Route Origin Authorization

$ rpki-client -vvvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e312e3232372e302f32342d3234203d3e20333933393432.roa
File:                     33372e312e3232372e302f32342d3234203d3e20333933393432.roa (raw, json)
Hash identifier:          mhux1VkkIWTWUGsPZCLwn2YjIucAp7eDYx7b1A7vdms=
Subject key identifier:   44:EC:80:4E:C9:69:9E:0B:CD:0F:D8:02:CB:35:01:5B:02:FA:14:17
Certificate issuer:       /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial:       15EF983B6E3EB82714A85D8BE8C79477ECBD4AD7
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e312e3232372e302f32342d3234203d3e20333933393432.roa
Signing time:             Wed 28 Oct 2026 03:49:39 +0000
ROA not before:           Wed 28 Oct 2026 03:44:39 +0000
ROA not after:            Wed 27 Oct 2027 03:49:39 +0000
asID:                     393942
IP address blocks:        37.1.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
                          rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 06 Nov 2026 06:21:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:ef:98:3b:6e:3e:b8:27:14:a8:5d:8b:e8:c7:94:77:ec:bd:4a:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
        Validity
            Not Before: Oct 28 03:44:39 2026 GMT
            Not After : Oct 27 03:49:39 2027 GMT
        Subject: CN=44EC804EC9699E0BCD0FD802CB35015B02FA1417
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ff:e2:be:3e:81:05:91:30:e2:bd:0b:93:c6:
                    b0:e8:b8:6c:93:8d:32:af:b8:5d:2e:59:f2:dd:3b:
                    f1:7f:f8:ed:be:66:d2:84:b2:73:bd:1f:9f:74:fd:
                    c0:60:a0:3a:9a:94:8f:bb:73:d1:61:f8:bb:a3:e7:
                    22:09:6e:7c:b8:64:71:58:ac:a4:e5:18:aa:23:21:
                    74:e3:1c:aa:05:54:40:de:c5:75:18:34:a1:c6:3e:
                    e0:2f:1f:45:83:4b:7e:59:e9:cb:b7:63:4c:d9:5d:
                    c6:d4:8c:ec:6c:41:a5:73:20:e5:28:04:9a:e8:ef:
                    1b:5b:c7:85:3b:53:1f:2b:85:1f:65:82:d0:e1:9b:
                    99:a5:3e:08:dc:01:08:77:a2:f9:f4:d1:f1:be:1b:
                    3c:87:c6:53:89:ff:58:8a:1a:fb:0f:56:d5:0f:fa:
                    c7:9f:aa:37:3a:a5:c2:69:a7:96:7e:a0:d5:3a:6b:
                    41:31:b8:2a:de:60:ba:1d:3d:c9:9f:e6:3b:69:bc:
                    70:1a:3d:2a:1a:67:1f:b8:d5:64:1e:08:5f:0f:59:
                    9e:29:f9:e1:9b:88:8b:52:2a:91:f8:66:d0:22:0b:
                    04:14:ad:f1:9f:ec:78:e3:c9:b3:54:39:bb:f9:27:
                    b7:98:d8:c9:ec:f0:63:c8:91:11:30:02:4c:c6:57:
                    a6:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:EC:80:4E:C9:69:9E:0B:CD:0F:D8:02:CB:35:01:5B:02:FA:14:17
            X509v3 Authority Key Identifier:
                keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e312e3232372e302f32342d3234203d3e20333933393432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.1.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:7f:6d:ba:8c:2b:11:aa:e8:7d:4d:5f:89:49:72:1e:39:56:
