Route Origin Authorization

$ rpki-client -vvvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e35322e302f32342d3234203d3e2039333034.roa
File:                     33372e3233302e35322e302f32342d3234203d3e2039333034.roa (raw, json)
Hash identifier:          MtOuRJ4fsJ358J1Edaf7UJcLP8C334yZfTCyGj6nzGA=
Subject key identifier:   E0:C6:BA:84:6E:13:ED:3F:74:87:81:49:BF:18:38:32:CF:0F:29:14
Certificate issuer:       /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial:       5DB2C7E82B2AECF640B89E9D6960ACFD66340D48
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e35322e302f32342d3234203d3e2039333034.roa
Signing time:             Tue 08 Sep 2026 06:25:12 +0000
ROA not before:           Tue 08 Sep 2026 06:20:12 +0000
ROA not after:            Tue 07 Sep 2027 06:25:12 +0000
asID:                     9304
IP address blocks:        37.230.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
                          rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Sep 2026 20:45:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:b2:c7:e8:2b:2a:ec:f6:40:b8:9e:9d:69:60:ac:fd:66:34:0d:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
        Validity
            Not Before: Sep  8 06:20:12 2026 GMT
            Not After : Sep  7 06:25:12 2027 GMT
        Subject: CN=E0C6BA846E13ED3F74878149BF183832CF0F2914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:db:d5:33:1c:7f:ba:71:61:33:1c:e3:4f:fb:
                    f1:d6:36:df:a2:50:f0:d1:c9:f8:d0:aa:ad:06:94:
                    a2:fe:51:ff:58:d7:1b:ee:c5:e7:de:84:ea:6b:55:
                    3c:a0:2f:11:28:85:d2:a9:6e:4f:68:47:4e:a5:2f:
                    d2:f4:5a:29:74:8b:8d:8b:4e:5e:6a:ab:5d:3e:f4:
                    d0:37:73:f4:4f:e3:e2:f6:52:8f:58:50:0d:fa:2d:
                    50:7d:76:cb:8c:c1:fd:78:df:9f:b9:71:87:e4:cc:
                    c9:ca:9d:73:47:6c:c8:d9:56:16:08:cc:4a:39:1d:
                    2d:4f:c2:3d:d1:ea:ff:b8:5c:85:e5:2b:30:34:d8:
                    ac:02:75:85:02:04:31:26:08:ad:bc:86:b7:24:3c:
                    eb:9c:2c:2d:e4:f0:c0:d8:ce:b3:05:8a:b2:3c:49:
                    2f:47:50:4c:f6:5c:3d:5c:c1:47:76:25:33:8c:1d:
                    9f:c8:83:71:9c:d5:c7:bf:ce:85:60:33:8d:61:36:
                    8e:05:fe:23:76:cc:39:b4:d0:80:76:7a:20:79:38:
                    7c:11:8c:aa:ba:8b:e3:16:6d:41:0a:5c:f6:6a:8e:
                    47:67:e1:79:9e:d0:36:35:52:d4:9d:d0:e1:0e:ae:
                    1a:6a:22:44:63:1f:fb:4a:01:51:4d:a9:19:24:64:
                    66:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:C6:BA:84:6E:13:ED:3F:74:87:81:49:BF:18:38:32:CF:0F:29:14
            X509v3 Authority Key Identifier:
                keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e35322e302f32342d3234203d3e2039333034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.230.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:d4:2a:84:4b:a4:85:98:a2:57:81:87:87:9b:2d:2e:96:58:
         6c:be:e9:79:2e:be:41:a4:0e:b0:a5:c6:ea:d2:12:22:4c:34:
         f4:87:45:54:0a:4d:89:06:2f:06:ab:83:a8:1e:93:55:ff:2f:
         8c:b0:69:97:b6:04:6f:00:8f:66:f4:de:0e:49:52:07:12:81:
         6c:0a:3c:0e:9a:e9:22:40:c1:75:e2:ab:ec:23:5d:86:7c:71:
         bd:67:12:4a:22:dd:07:30:89:c5:ab:c4:28:35:ec:3b:89:c5:
         a2:1b:d9:7c:95:21:30:8f:b2:ea:d2:e0:ea:3a:1f:4e:0b:39:
         88:d4:04:ce:54:ca:72:cb:6a:8a:3d:7a:e0:99:90:30:8e:5c:
         b6:2e:22:b3:69:46:f6:b4:87:e6:3c:99:cb:43:f9:1f:a2:4b:
         18:a2:fc:29:8e:30:58:5b:58:52:d5:18:8c:e6:18:9b:79:c2:
         51:98:07:2c:50:38:84:dd:23:d3:91:84:dd:63:41:70:2f:67:
         8e:0e:3a:10:a4:de:7a:b8:fb:5c:77:f4:d9:a4:e5:8d:90:30:
         6d:7d:5c:78:ec:b7:58:92:db:ca:69:23:29:13:c8:8b:28:2b:
         7a:68:1c:97:de:30:f4:f4:d2:fc:5b:0d:3a:f5:d2:cc:1e:ee:
         73:a5:79:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----