Route Origin Authorization

$ rpki-client -vvvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e36332e302f32342d3234203d3e203536363535.roa
File:                     33372e3233302e36332e302f32342d3234203d3e203536363535.roa (raw, json)
Hash identifier:          k++E5Eir/ZRGcchwilh1G653+M75f858k5/AcDKdElA=
Subject key identifier:   EE:42:00:71:BB:86:DF:F9:F0:90:9F:DB:AD:DB:79:80:3C:C3:AC:11
Certificate issuer:       /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial:       4BF1AA879E02D48F9369C6BD3359F0B05FCE5B7B
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e36332e302f32342d3234203d3e203536363535.roa
Signing time:             Fri 23 Oct 2026 12:37:02 +0000
ROA not before:           Fri 23 Oct 2026 12:32:02 +0000
ROA not after:            Fri 22 Oct 2027 12:37:02 +0000
asID:                     56655
IP address blocks:        37.230.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
                          rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 06 Nov 2026 06:21:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:f1:aa:87:9e:02:d4:8f:93:69:c6:bd:33:59:f0:b0:5f:ce:5b:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
        Validity
            Not Before: Oct 23 12:32:02 2026 GMT
            Not After : Oct 22 12:37:02 2027 GMT
        Subject: CN=EE420071BB86DFF9F0909FDBADDB79803CC3AC11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:04:41:3f:71:ab:be:20:3e:16:a6:dd:bc:43:
                    aa:df:d0:fb:86:93:42:e5:84:6c:9b:ad:bb:e2:f3:
                    fd:86:24:b9:b1:55:5e:83:24:51:44:a7:af:58:e5:
                    25:10:22:c3:2b:2c:7c:04:72:78:69:7b:b1:17:08:
                    11:3b:b0:27:60:ad:36:9c:73:17:4a:71:77:8e:48:
                    f6:7a:3a:46:17:01:92:a1:d1:a0:5b:e1:4b:a5:40:
                    2b:5c:a5:fd:7b:27:84:65:8b:a1:7b:02:56:5d:59:
                    ec:f5:fa:c0:0e:83:75:e6:a8:f2:24:d5:74:aa:77:
                    42:4b:ac:f7:6f:0c:17:cc:17:a8:99:f2:21:b4:78:
                    be:9b:1a:f5:35:f7:fc:c2:00:a6:9b:ed:aa:20:9b:
                    73:88:0e:82:36:d8:76:7d:e6:c8:d6:4c:d5:21:29:
                    d9:01:92:fd:68:4a:c9:9b:89:88:7e:cf:24:57:15:
                    d8:26:39:99:64:4e:75:19:4f:61:78:10:95:0e:ac:
                    50:ea:c1:d9:0c:c3:bb:0c:8c:fa:7f:9d:07:05:9d:
                    1f:ca:9a:92:3f:81:a7:a4:40:e0:ef:0b:41:85:d1:
                    a7:4b:34:2f:34:46:60:20:89:3e:5d:ed:64:ea:cc:
                    07:73:15:01:5d:f5:85:03:4a:10:9a:cd:70:aa:29:
                    74:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:42:00:71:BB:86:DF:F9:F0:90:9F:DB:AD:DB:79:80:3C:C3:AC:11
            X509v3 Authority Key Identifier:
                keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e36332e302f32342d3234203d3e203536363535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.230.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:70:33:cf:c1:d3:d2:aa:3a:83:bd:1d:8d:7e:16:ab:89:51:
         bd:ca:6e:ed:5a:b8:3a:2a:a3:e1:44:46:f9:ea:b3:b4:6c:24:
         27:6a:db:79:72:e0:fb:7c:31:f6:9a:13:9a:a3:78:0f:91:0c:
         5d:ce:bf:ef:24:0e:2a:c2:91:28:e4:4b:30:fe:b3:d7:26:08:
         ba:8f:41:77:e6:b5:78:6d:07:df:31:30:e7:98:5e:b9:cc:e1:
         42:8c:fb:67:c8:39:39:e5:4a:bc:64:15:ad:a4:70:35:61:38:
         11:54:a3:5d:4a:93:bd:90:22:44:92:88:d6:63:48:d2:b6:93:
         92:0e:0c:c9:72:a0:3a:ac:f5:a6:fb:b5:d1:02:21:b1:0b:56:
         2b:38:01:f9:eb:66:22:84:71:1c:a7:10:10:1f:49:61:4c:95:
         72:8f:5e:29:54:24:91:6e:23:45:35:56:fc:55:c3:70:17:4c:
         ca:95:09:58:1a:14:04:69:e5:e5:36:05:88:b6:e2:45:1e:a8:
         69:f3:63:b2:b2:1e:3a:ca:af:3c:2f:20:23:92:74:a3:ee:db:
         50:e3:40:05:05:c1:7d:51:7f:1a:b6:81:fa:4d:87:99:89:1a:
         06:3b:e1:53:bd:62:2b:20:90:21:c9:f7:be:3a:eb:63:12:ff:
         c2:7e:e0:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----