Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e35312e302f32342d3234203d3e203631333137.roa
File:                     33372e3233302e35312e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          /zMxBLNa55t3SXBqqBUXyEywikMKJBNsiN9O7IxY04c=
Subject key identifier:   C4:58:B4:38:06:DE:01:C8:58:36:4C:F9:E3:97:78:15:33:8F:F9:6C
Certificate issuer:       /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial:       47F6001A19565F5EBFEA0A3406CD4ADDDC8E3FDE
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e35312e302f32342d3234203d3e203631333137.roa
Signing time:             Fri 06 Feb 2026 22:55:37 +0000
ROA not before:           Fri 06 Feb 2026 22:50:37 +0000
ROA not after:            Fri 05 Feb 2027 22:55:37 +0000
asID:                     61317
IP address blocks:        37.230.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
                          rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 07:38:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:f6:00:1a:19:56:5f:5e:bf:ea:0a:34:06:cd:4a:dd:dc:8e:3f:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
        Validity
            Not Before: Feb  6 22:50:37 2026 GMT
            Not After : Feb  5 22:55:37 2027 GMT
        Subject: CN=C458B43806DE01C858364CF9E3977815338FF96C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:6c:96:49:cc:af:05:7d:a2:0b:70:f5:ea:37:
                    a0:4f:db:27:18:4e:cd:6c:cb:78:56:e2:80:0e:f6:
                    2f:51:29:31:aa:fb:8d:19:f5:27:b6:07:5b:0a:a7:
                    a3:91:60:b9:8e:78:2a:00:6a:18:6d:89:6e:87:cc:
                    8c:43:86:48:df:cc:0e:7b:0c:3f:d7:12:25:96:ef:
                    67:64:3d:68:39:1c:58:bb:f6:0c:73:1f:90:5e:73:
                    41:97:00:ed:a3:47:23:81:57:f0:5d:22:c8:92:03:
                    dd:41:e2:3d:ee:74:d7:22:00:75:07:2e:e3:6e:bc:
                    5b:f5:68:97:1f:11:04:86:a8:97:04:3b:cb:c6:31:
                    fd:b5:85:a3:53:2a:ea:c7:a5:7a:17:ce:46:c8:ff:
                    b8:73:75:b4:bf:ea:b7:34:0c:44:60:70:29:dd:f1:
                    2c:1c:70:c8:0f:e7:34:42:c2:fc:12:05:c1:1c:44:
                    2e:5c:77:43:b3:41:23:db:af:38:93:0b:d4:ec:4e:
                    24:9d:7d:7a:80:58:c3:72:1a:dc:72:3b:d6:4e:ce:
                    e3:28:4b:cc:a8:b1:37:37:11:db:7f:48:d9:09:03:
                    c6:81:af:01:94:3d:96:83:d6:4c:14:8f:21:33:2e:
                    20:5e:58:34:f9:40:ee:0d:0a:81:80:76:df:68:a3:
                    ec:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:58:B4:38:06:DE:01:C8:58:36:4C:F9:E3:97:78:15:33:8F:F9:6C
            X509v3 Authority Key Identifier:
                keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e35312e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.230.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:7d:4f:93:a3:44:7e:7b:51:f9:51:32:d6:f5:ea:3c:9c:97:
