Route Origin Authorization

$ rpki-client -vvvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/37372e37352e3139392e302f32342d3234203d3e20323039323432.roa
File:                     37372e37352e3139392e302f32342d3234203d3e20323039323432.roa (raw, json)
Hash identifier:          r2quskIVZ0x3sOLhkQwNpkLme/kJUbW8JC1Qg/twUms=
Subject key identifier:   B5:43:AD:45:50:9F:44:A1:B1:A1:18:5E:D9:13:C6:D6:E5:63:E3:46
Certificate issuer:       /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial:       490757C51DDECD6B59ED4D13CF212E544716419F
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/37372e37352e3139392e302f32342d3234203d3e20323039323432.roa
Signing time:             Fri 25 Sep 2026 14:49:35 +0000
ROA not before:           Fri 25 Sep 2026 14:44:35 +0000
ROA not after:            Fri 24 Sep 2027 14:49:35 +0000
asID:                     209242
IP address blocks:        77.75.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
                          rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 06 Nov 2026 06:21:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:07:57:c5:1d:de:cd:6b:59:ed:4d:13:cf:21:2e:54:47:16:41:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
        Validity
            Not Before: Sep 25 14:44:35 2026 GMT
            Not After : Sep 24 14:49:35 2027 GMT
        Subject: CN=B543AD45509F44A1B1A1185ED913C6D6E563E346
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:6c:35:a9:09:d9:2b:44:c2:c6:32:e9:7c:11:
                    5c:20:e8:89:20:cb:d2:30:38:9e:64:fb:f0:f3:70:
                    33:2b:a3:a5:63:14:fa:98:15:38:18:b0:80:62:32:
                    b8:db:7c:11:32:1b:99:df:e1:16:55:76:20:92:68:
                    d2:05:fa:a6:e4:24:bf:44:3e:69:5b:ea:26:78:0c:
                    70:24:7e:0d:1f:4a:7d:7c:b3:f6:ee:11:93:0f:00:
                    ab:ea:8a:d1:bd:db:b5:59:22:99:4d:c9:1f:fd:b2:
                    bc:14:60:79:97:a5:97:67:52:04:f1:76:0e:01:b9:
                    95:c4:3e:23:7f:0e:62:c3:1d:df:1d:57:eb:3b:a7:
                    1e:37:92:63:aa:bc:0b:af:86:ef:75:d7:03:27:7d:
                    1f:92:6b:0e:b7:4d:04:b5:3e:92:b7:39:65:bb:64:
                    2a:37:87:69:2a:9a:19:44:fb:78:d8:33:cb:b0:5c:
                    8e:04:e5:66:b3:76:bb:3e:29:bf:c0:08:3a:0c:2b:
                    f8:22:fd:71:aa:5d:01:00:63:df:61:36:b7:e3:26:
                    12:44:5f:4a:eb:1a:59:aa:ad:f1:3f:17:08:b3:b1:
                    88:59:6a:61:bd:33:51:6f:2d:d7:80:9c:0a:d1:91:
                    61:1e:ca:4e:67:e1:8e:09:bb:d0:1f:09:63:47:db:
                    a2:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:43:AD:45:50:9F:44:A1:B1:A1:18:5E:D9:13:C6:D6:E5:63:E3:46
            X509v3 Authority Key Identifier:
                keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/37372e37352e3139392e302f32342d3234203d3e20323039323432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.75.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:50:e8:28:19:ee:c9:42:c6:03:49:e6:a3:03:d1:b0:07:5f:
         3f:d4:b6:b1:1b:9e:db:c5:59:71:e5:d3:ce:c2:33:65:e8:61:
         eb:5e:a5:db:a1:cd:46:3e:ba:49:72:ac:25:32:9a:6e:57:89:
         80:1c:ed:25:d6:2b:62:80:f5:69:a3:d0:78:8a:5f:e3:17:a3:
         97:93:87:e2:a2:18:6f:35:c4:8c:36:5b:c4:ae:32:ee:96:a1:
         82:c7:e8:a6:45:bf:3e:f8:25:33:77:22:5d:e0:a8:64:4f:a1:
         2c:d0:57:99:75:20:33:78:62:bc:9e:74:77:84:9b:0e:ac:ba:
         e4:f0:0b:b1:b0:2a:ad:56:f4:f7:42:52:f0:16:40:08:05:36:
         d0:97:fa:25:e7:be:43:2b:0d:02:82:36:bf:9f:c8:37:46:9c:
         6f:18:d6:6d:b4:10:06:03:db:6b:f8:16:8d:fb:36:99:37:a7:
         c2:df:43:15:8e:d6:b9:ea:d9:e1:dd:13:7d:72:9b:d3:e5:ef:
         80:4a:7f:0c:8e:76:42:43:4d:8b:8b:ac:71:90:51:d8:41:66:
         0e:ce:29:ec:19:c4:a6:6e:36:90:0e:c0:fd:40:7e:d3:94:ec:
         7a:20:06:a6:d4:d2:23:62:11:bb:42:54:1a:ae:5d:4e:c0:b7:
         1f:80:db:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----