Route Origin Authorization

$ rpki-client -vvvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e34382e302f32342d3234203d3e2039333034.roa
File:                     33372e3233302e34382e302f32342d3234203d3e2039333034.roa (raw, json)
Hash identifier:          UDhV9BYkbY1VhmX8VgaxGWXlMF31ypDAvHqJ7SgTuyg=
Subject key identifier:   98:C8:6B:F5:8A:11:13:D7:08:20:75:0F:A8:56:F0:CB:2D:52:BF:D7
Certificate issuer:       /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial:       4B292DDAE49D38B48875CC2F28428E529C70BBD0
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e34382e302f32342d3234203d3e2039333034.roa
Signing time:             Tue 08 Sep 2026 06:25:21 +0000
ROA not before:           Tue 08 Sep 2026 06:20:21 +0000
ROA not after:            Tue 07 Sep 2027 06:25:21 +0000
asID:                     9304
IP address blocks:        37.230.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
                          rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Sep 2026 20:45:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:29:2d:da:e4:9d:38:b4:88:75:cc:2f:28:42:8e:52:9c:70:bb:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
        Validity
            Not Before: Sep  8 06:20:21 2026 GMT
            Not After : Sep  7 06:25:21 2027 GMT
        Subject: CN=98C86BF58A1113D70820750FA856F0CB2D52BFD7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:60:84:ac:79:b0:23:4d:cf:b6:88:95:35:9b:
                    e1:10:1c:7b:dc:de:6e:aa:b1:e6:eb:66:0c:4f:59:
                    99:cc:fe:4d:7b:36:3d:38:e0:e7:72:04:16:66:9f:
                    58:d3:4b:91:6d:64:a0:f9:44:5c:56:3f:37:1e:34:
                    0c:b2:31:fc:3c:a9:d3:e2:4d:f6:df:87:a5:83:c3:
                    8b:da:c4:76:a4:33:e0:94:b7:73:18:fb:b5:aa:13:
                    48:82:b1:74:94:1e:81:4a:a4:50:7c:e5:02:2b:cd:
                    91:da:40:e0:d2:dd:40:b9:3b:43:c1:f2:fc:3c:e1:
                    26:04:c6:7a:0d:b0:47:8b:fb:0b:e2:4f:5a:ed:da:
                    80:6c:2d:e6:9f:dd:2e:c0:8a:7f:61:7c:06:ef:7d:
                    f1:57:fb:85:ad:d4:85:75:53:d4:ec:ad:36:05:c4:
                    5d:97:2f:40:5f:66:77:fb:7b:aa:c1:4a:f2:93:7c:
                    61:17:ac:10:57:37:76:92:ad:27:f1:eb:5e:2b:bd:
                    b6:7a:d9:dd:de:07:99:22:ca:84:a8:4a:34:a2:cb:
                    8c:46:75:65:e5:87:5e:66:29:26:e7:58:96:fc:83:
                    a3:7e:5f:fc:87:35:35:85:42:64:97:78:f6:fa:6f:
                    62:14:ed:14:bb:af:0d:67:5f:04:d6:37:33:7c:a1:
                    ff:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:C8:6B:F5:8A:11:13:D7:08:20:75:0F:A8:56:F0:CB:2D:52:BF:D7
            X509v3 Authority Key Identifier:
                keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e34382e302f32342d3234203d3e2039333034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.230.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:fe:3c:cc:b6:07:78:71:ee:75:aa:c4:43:6a:fa:3a:05:d0:
         dc:18:78:c7:0a:18:fd:49:3e:8c:65:19:47:c8:3e:90:ee:11:
         98:3e:79:71:8b:fb:32:78:53:5c:9d:d7:10:0c:a2:b5:9a:54:
         e5:14:06:3e:51:68:44:fa:d6:b4:51:82:61:18:e5:cb:fa:d2:
         e0:bd:b6:5d:ca:be:5e:e2:90:46:3a:8c:01:4c:d4:00:8f:f1:
         42:e9:54:7e:10:d6:69:e4:0b:fe:84:ef:28:b9:25:71:7c:a5:
         ea:0d:c0:d0:65:f9:1d:41:9b:ad:d3:7f:a0:eb:23:10:78:ff:
         66:a2:37:72:da:c5:1a:cc:50:3b:68:6a:09:f1:84:be:19:37:
         5f:c9:46:30:be:12:c2:8b:0f:a1:54:ba:d8:aa:d1:4b:33:94:
         92:70:67:83:28:7c:81:92:3a:9d:39:33:70:27:ac:e3:d3:ad:
         21:3e:23:fc:2c:c6:09:f6:30:2d:3d:71:fc:bb:d1:c6:13:f1:
         76:14:1c:a1:95:73:a1:02:ea:4d:cd:a8:57:c0:83:de:c1:c0:
         22:f1:25:69:df:d9:75:77:b1:60:84:f5:66:8e:14:dd:dc:2b:
         bd:ce:ea:88:d5:ca:55:fb:ad:ef:86:1e:88:08:c3:09:7b:5f:
         1c:35:fa:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----