         84:28:9b:ea:3f:fa:ad:f7:3b:c6:d5:82:e0:f6:fa:f8:3d:1f:
         2f:39:a3:f3:b6:94:90:3f:8b:ce:dc:94:86:3b:5c:f6:77:7c:
         4e:09:20:8d:86:be:d4:b1:94:84:17:6a:3c:b1:b1:9e:a7:6a:
         6d:1d:a9:c6:93:b3:1a:9d:97:64:7f:2b:ea:03:c4:c9:dc:c3:
         02:60:36:d4:79:a2:1a:d8:cf:5d:6f:ce:6c:2d:8e:84:ef:6f:
         1b:95:c0:cc:b0:18:30:0a:a3:26:0e:7a:92:44:fe:dc:5d:e0:
         b0:ba:f2:df:c8:a1:cd:b2:63:db:b7:a3:48:52:a0:a0:86:85:
         cd:95:47:76:12:97:bf:fc:85:73:ce:af:df:48:ed:09:e7:81:
         9c:0a:5b:5a:cc:96:25:9c:1d:38:b1:e8:58:d7:3a:cd:da:f2:
         56:67:ff:cf:78:dc:15:c3:52:72:63:6e:17:f5:39:26:d5:78:
         b5:e1:fe:67:a1:b8:3c:a9:6a:18:21:ca:b0:50:89:d0:96:5d:
         2c:32:1d:6e:48:dd:a7:30:82:c3:0d:11:5a:db:2f:c6:24:2b:
         72:70:73:25:d5:85:6d:c9:a2:72:c3:41:f2:32:8d:40:f0:90:
         f5:6a:61:6c
-----BEGIN CERTIFICATE-----
MIIFVjCCBD6gAwIBAgIUR/YAGhlWX16/6go0Bs1K3dyOP94wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkEyRkI0REIwQUE0RDAwNjk1ODMxNjg3MkU0NjdCNTU0
RTBGRDBCRTAeFw0yNjAyMDYyMjUwMzdaFw0yNzAyMDUyMjU1MzdaMDMxMTAvBgNV
BAMTKEM0NThCNDM4MDZERTAxQzg1ODM2NENGOUUzOTc3ODE1MzM4RkY5NkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLbJZJzK8FfaILcPXqN6BP2ycY
Ts1sy3hW4oAO9i9RKTGq+40Z9Se2B1sKp6ORYLmOeCoAahhtiW6HzIxDhkjfzA57
DD/XEiWW72dkPWg5HFi79gxzH5Bec0GXAO2jRyOBV/BdIsiSA91B4j3udNciAHUH
LuNuvFv1aJcfEQSGqJcEO8vGMf21haNTKurHpXoXzkbI/7hzdbS/6rc0DERgcCnd
8SwccMgP5zRCwvwSBcEcRC5cd0OzQSPbrziTC9TsTiSdfXqAWMNyGtxyO9ZOzuMo
S8yosTc3Edt/SNkJA8aBrwGUPZaD1kwUjyEzLiBeWDT5QO4NCoGAdt9oo+ytAgMB
AAGjggJgMIICXDAdBgNVHQ4EFgQUxFi0OAbeAchYNkz545d4FTOP+WwwHwYDVR0j
BBgwFoAUKi+02wqk0AaVgxaHLkZ7VU4P0L4wDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
YTZmMjE0N2EtZGU4YS00NDQwLWJjYTItNmQ4YjdjODc2ZmRhLTAvMC8yQTJGQjRE
QjBBQTREMDA2OTU4MzE2ODcyRTQ2N0I1NTRFMEZEMEJFLmNybDCBngYIKwYBBQUH
AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5LzlkZjMzYTU3LTdlNGYtNDg0NC04NGUyLWI3MTUz
YjU1MTFiNC8wLzJBMkZCNERCMEFBNEQwMDY5NTgzMTY4NzJFNDY3QjU1NEUwRkQw
QkUuY2VyMIGiBggrBgEFBQcBCwSBlTCBkjCBjwYIKwYBBQUHMAuGgYJyc3luYzov
L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9hNmYyMTQ3YS1kZThhLTQ0NDAtYmNh
Mi02ZDhiN2M4NzZmZGEtMC8wLzMzMzcyZTMyMzMzMDJlMzUzMTJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDM2MzEzMzMxMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAl5jMwDQYJKoZIhvcN
AQELBQADggEBAHF9T5OjRH57UflRMtb16jycl4Qom+o/+q33O8bVguD2+vg9Hy85
o/O2lJA/i87clIY7XPZ3fE4JII2GvtSxlIQXajyxsZ6nam0dqcaTsxqdl2R/K+oD
xMncwwJgNtR5ohrYz11vzmwtjoTvbxuVwMywGDAKoyYOepJE/txd4LC68t/Ioc2y
Y9u3o0hSoKCGhc2VR3YSl7/8hXPOr99I7QnngZwKW1rMliWcHTix6FjXOs3a8lZn
/8943BXDUnJjbhf1OSbVeLXh/mehuDypahghyrBQidCWXSwyHW5I3acwgsMNEVrb
L8YkK3JwcyXVhW3JonLDQfIyjUDwkPVqYWw=
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:22:33 2026 by rpki-client