Route Origin Authorization

$ rpki-client -vvvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e36332e302f32342d3234203d3e20383334.roa
File:                     33372e3233302e36332e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          xEoLfZIrdi4uIuZ6ye+FoHNb+fIAHRfQTkcKuanas6o=
Subject key identifier:   8A:2A:24:3F:98:B5:7C:D1:88:B4:C6:86:40:C4:67:E0:03:2C:91:AB
Certificate issuer:       /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial:       4F2904C2CA863D5C749FC1E1EA1B6CC90895EDE7
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e36332e302f32342d3234203d3e20383334.roa
Signing time:             Fri 18 Sep 2026 12:09:14 +0000
ROA not before:           Fri 18 Sep 2026 12:04:14 +0000
ROA not after:            Fri 17 Sep 2027 12:09:14 +0000
asID:                     834
IP address blocks:        37.230.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
                          rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 10:15:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:29:04:c2:ca:86:3d:5c:74:9f:c1:e1:ea:1b:6c:c9:08:95:ed:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
        Validity
            Not Before: Sep 18 12:04:14 2026 GMT
            Not After : Sep 17 12:09:14 2027 GMT
        Subject: CN=8A2A243F98B57CD188B4C68640C467E0032C91AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:e4:b8:4d:01:5c:58:bc:e2:44:4a:9c:e3:92:
                    0e:8b:c9:e1:73:dd:3f:37:c5:7c:8c:76:7f:ad:e2:
                    3c:d6:0c:79:31:b9:bc:66:6a:ed:96:9c:f5:2d:05:
                    c0:3d:3c:04:4a:f2:12:93:f5:e7:c7:19:05:ac:6b:
                    37:ca:11:09:27:2b:a9:46:9e:43:ed:c3:f4:4e:96:
                    6b:33:43:c8:d3:e5:d2:ae:df:cb:0d:82:d2:54:f8:
                    e0:21:63:85:9e:32:f5:df:34:80:39:2a:b4:13:66:
                    39:f3:76:3f:69:1b:87:e5:b6:2a:2c:87:bf:3c:86:
                    d9:5b:26:9c:5d:91:7f:cf:a3:d2:ad:45:7b:62:e5:
                    26:7a:05:23:4f:22:2f:aa:87:04:06:19:c0:8c:6a:
                    20:03:05:8c:b6:52:48:a9:0d:e5:b8:ad:e1:56:2a:
                    05:9b:c5:20:f5:00:bf:69:c8:4c:a7:12:5d:6e:99:
                    e6:01:26:64:fe:83:9e:1a:81:5e:45:89:2c:cb:6d:
                    9b:3c:ab:62:f9:36:3a:a3:01:67:34:25:1a:ca:33:
                    8f:8f:2f:3d:38:3e:c3:33:c6:0f:5a:47:18:47:a9:
                    ce:2c:82:1e:a2:fd:a0:2e:ea:b2:a3:99:d3:44:aa:
                    63:a4:e0:67:a5:1e:68:b9:e4:2c:30:a9:92:62:5f:
                    48:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:2A:24:3F:98:B5:7C:D1:88:B4:C6:86:40:C4:67:E0:03:2C:91:AB
            X509v3 Authority Key Identifier:
                keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e36332e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.230.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:b8:00:ef:70:ae:27:43:d9:e3:a4:99:36:47:6c:c0:29:3c:
         dd:c8:ab:72:1f:c5:14:af:b2:65:31:fc:2d:a3:96:84:e0:60:
         bc:b7:a8:ae:de:25:46:97:43:36:80:89:19:93:dd:9c:3b:09:
         4a:9a:16:10:3c:86:0e:ce:a1:59:3f:f2:6c:92:60:04:81:e8:
         00:bf:bd:ad:d1:ed:40:32:cf:6f:e5:91:ff:8f:3b:fb:0c:11:
         f3:7e:e5:e2:25:d8:85:34:af:d1:63:5b:26:71:1d:87:74:5a:
         f6:8b:b7:d3:43:ba:df:3d:e1:a3:44:6c:56:c3:51:0d:57:41:
         43:c1:5b:81:4e:db:83:28:77:c1:a2:63:8d:15:4f:5e:1e:bb:
         05:b9:36:af:a5:93:ec:dd:2e:db:0d:09:b8:14:fe:c9:3f:08:
         8e:ce:86:59:64:b2:61:d6:fd:62:7f:e4:a9:51:6d:46:08:7a:
         4a:49:a5:21:11:ec:78:b4:7d:4f:9b:85:c4:6f:dc:cc:ab:1f:
         ec:b1:ba:2b:74:af:f3:0d:18:07:cf:f5:ab:48:2d:e8:d8:82:
         5d:48:d6:57:a1:10:27:7e:41:31:4c:65:6d:bf:91:91:fb:7a:
         7b:10:f7:d2:da:de:0c:46:0d:54:5a:c2:f3:d5:5b:c6:1b:a0:
         4f:2b:6a:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----