Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e35322e302f32342d3234203d3e20383334.roa
File:                     33372e3233302e35322e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          CmowrjUB0XBX5mzhE4YhGqWuQFtnIWB02KwaNwuIGSw=
Subject key identifier:   C4:AC:12:11:74:69:2F:97:54:3F:B2:74:5D:B0:92:DE:7A:FD:F5:3A
Certificate issuer:       /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial:       456B6E9755A593FE61D359FBE7D3AED64DC994FC
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e35322e302f32342d3234203d3e20383334.roa
Signing time:             Sun 15 Feb 2026 00:09:34 +0000
ROA not before:           Sun 15 Feb 2026 00:04:34 +0000
ROA not after:            Sun 14 Feb 2027 00:09:34 +0000
asID:                     834
IP address blocks:        37.230.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
                          rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 07:38:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:6b:6e:97:55:a5:93:fe:61:d3:59:fb:e7:d3:ae:d6:4d:c9:94:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
        Validity
            Not Before: Feb 15 00:04:34 2026 GMT
            Not After : Feb 14 00:09:34 2027 GMT
        Subject: CN=C4AC121174692F97543FB2745DB092DE7AFDF53A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:00:3b:db:74:0b:13:55:9e:d0:51:6e:ac:0d:
                    e2:f8:e2:56:9c:0f:64:2e:c8:9d:4e:1d:25:b0:b4:
                    44:41:fd:bd:0c:66:05:9b:75:5d:b0:c1:0f:5a:ab:
                    62:01:1f:41:15:c2:3e:43:25:da:28:4e:eb:cf:72:
                    5d:7b:91:8f:7b:7a:85:a0:84:d2:fb:b0:ee:e8:c2:
                    57:c5:78:49:7f:53:e2:05:b3:f5:4d:f2:c4:3e:94:
                    29:e3:a6:5b:ef:84:bf:b8:96:6f:01:52:78:0d:9a:
                    e3:c9:57:2d:58:7d:b0:8a:18:0c:e8:40:db:a3:d3:
                    b5:68:56:ad:fc:65:00:1b:cd:53:e6:e5:e7:f1:06:
                    62:e8:f6:6a:0c:d6:4e:af:ec:a8:89:94:7c:92:c1:
                    05:67:9b:9a:46:67:d8:18:f4:40:6d:89:e4:09:9a:
                    d3:77:85:e4:4e:15:e1:c7:05:ce:d0:2b:2c:b0:fb:
                    fa:f9:7c:c5:5f:fd:10:d5:8c:7d:a8:cc:d3:ef:70:
                    5a:14:7f:b7:55:61:5b:7e:e2:5d:ff:cd:dc:72:c4:
                    61:9c:a2:d6:ba:3d:b0:0f:53:81:33:82:b1:82:9b:
                    fe:52:b5:44:75:61:a1:08:ba:6f:80:ce:8e:10:6c:
                    4b:b2:af:bb:86:c9:a2:52:43:f9:7a:23:2c:8a:e0:
                    9c:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:AC:12:11:74:69:2F:97:54:3F:B2:74:5D:B0:92:DE:7A:FD:F5:3A
            X509v3 Authority Key Identifier:
                keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e35322e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.230.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:62:f3:cd:dc:18:c8:38:20:92:b4:06:47:26:d4:4a:bb:06:
