Route Origin Authorization

$ rpki-client -vvvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e35342e302f32342d3234203d3e20343032323838.roa
File:                     33372e3233302e35342e302f32342d3234203d3e20343032323838.roa (raw, json)
Hash identifier:          CHQoBAIkSid3XoaqUjIqU1T3dfx84X8uuGTAVOFQdFs=
Subject key identifier:   F4:54:F7:22:9D:43:BC:43:0D:63:A5:24:DE:E7:4E:AA:5A:48:3B:79
Certificate issuer:       /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial:       0FBAF4673DB1380C84C86DB068A09DE21E237FA0
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e35342e302f32342d3234203d3e20343032323838.roa
Signing time:             Thu 17 Sep 2026 09:28:13 +0000
ROA not before:           Thu 17 Sep 2026 09:23:13 +0000
ROA not after:            Thu 16 Sep 2027 09:28:13 +0000
asID:                     402288
IP address blocks:        37.230.54.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
                          rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Sep 2026 20:45:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:ba:f4:67:3d:b1:38:0c:84:c8:6d:b0:68:a0:9d:e2:1e:23:7f:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
        Validity
            Not Before: Sep 17 09:23:13 2026 GMT
            Not After : Sep 16 09:28:13 2027 GMT
        Subject: CN=F454F7229D43BC430D63A524DEE74EAA5A483B79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d6:42:5a:c6:44:a0:12:02:90:cf:04:4d:51:
                    b0:aa:fa:f7:e9:ad:cf:6f:03:c5:ba:bc:cb:e6:21:
                    68:87:26:98:20:59:6b:a4:fc:8b:20:d9:33:18:3e:
                    91:95:33:17:5c:ae:e5:46:39:31:34:55:26:2d:c0:
                    da:aa:60:05:6a:5b:97:81:e2:71:6e:cd:0d:63:3a:
                    08:19:7e:80:38:86:dc:1b:6e:00:ae:9d:c5:c7:ee:
                    bf:fd:30:bd:c7:15:50:5b:9c:d2:dc:d7:bf:90:8d:
                    e2:33:36:45:8e:56:7b:6a:8d:2d:cc:f1:65:b7:8b:
                    e5:22:b9:cd:81:ea:bf:e8:57:df:1a:ea:62:5d:c0:
                    37:5c:69:8f:48:94:79:f7:d9:a7:1e:10:f3:79:c3:
                    50:39:06:37:e2:c2:d3:dc:b5:c6:2a:05:98:e0:4f:
                    39:cf:17:c4:89:8f:1e:9e:bf:fe:fa:42:16:9c:da:
                    47:e5:05:69:85:b2:45:eb:b5:4c:d6:66:81:6c:47:
                    a4:6e:43:c0:09:04:3e:8a:1e:cf:f1:bf:95:b5:73:
                    5c:93:a7:d0:87:ec:6a:5d:6b:1b:cf:44:d1:42:37:
                    69:fb:10:39:9f:d9:97:2f:e4:04:c2:40:44:59:84:
                    d4:d1:a2:c4:3c:ce:7a:b5:4c:36:81:35:03:4e:1b:
                    34:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:54:F7:22:9D:43:BC:43:0D:63:A5:24:DE:E7:4E:AA:5A:48:3B:79
            X509v3 Authority Key Identifier:
                keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e35342e302f32342d3234203d3e20343032323838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.230.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:d7:5c:87:13:3c:21:a1:27:61:cf:f7:0c:c3:fb:2d:e7:c8:
         f6:52:3a:97:aa:1a:f0:90:af:68:88:af:61:b6:8f:2e:96:64:
         fc:24:67:89:1e:5c:3b:02:91:25:99:b9:fd:31:c9:9f:76:b5:
         8c:b4:5b:59:8b:21:8e:64:92:fb:4e:67:12:d9:c0:1e:7f:8d:
         58:17:ca:61:7f:ec:84:90:5c:b7:16:bc:be:27:38:90:62:3c:
         27:bb:4b:d5:14:08:0c:70:88:52:00:58:4e:a5:6e:b7:32:78:
         d1:96:61:ac:6f:9f:6f:d1:11:12:61:29:0b:d0:9e:4b:f2:3d:
         cd:79:b4:79:58:de:5f:32:a1:c4:71:31:98:3c:fa:95:72:d4:
         83:40:6f:f8:a2:6f:fa:9c:1c:60:cf:25:4e:c9:16:9b:00:2a:
         fd:da:7a:5e:a4:75:f6:e3:10:25:75:d7:55:0f:7a:30:b1:ee:
         10:ab:42:76:cb:8e:ee:db:32:1f:7b:96:54:7d:07:bf:50:56:
         c2:92:6f:47:51:50:f7:67:0d:27:df:0b:05:be:78:0e:1c:d2:
         02:de:5f:05:c9:1e:3d:48:09:a6:9a:95:4d:2d:f6:05:21:c7:
         74:71:8a:1e:5e:ad:b7:8f:9c:55:11:6b:99:21:4e:b8:38:f8:
         5d:09:23:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----