Route Origin Authorization

$ rpki-client -vvvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e312e3232342e302f32342d3234203d3e20383334.roa
File:                     33372e312e3232342e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          bkHN8dpo3RDuDbgCq4kFDdMtGJK6+20M751+/onQSBE=
Subject key identifier:   DE:A2:96:32:AA:92:30:B1:16:E2:BC:AD:FC:1B:EF:0E:92:AF:C0:F3
Certificate issuer:       /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial:       2C82E4A587285425502A7F0AC7A76CCCCE91FB26
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e312e3232342e302f32342d3234203d3e20383334.roa
Signing time:             Sun 01 Nov 2026 16:11:38 +0000
ROA not before:           Sun 01 Nov 2026 16:06:38 +0000
ROA not after:            Sun 31 Oct 2027 16:11:38 +0000
asID:                     834
IP address blocks:        37.1.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
                          rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 06 Nov 2026 06:21:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:82:e4:a5:87:28:54:25:50:2a:7f:0a:c7:a7:6c:cc:ce:91:fb:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
        Validity
            Not Before: Nov  1 16:06:38 2026 GMT
            Not After : Oct 31 16:11:38 2027 GMT
        Subject: CN=DEA29632AA9230B116E2BCADFC1BEF0E92AFC0F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:b9:0f:17:ad:3c:2b:98:ea:f6:c0:de:be:76:
                    d2:fe:65:fb:91:e1:6e:9b:eb:d2:19:9f:15:86:8a:
                    6f:47:3f:0f:98:db:9e:69:13:e3:2c:c8:a8:4a:6f:
                    e8:e9:9a:f1:76:7a:67:21:5a:18:6e:cc:78:a7:68:
                    4d:8f:5f:59:4e:6d:95:62:d0:bd:74:7b:67:a2:e0:
                    41:e2:1d:7a:b3:1f:0e:18:5d:2d:28:6e:43:bc:5b:
                    4c:91:7c:68:2f:a3:42:96:2e:f3:b8:4e:f5:e2:43:
                    2e:9f:f5:29:20:5f:e4:58:55:56:bf:14:69:8c:c0:
                    3d:24:5a:5d:75:9e:3e:39:20:83:27:b5:01:73:2c:
                    dc:9c:8b:24:64:10:f8:18:ec:26:e9:72:0c:1c:11:
                    b5:c6:64:35:b6:1f:8b:4c:3d:2c:3d:dd:a2:34:00:
                    6b:7a:51:3b:25:57:ae:2c:05:ce:7b:60:5c:6b:3f:
                    62:7c:17:df:48:a0:f1:44:b4:23:5d:db:71:db:f9:
                    ea:a9:52:6f:0c:ca:f8:ce:45:de:57:2b:59:83:98:
                    a2:8e:97:22:23:56:a9:ce:35:ad:aa:7b:69:e0:f8:
                    35:1c:8a:c6:a1:b7:d0:75:66:27:bc:bb:f9:03:b5:
                    44:95:16:2c:0f:12:38:e4:eb:2e:34:48:90:56:cf:
                    10:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:A2:96:32:AA:92:30:B1:16:E2:BC:AD:FC:1B:EF:0E:92:AF:C0:F3
            X509v3 Authority Key Identifier:
                keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e312e3232342e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.1.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:f7:15:e8:ff:ca:23:92:cb:41:c8:79:53:60:53:4b:28:72:
         2a:4b:5b:4c:39:4b:f6:ad:e2:4f:1d:58:2f:5c:99:44:97:51:
         92:c4:8a:e0:b5:4e:6c:c8:e9:a9:b0:32:1a:16:b5:e3:fe:ae:
         6a:01:aa:39:06:99:74:0e:fc:05:29:74:7b:77:da:6a:67:d3:
         7a:5d:b6:7d:05:8a:9a:a3:35:63:89:0a:3e:70:a2:a4:aa:00:
         95:87:13:81:b9:c2:53:a6:25:76:59:e7:30:41:1f:2f:71:b0:
         43:71:34:53:bf:d4:ba:7d:83:e1:9c:d6:3e:18:7c:c4:bf:26:
         05:89:87:cf:85:a4:61:83:f7:4c:74:0e:16:0e:d7:db:f5:a5:
         d0:2e:16:4e:c6:24:5a:30:31:4e:0b:15:ca:07:78:42:44:f5:
         23:91:d1:88:41:2b:d8:8c:7c:c1:1b:6c:b1:19:23:10:ac:e7:
         14:69:47:13:93:9e:7d:d3:f9:3b:61:de:77:16:d3:05:8e:c7:
         7b:7d:e5:c6:2f:1a:a2:cd:88:57:15:25:56:e0:64:65:ad:be:
         e7:6b:55:42:74:63:b5:9b:72:c3:a4:c6:6f:3a:25:17:da:5c:
         08:1f:60:c2:35:8f:7e:1e:e5:61:b8:cd:04:98:10:51:4a:6d:
         db:e7:d1:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----