Route Origin Authorization

$ rpki-client -vvvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e312e3233312e302f32342d3234203d3e203631333137.roa
File:                     33372e312e3233312e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          gCGDXGk6EcU8TIa1FR/8yAPjVZWAsWsRe/aKQx9abZA=
Subject key identifier:   F0:CA:F7:52:F2:E8:2E:BD:22:6D:3A:31:41:A3:2C:48:8A:37:0E:40
Certificate issuer:       /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial:       731532433B43D4861F837A276234792C05839363
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e312e3233312e302f32342d3234203d3e203631333137.roa
Signing time:             Tue 11 Aug 2026 12:49:24 +0000
ROA not before:           Tue 11 Aug 2026 12:44:24 +0000
ROA not after:            Tue 10 Aug 2027 12:49:24 +0000
asID:                     61317
IP address blocks:        37.1.231.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
                          rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 10:15:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:15:32:43:3b:43:d4:86:1f:83:7a:27:62:34:79:2c:05:83:93:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
        Validity
            Not Before: Aug 11 12:44:24 2026 GMT
            Not After : Aug 10 12:49:24 2027 GMT
        Subject: CN=F0CAF752F2E82EBD226D3A3141A32C488A370E40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:fa:cd:c4:5a:05:61:60:b9:d2:af:97:b2:67:
                    b7:bb:89:a6:49:74:b0:37:cb:3b:0c:66:b0:4d:08:
                    e5:86:e7:3d:d2:41:09:0b:62:22:b8:05:1a:a4:f6:
                    ba:ab:d5:4f:ff:b4:9c:ae:39:b3:de:66:8c:f0:15:
                    59:b4:e8:7f:81:90:3d:ea:40:60:b9:79:88:61:f0:
                    e6:c2:35:e5:dd:19:d8:f0:30:6f:2d:54:a5:da:ad:
                    17:b4:30:c6:13:47:e8:6f:cb:bb:0b:69:ba:f2:59:
                    2d:08:8f:a3:d3:35:64:68:a9:c5:27:5b:8b:e2:6d:
                    3b:12:4c:e1:d9:d0:89:5b:f2:72:99:b7:2c:ad:5e:
                    67:5c:5f:23:33:c2:ca:43:30:c8:62:20:18:bd:1e:
                    5a:f2:b6:d3:e3:ce:0a:2c:17:44:e1:d1:a5:0e:4d:
                    c7:e0:9f:c9:46:ff:a4:af:60:a4:c2:6e:ca:8b:64:
                    17:a8:71:05:2b:b6:df:23:04:c9:7b:4a:19:a9:76:
                    eb:cd:97:d3:fd:e2:aa:b1:c0:d6:17:43:02:da:a9:
                    7d:f6:91:58:4d:a1:f9:cf:d1:d1:aa:c8:d3:8a:89:
                    96:52:9b:7e:39:cf:81:47:ad:aa:c2:3d:28:83:23:
                    9f:c9:ea:00:5f:5e:21:6a:35:90:3c:cc:40:ae:58:
                    ec:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:CA:F7:52:F2:E8:2E:BD:22:6D:3A:31:41:A3:2C:48:8A:37:0E:40
            X509v3 Authority Key Identifier:
                keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e312e3233312e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.1.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:68:e3:73:3f:46:29:21:9c:86:f4:8a:a5:31:49:87:51:fb:
         45:cf:89:e2:f9:d6:80:af:15:a3:20:23:2a:69:8f:5f:de:c5:
         91:d3:63:bf:42:c3:54:61:78:47:9d:22:c4:b6:05:c8:48:31:
         ae:f1:72:82:a1:c9:9d:41:5e:57:03:3b:9b:bd:b7:3f:26:4c:
         31:f8:a8:28:6a:75:58:3c:89:4b:01:44:a6:68:19:7f:46:6c:
         65:43:76:29:b6:44:65:29:a6:d2:5b:04:c5:71:2a:d8:dc:76:
         91:0f:7e:d7:2d:cb:55:19:d9:15:13:3d:43:9e:46:b6:78:80:
         a5:fd:65:d8:6a:b6:45:0d:a8:ba:13:80:ce:8f:41:c2:9a:ae:
         8e:99:3f:80:ef:72:fe:80:ec:1f:fe:32:55:3e:31:1c:2f:5e:
         29:ec:32:53:df:d5:da:45:fe:43:23:97:86:33:7b:69:a3:e9:
         8e:c9:c0:49:dc:61:5e:2e:2a:0a:9d:d5:c8:11:b4:48:ef:bf:
         59:72:67:0e:65:95:e7:96:18:21:32:46:ee:c9:c2:da:3d:95:
         30:a0:6f:4f:a1:6e:da:14:68:5b:a8:60:95:c4:a2:92:af:f6:
         e7:66:1a:f7:a1:02:91:2b:22:d5:27:ca:bc:b4:da:d3:a7:e6:
         90:11:4c:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----