         59:d2:41:eb:3c:81:25:9f:e4:8d:f4:c9:44:c3:b9:7c:39:f0:
         40:17:4d:d1:7c:03:8e:cf:e3:e2:ee:cf:ee:2a:6c:02:a1:30:
         dc:22:8f:67:62:63:56:98:a8:a2:0b:ed:f3:2f:bd:10:65:66:
         7a:24:53:aa:4a:8f:a4:48:c2:b0:ac:a6:22:ae:7c:40:5b:86:
         54:47:d4:42:27:fe:30:05:d2:d8:ec:5c:32:68:21:9e:b4:20:
         f7:fe:d8:c1:36:c4:b1:fb:83:ba:69:e7:b0:d7:96:70:7e:fd:
         04:6e:d7:e3:b7:d0:43:93:3a:9b:8d:84:fb:cf:50:1a:e3:c7:
         ec:7b:e0:4d:91:9f:6a:bc:6d:5b:41:38:79:4c:7d:ea:13:c5:
         07:57:4d:5d:fa:99:f1:d8:23:48:a0:bc:e3:9f:99:92:68:22:
         6b:7f:cc:e8:c5:99:83:a6:9f:f3:8b:fc:31:79:a3:ed:9d:6e:
         fd:e1:7c:aa:88:85:f0:a3:85:c5:2c:6f:b4:84:4d:21:90:f5:
         4b:5e:d9:49:b0:08:86:3c:37:e1:d6:9c:32:a2:55:a9:de:50:
         ca:3f:c0:bb:ef:71:6a:aa:db:f5:e6:f2:c7:b9:ac:09:9f:5b:
         fb:f7:be:e6
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIURWtul1Wlk/5h01n759Ou1k3JlPwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkEyRkI0REIwQUE0RDAwNjk1ODMxNjg3MkU0NjdCNTU0
RTBGRDBCRTAeFw0yNjAyMTUwMDA0MzRaFw0yNzAyMTQwMDA5MzRaMDMxMTAvBgNV
BAMTKEM0QUMxMjExNzQ2OTJGOTc1NDNGQjI3NDVEQjA5MkRFN0FGREY1M0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0ADvbdAsTVZ7QUW6sDeL44lac
D2QuyJ1OHSWwtERB/b0MZgWbdV2wwQ9aq2IBH0EVwj5DJdooTuvPcl17kY97eoWg
hNL7sO7owlfFeEl/U+IFs/VN8sQ+lCnjplvvhL+4lm8BUngNmuPJVy1YfbCKGAzo
QNuj07VoVq38ZQAbzVPm5efxBmLo9moM1k6v7KiJlHySwQVnm5pGZ9gY9EBtieQJ
mtN3heROFeHHBc7QKyyw+/r5fMVf/RDVjH2ozNPvcFoUf7dVYVt+4l3/zdxyxGGc
ota6PbAPU4EzgrGCm/5StUR1YaEIum+Azo4QbEuyr7uGyaJSQ/l6IyyK4JzxAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUxKwSEXRpL5dUP7J0XbCS3nr99TowHwYDVR0j
BBgwFoAUKi+02wqk0AaVgxaHLkZ7VU4P0L4wDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
YTZmMjE0N2EtZGU4YS00NDQwLWJjYTItNmQ4YjdjODc2ZmRhLTAvMC8yQTJGQjRE
QjBBQTREMDA2OTU4MzE2ODcyRTQ2N0I1NTRFMEZEMEJFLmNybDCBngYIKwYBBQUH
AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5LzlkZjMzYTU3LTdlNGYtNDg0NC04NGUyLWI3MTUz
YjU1MTFiNC8wLzJBMkZCNERCMEFBNEQwMDY5NTgzMTY4NzJFNDY3QjU1NEUwRkQw
QkUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCBigYIKwYBBQUHMAuGfnJzeW5jOi8v
ci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvL2E2ZjIxNDdhLWRlOGEtNDQ0MC1iY2Ey
LTZkOGI3Yzg3NmZkYS0wLzAvMzMzNzJlMzIzMzMwMmUzNTMyMmUzMDJmMzIzNDJk
MzIzNDIwM2QzZTIwMzgzMzM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJeY0MA0GCSqGSIb3DQEBCwUA
A4IBAQAJYvPN3BjIOCCStAZHJtRKuwZZ0kHrPIEln+SN9MlEw7l8OfBAF03RfAOO
z+Pi7s/uKmwCoTDcIo9nYmNWmKiiC+3zL70QZWZ6JFOqSo+kSMKwrKYirnxAW4ZU
R9RCJ/4wBdLY7FwyaCGetCD3/tjBNsSx+4O6aeew15Zwfv0Ebtfjt9BDkzqbjYT7
z1Aa48fse+BNkZ9qvG1bQTh5TH3qE8UHV01d+pnx2CNIoLzjn5mSaCJrf8zoxZmD
pp/zi/wxeaPtnW794XyqiIXwo4XFLG+0hE0hkPVLXtlJsAiGPDfh1pwyolWp3lDK
P8C773Fqqtv15vLHuawJn1v7977m
-----END CERTIFICATE-----
Generated at Sun Mar 1 18:33:52 2026 by rpki-client