Route Origin Authorization

$ rpki-client -vvvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e34382e302f32342d3234203d3e203536363535.roa
File:                     33372e3233302e34382e302f32342d3234203d3e203536363535.roa (raw, json)
Hash identifier:          kQBhg60j/pThYYLpf0MUhmhJwG1tEc30uo7rCN9YzhY=
Subject key identifier:   21:D9:6C:15:30:77:89:3C:22:EE:50:D4:75:F1:3C:07:80:05:CF:3C
Certificate issuer:       /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial:       52E9ED830720FBCC60A23334EC819A4375B2C068
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e34382e302f32342d3234203d3e203536363535.roa
Signing time:             Fri 23 Oct 2026 12:37:02 +0000
ROA not before:           Fri 23 Oct 2026 12:32:02 +0000
ROA not after:            Fri 22 Oct 2027 12:37:02 +0000
asID:                     56655
IP address blocks:        37.230.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
                          rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 06 Nov 2026 06:21:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:e9:ed:83:07:20:fb:cc:60:a2:33:34:ec:81:9a:43:75:b2:c0:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
        Validity
            Not Before: Oct 23 12:32:02 2026 GMT
            Not After : Oct 22 12:37:02 2027 GMT
        Subject: CN=21D96C153077893C22EE50D475F13C078005CF3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:5c:59:09:2a:3a:39:61:fc:ef:a7:35:eb:a4:
                    46:44:ee:a0:88:8d:a6:da:3b:33:46:9d:16:81:c9:
                    20:5b:df:37:3a:11:67:20:f4:04:ba:48:18:c0:86:
                    89:be:6f:dd:ee:1b:cf:b6:ce:dc:b8:18:50:7f:c2:
                    6d:bd:87:65:5a:9f:51:4d:69:c2:2b:b7:38:05:70:
                    6d:68:eb:4e:1b:f9:e6:2b:8d:f2:db:e4:b1:b5:af:
                    81:6c:55:e2:62:43:ee:5a:d2:ed:c5:1a:4a:22:6b:
                    25:06:c3:77:01:96:23:9c:dd:0b:29:47:c9:27:28:
                    48:8b:9d:71:07:6c:ec:d1:21:b9:54:07:bb:f9:ec:
                    1b:5d:dc:55:fc:de:f8:4b:6e:38:f6:9c:fe:ca:5c:
                    d7:34:25:9e:f9:91:0e:77:f0:0c:c0:6e:62:2b:54:
                    74:6f:19:cf:75:6a:c8:be:18:b4:ed:f3:32:77:06:
                    f0:74:f2:36:a8:65:d1:27:61:03:14:b5:fc:93:d1:
                    df:44:5b:5d:e3:34:17:ca:96:68:73:d7:91:cf:84:
                    f3:f0:61:f6:7a:5b:f7:e5:7f:51:51:48:21:78:c9:
                    9f:89:01:ef:66:be:a8:6b:21:ba:8a:5d:5c:44:ac:
                    b7:71:e4:c1:10:2e:21:88:80:27:53:fb:45:72:c6:
                    4d:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:D9:6C:15:30:77:89:3C:22:EE:50:D4:75:F1:3C:07:80:05:CF:3C
            X509v3 Authority Key Identifier:
                keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e34382e302f32342d3234203d3e203536363535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.230.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:b5:5e:d0:5f:59:a5:77:45:fc:14:fd:ff:61:13:01:1a:4b:
         62:ca:3c:77:ac:3e:23:68:8a:31:a3:b8:f0:d2:35:fa:d5:a3:
         1d:9d:c8:4e:45:8d:bd:f9:20:05:a0:80:9c:d3:b1:11:56:e8:
         5a:bd:28:41:27:0a:c8:88:c0:ff:58:4c:6e:90:8f:69:93:39:
         a5:36:d1:8f:5b:6b:d4:fa:b8:66:4d:fb:54:2e:8e:dc:43:0c:
         07:19:ab:86:e5:0c:12:d6:f3:6c:97:b9:9e:0f:29:e9:2c:c3:
         11:fd:89:10:f8:8d:89:a2:7c:bd:fa:1f:9f:87:1f:4a:b6:7a:
         2a:93:ff:8c:6b:72:ec:0d:57:9f:f1:90:1d:aa:ff:ff:79:db:
         ec:7d:50:21:77:6b:db:a4:ba:33:ef:34:3d:43:79:94:7b:5f:
         06:dc:e9:4c:b4:d9:f7:ea:f4:c2:31:f2:2a:e5:66:5b:6f:32:
         a8:80:cf:61:84:12:ce:f2:40:c7:b7:c2:6a:df:18:6e:86:2a:
         70:01:16:e8:5d:13:0f:6a:d8:7f:39:ad:dc:40:81:3e:2d:7b:
         f6:f9:36:f0:0c:db:9b:a3:74:9c:37:ed:af:cc:e4:52:2d:4a:
         93:6b:a2:0d:fd:0a:c9:5e:66:32:ea:a9:4f:cb:98:a2:3f:3a:
         45:a3:62:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----