                    d3:2f:2c:ec:a5:37:29:55:47:7f:4c:56:7c:76:1b:
                    0b:88:b4:3e:c2:58:e0:b4:8d:b7:cc:f1:38:e1:d1:
                    83:b6:74:19:29:ff:90:41:64:66:16:bf:9d:5c:66:
                    97:f0:ee:f0:c9:fc:9b:0c:78:68:0b:06:56:37:d9:
                    96:fc:bd:88:e0:e3:6f:08:8e:be:46:3a:6a:82:41:
                    14:27:8f:20:94:d2:36:f5:36:cd:fd:ca:77:5b:f5:
                    49:d1:32:af:65:b3:d6:09:b1:c5:8d:97:13:d2:23:
                    8e:f2:34:23:a9:b6:d4:82:8f:41:5d:f0:c8:1b:59:
                    70:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:D8:70:CA:CF:81:45:ED:2B:89:BD:50:A0:99:64:41:9B:A2:08:2C
            X509v3 Authority Key Identifier:
                keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e312e3232342e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.1.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:23:f5:30:0c:46:50:d6:84:46:b9:b3:44:93:85:2e:5f:29:
         02:47:6b:b1:09:c1:bd:74:5f:02:22:c7:90:c1:68:2b:1f:e4:
         ff:d6:88:76:1a:42:8b:c2:f9:4e:e1:f8:63:9d:31:82:6a:0f:
         17:7d:39:f6:57:c1:09:0f:2c:f1:6c:82:a0:bd:3d:7f:c6:10:
         be:fc:ee:30:75:02:15:b5:0b:7b:2b:2c:28:b1:bc:46:ef:59:
         51:ff:4d:19:42:02:a9:b2:4d:42:12:45:53:f8:6b:44:c1:62:
         f7:5a:cf:d4:bb:52:7d:47:3a:de:41:c2:4d:fe:17:0c:19:32:
         8f:8a:d1:bb:f4:1d:82:b2:4e:67:7d:6b:a0:7c:1e:74:15:ff:
         d6:a0:b2:3f:d2:d5:d2:ba:bb:1c:79:0a:a7:ff:08:0a:94:ea:
         fa:a9:95:f2:81:96:be:3a:78:86:53:f7:d2:0a:2c:27:80:5e:
         e5:f9:39:60:f9:e3:49:49:8a:51:eb:fc:a4:5f:9c:e4:9c:49:
         97:a4:44:bb:43:31:01:cf:75:2b:0a:bf:a6:07:3c:90:32:91:
         9b:6d:de:5e:bd:20:1b:6b:7c:5e:9b:4f:ad:e7:cd:d2:1c:80:
         be:62:11:84:63:01:9f:18:2c:08:5d:84:d6:42:cd:6a:53:21:
         da:78:a1:53
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUPwx4d0PUT+HBtfIJj6rvcBdC1i8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkEyRkI0REIwQUE0RDAwNjk1ODMxNjg3MkU0NjdCNTU0
RTBGRDBCRTAeFw0yNjA5MTcyMTU5NDVaFw0yNzA5MTYyMjA0NDVaMDMxMTAvBgNV
BAMTKEVFRDg3MENBQ0Y4MTQ1RUQyQjg5QkQ1MEEwOTk2NDQxOUJBMjA4MkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbBvaRihFhAd9R0W5PkKPVCPoG
xWAvQNDIqmi6mFWHEYHP/QfCWVkSk2VvNjDvulgwa2Ukfd+4G2dyaaAhFm68ZgyJ
crsYeQxfHJuHuJYAsN0nYL6X2UB++YXyHzCkvG7Atun+Lpp382ozFjWiqQ5xcshK
9VXphCZdizSjSSnCR9MnnveMntMvLOylNylVR39MVnx2GwuItD7CWOC0jbfM8Tjh
0YO2dBkp/5BBZGYWv51cZpfw7vDJ/JsMeGgLBlY32Zb8vYjg428Ijr5GOmqCQRQn
jyCU0jb1Ns39yndb9UnRMq9ls9YJscWNlxPSI47yNCOpttSCj0Fd8MgbWXBrAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU7thwys+BRe0rib1QoJlkQZuiCCwwHwYDVR0j
BBgwFoAUKi+02wqk0AaVgxaHLkZ7VU4P0L4wDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
YTZmMjE0N2EtZGU4YS00NDQwLWJjYTItNmQ4YjdjODc2ZmRhLTAvMC8yQTJGQjRE
QjBBQTREMDA2OTU4MzE2ODcyRTQ2N0I1NTRFMEZEMEJFLmNybDCBngYIKwYBBQUH
AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5LzlkZjMzYTU3LTdlNGYtNDg0NC04NGUyLWI3MTUz
YjU1MTFiNC8wLzJBMkZCNERCMEFBNEQwMDY5NTgzMTY4NzJFNDY3QjU1NEUwRkQw
QkUuY2VyMIGbBggrBgEFBQcBCwSBjjCBizCBiAYIKwYBBQUHMAuGfHJzeW5jOi8v
ci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvL2E2ZjIxNDdhLWRlOGEtNDQ0MC1iY2Ey
LTZkOGI3Yzg3NmZkYS0wLzAvMzMzNzJlMzEyZTMyMzIzNDJlMzAyZjMyMzQyZDMy
MzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEACUB4DANBgkqhkiG9w0BAQsFAAOC
AQEAdyP1MAxGUNaERrmzRJOFLl8pAkdrsQnBvXRfAiLHkMFoKx/k/9aIdhpCi8L5
TuH4Y50xgmoPF3059lfBCQ8s8WyCoL09f8YQvvzuMHUCFbULeyssKLG8Ru9ZUf9N
GUICqbJNQhJFU/hrRMFi91rP1LtSfUc63kHCTf4XDBkyj4rRu/QdgrJOZ31roHwe
dBX/1qCyP9LV0rq7HHkKp/8ICpTq+qmV8oGWvjp4hlP30gosJ4Be5fk5YPnjSUmK
Uev8pF+c5JxJl6REu0MxAc91Kwq/pgc8kDKRm23eXr0gG2t8XptPrefN0hyAvmIR
hGMBnxgsCF2E1kLNalMh2nihUw==
-----END CERTIFICATE-----