Route Origin Authorization

$ rpki-client -vvvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e312e3232392e302f32342d3234203d3e203631333137.roa
File:                     33372e312e3232392e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          XDyoLZy0OYjjJmkcPDrfRqBP7uBlQJsDcn4EsZsC2wE=
Subject key identifier:   16:2C:30:6C:1C:C6:A2:60:84:AD:40:B5:B4:EA:44:F8:6C:B6:C7:D5
Certificate issuer:       /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial:       4216151EA88F27C8A45B2C218E46DC79645AEED6
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e312e3232392e302f32342d3234203d3e203631333137.roa
Signing time:             Tue 11 Aug 2026 12:49:25 +0000
ROA not before:           Tue 11 Aug 2026 12:44:25 +0000
ROA not after:            Tue 10 Aug 2027 12:49:25 +0000
asID:                     61317
IP address blocks:        37.1.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
                          rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 23:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:16:15:1e:a8:8f:27:c8:a4:5b:2c:21:8e:46:dc:79:64:5a:ee:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
        Validity
            Not Before: Aug 11 12:44:25 2026 GMT
            Not After : Aug 10 12:49:25 2027 GMT
        Subject: CN=162C306C1CC6A26084AD40B5B4EA44F86CB6C7D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f2:b7:15:95:9f:3f:9b:a3:23:90:f5:d2:e1:
                    fe:86:82:78:5b:12:35:be:c7:0e:5d:94:54:f9:81:
                    45:35:a8:09:d8:d5:d1:74:b1:eb:e6:04:1a:5c:36:
                    fc:e1:9e:dd:5b:af:4b:a2:39:af:97:a0:56:f1:2d:
                    41:79:70:a1:ec:9d:0f:eb:1c:a4:cc:de:91:89:64:
                    4c:cc:78:f7:17:07:e0:c9:f0:fb:2d:c0:0a:de:c3:
                    d7:18:7d:c7:30:fb:ee:70:9c:0c:83:75:59:90:48:
                    e7:8d:09:5a:1f:2a:c1:6c:aa:86:2e:59:fe:0b:29:
                    f5:60:62:4c:2e:94:cd:fd:c3:b4:c6:d9:3b:a8:33:
                    05:68:34:a1:cb:a0:ed:51:a4:20:a1:65:c5:16:ce:
                    dd:ac:8d:fd:25:d7:76:7b:22:18:78:dd:e9:23:85:
                    19:03:3d:08:d6:ff:06:94:b6:f9:06:cd:eb:e8:0f:
                    a0:d7:e4:6b:7f:8c:3a:8a:2f:80:91:0b:2c:08:1a:
                    4a:ad:bf:82:d9:80:5c:dc:74:5c:bf:5f:55:dd:63:
                    09:69:a9:6b:1b:98:d9:f4:43:ba:96:a9:1f:a0:e3:
                    10:9e:ee:2d:f6:e3:78:44:f6:d3:bb:ce:06:61:5c:
                    28:33:08:9f:c3:23:4e:b2:bd:41:9e:62:76:d9:87:
                    59:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:2C:30:6C:1C:C6:A2:60:84:AD:40:B5:B4:EA:44:F8:6C:B6:C7:D5
            X509v3 Authority Key Identifier:
                keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e312e3232392e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.1.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:d9:f4:87:15:91:08:15:c9:09:3c:9b:25:a5:cb:0f:58:4d:
         5a:70:58:2d:47:59:d8:41:bf:6a:82:62:32:7b:03:d4:72:70:
         00:fe:32:6e:b1:83:cc:b6:a8:99:49:06:24:2e:59:c8:ad:ce:
         ef:7c:f6:d0:cf:4d:3f:cd:c8:ae:f5:0f:f1:52:3b:20:be:33:
         e3:95:3a:fb:20:96:af:a6:07:3d:c3:7f:fd:0e:5f:2b:6b:27:
         50:73:60:a2:de:25:a1:34:42:2e:52:16:a5:93:c9:3f:78:3d:
         97:e0:4d:40:23:e2:f5:5d:1f:0f:bd:d3:24:64:8f:b1:95:bd:
         1c:ca:3e:38:fd:d3:b8:f7:8b:2e:29:10:25:67:33:5d:bf:34:
         c8:d5:eb:8a:4d:f4:31:6e:25:08:b8:25:38:8a:83:4a:3c:19:
         48:51:53:7e:90:91:e0:ec:d1:5c:1e:61:1a:46:c9:6d:ba:23:
         d3:34:3a:9c:a7:ce:4b:fb:96:ef:a9:3c:1d:c2:97:d6:d6:82:
         ed:70:3b:b5:ac:c4:16:b1:fa:af:f0:6c:9f:37:02:8b:89:6f:
         20:25:2f:ed:65:b1:ca:ed:27:ff:63:bd:ab:b1:60:f2:06:43:
         2c:b4:7b:03:c9:1a:a3:3f:44:c1:dc:9d:54:69:c1:35:64:16:
         8d:5c:ad:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----