         ed:c8:f0:5f:f6:fd:63:64:aa:29:86:0b:b3:1d:6f:eb:68:2a:
         0b:37:28:a6:65:04:96:2e:55:fd:87:3d:85:9d:25:1f:e4:65:
         55:79:68:70:86:89:64:e4:87:76:48:4b:12:b1:04:18:f8:8e:
         2e:71:19:29:ea:9f:e7:6c:75:5a:53:d5:0c:f6:63:93:11:8f:
         05:fd:89:24:68:6b:18:2d:7f:a6:e1:92:3d:91:eb:ea:cc:7a:
         aa:3d:05:a1:68:dd:ab:ec:51:f8:11:c8:73:a3:c1:d7:22:e3:
         53:af:f8:63:df:d8:4b:75:62:52:d0:ab:03:92:88:1c:c2:20:
         78:d0:32:dd:70:16:fb:5e:7a:2c:5f:63:81:33:f6:53:4c:c8:
         c2:2f:5e:bc:87:79:f3:e8:ad:65:f0:30:43:11:38:f7:23:33:
         61:cd:b2:c1:21:fa:1f:69:3b:7c:03:bc:40:06:75:18:27:af:
         fb:83:bd:04:a3:69:24:89:37:a5:25:d1:ae:1a:a4:54:5b:1f:
         ae:b8:eb:c7:3d:82:c7:a1:ed:5d:42:97:a8:a2:92:99:65:3c:
         a6:54:19:02:65:e9:d1:b2:95:02:8b:de:ab:62:14:93:c3:8e:
         1b:cf:8e:b2
-----BEGIN CERTIFICATE-----
MIIFVjCCBD6gAwIBAgIUFe+YO24+uCcUqF2L6MeUd+y9StcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkEyRkI0REIwQUE0RDAwNjk1ODMxNjg3MkU0NjdCNTU0
RTBGRDBCRTAeFw0yNjEwMjgwMzQ0MzlaFw0yNzEwMjcwMzQ5MzlaMDMxMTAvBgNV
BAMTKDQ0RUM4MDRFQzk2OTlFMEJDRDBGRDgwMkNCMzUwMTVCMDJGQTE0MTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz/+K+PoEFkTDivQuTxrDouGyT
jTKvuF0uWfLdO/F/+O2+ZtKEsnO9H590/cBgoDqalI+7c9Fh+Luj5yIJbny4ZHFY
rKTlGKojIXTjHKoFVEDexXUYNKHGPuAvH0WDS35Z6cu3Y0zZXcbUjOxsQaVzIOUo
BJro7xtbx4U7Ux8rhR9lgtDhm5mlPgjcAQh3ovn00fG+GzyHxlOJ/1iKGvsPVtUP
+sefqjc6pcJpp5Z+oNU6a0ExuCreYLodPcmf5jtpvHAaPSoaZx+41WQeCF8PWZ4p
+eGbiItSKpH4ZtAiCwQUrfGf7HjjybNUObv5J7eY2Mns8GPIkREwAkzGV6bBAgMB
AAGjggJgMIICXDAdBgNVHQ4EFgQUROyATslpngvND9gCyzUBWwL6FBcwHwYDVR0j
BBgwFoAUKi+02wqk0AaVgxaHLkZ7VU4P0L4wDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
YTZmMjE0N2EtZGU4YS00NDQwLWJjYTItNmQ4YjdjODc2ZmRhLTAvMC8yQTJGQjRE
QjBBQTREMDA2OTU4MzE2ODcyRTQ2N0I1NTRFMEZEMEJFLmNybDCBngYIKwYBBQUH
AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5LzlkZjMzYTU3LTdlNGYtNDg0NC04NGUyLWI3MTUz
YjU1MTFiNC8wLzJBMkZCNERCMEFBNEQwMDY5NTgzMTY4NzJFNDY3QjU1NEUwRkQw
QkUuY2VyMIGiBggrBgEFBQcBCwSBlTCBkjCBjwYIKwYBBQUHMAuGgYJyc3luYzov
L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9hNmYyMTQ3YS1kZThhLTQ0NDAtYmNh
Mi02ZDhiN2M4NzZmZGEtMC8wLzMzMzcyZTMxMmUzMjMyMzcyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzMzM5MzMzOTM0MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAlAeMwDQYJKoZIhvcN
AQELBQADggEBAKB/bbqMKxGq6H1NX4lJch45Vu3I8F/2/WNkqimGC7Mdb+toKgs3
KKZlBJYuVf2HPYWdJR/kZVV5aHCGiWTkh3ZISxKxBBj4ji5xGSnqn+dsdVpT1Qz2
Y5MRjwX9iSRoaxgtf6bhkj2R6+rMeqo9BaFo3avsUfgRyHOjwdci41Ov+GPf2Et1
YlLQqwOSiBzCIHjQMt1wFvteeixfY4Ez9lNMyMIvXryHefPorWXwMEMROPcjM2HN
ssEh+h9pO3wDvEAGdRgnr/uDvQSjaSSJN6Ul0a4apFRbH66468c9gseh7V1Cl6ii
kpllPKZUGQJl6dGylQKL3qtiFJPDjhvPjrI=
-----END CERTIFICATE-----