Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3131342e302f32342d3234203d3e203432383331.roa
File:                     3136392e34302e3131342e302f32342d3234203d3e203432383331.roa (raw, json)
Hash identifier:          Yibad0u1M5Cp+ToDBw+47ydjZMLSm1xF963eG6hpbsQ=
Subject key identifier:   5D:CB:8C:B7:18:76:57:D1:C3:C3:68:3E:56:75:68:2A:61:C9:EA:36
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       367D0D24652283611D8C175D6C1B4A3E050F1746
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3131342e302f32342d3234203d3e203432383331.roa
Signing time:             Thu 12 Feb 2026 01:05:06 +0000
ROA not before:           Thu 12 Feb 2026 01:00:06 +0000
ROA not after:            Thu 11 Feb 2027 01:05:06 +0000
asID:                     42831
IP address blocks:        169.40.114.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 06:04:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:7d:0d:24:65:22:83:61:1d:8c:17:5d:6c:1b:4a:3e:05:0f:17:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: Feb 12 01:00:06 2026 GMT
            Not After : Feb 11 01:05:06 2027 GMT
        Subject: CN=5DCB8CB7187657D1C3C3683E5675682A61C9EA36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d9:cf:52:01:02:1b:b8:d9:95:96:07:93:a8:
                    b8:c8:7c:e5:25:10:7d:3c:5a:5e:4b:ba:ad:20:01:
                    43:b3:3b:26:c8:7f:21:8f:9a:38:1c:f3:be:2f:2d:
                    24:5f:2d:c9:60:f4:02:f7:55:50:fb:f4:07:6b:cf:
                    63:a6:f0:31:b0:8b:11:6e:d9:f9:43:41:b1:76:cb:
                    b9:e7:a9:33:0b:6b:4e:f9:6a:81:28:38:ba:45:52:
                    7f:b3:bb:9b:7f:ea:2c:95:48:19:c3:d6:f0:39:ab:
                    98:f4:6e:b8:4d:0f:12:30:e3:c7:8d:cd:7a:89:d9:
                    15:43:f2:b4:60:7f:06:dd:7b:19:1c:13:a9:62:6a:
                    6e:e9:b1:de:43:39:b1:dc:06:ba:6b:29:c3:c2:cc:
                    8d:b6:00:da:9b:43:30:60:7b:91:4e:30:7c:4f:ae:
                    9b:e6:50:3d:ea:73:57:f1:e2:85:a2:ad:66:9a:31:
                    94:0c:7e:b9:f1:93:94:6a:6b:24:0e:09:98:39:f8:
                    16:4f:95:6d:f4:80:4a:0f:19:93:03:ef:13:d2:32:
                    ba:a0:16:a3:cb:55:39:90:9c:2c:0c:da:07:33:55:
                    55:6d:c6:b6:87:ac:40:67:bc:26:3a:9e:41:97:a1:
                    b6:f6:41:32:4b:ea:78:2d:43:23:af:ea:7c:c0:80:
                    c0:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:CB:8C:B7:18:76:57:D1:C3:C3:68:3E:56:75:68:2A:61:C9:EA:36
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3131342e302f32342d3234203d3e203432383331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.40.114.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:1b:67:bd:ee:f5:72:11:af:ce:96:e2:0a:60:cd:04:2a:01:
         49:7e:df:cf:94:dd:6a:4e:75:28:80:00:1b:47:2d:6a:07:20:
         0f:81:ae:92:68:6e:ee:ff:c7:7d:19:f0:fd:11:74:70:81:7c:
         f1:81:3e:36:25:78:b9:2e:ed:7b:08:b4:ae:58:d1:c2:08:14:
         ec:64:b2:dd:22:05:51:f8:eb:35:b9:78:34:b9:de:b8:1d:74:
         ab:2b:a5:ed:87:f0:db:5f:b9:4f:c3:31:a5:65:86:32:ad:8d:
         6c:33:57:be:39:8a:13:39:a0:1d:d2:3d:0e:3d:ff:7b:14:95:
         16:36:44:98:ae:ca:ca:d0:25:c5:bb:87:ab:9d:bf:89:fd:80:
         8e:ed:69:1e:d0:1b:21:32:83:7b:b7:ff:a4:c1:5b:4d:90:bb:
         7f:1a:4d:60:7a:ba:11:55:d9:55:a1:6a:88:63:5b:e8:9d:53:
         14:44:66:41:8d:20:9f:5a:a6:05:03:c3:a2:a1:d2:b2:24:df:
         fe:00:16:d8:bc:c7:26:a5:3e:7f:8d:18:6d:a8:24:d2:d8:71:
         50:7b:48:12:b1:be:74:9f:d5:76:54:69:74:7f:a6:71:fd:9b:
         56:28:0b:a0:d9:55:29:a5:f7:f9:2f:dd:e0:02:b3:5f:66:a2:
         5e:c8:3a:a9
-----BEGIN CERTIFICATE-----
MIIFWDCCBECgAwIBAgIUNn0NJGUig2EdjBddbBtKPgUPF0YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUVGNzY2RjEwM0IyRUY5OURGOEM3MTk3OEE3RkU1MTlE
NzMwQjE1NTAeFw0yNjAyMTIwMTAwMDZaFw0yNzAyMTEwMTA1MDZaMDMxMTAvBgNV
BAMTKDVEQ0I4Q0I3MTg3NjU3RDFDM0MzNjgzRTU2NzU2ODJBNjFDOUVBMzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr2c9SAQIbuNmVlgeTqLjIfOUl
EH08Wl5Luq0gAUOzOybIfyGPmjgc874vLSRfLclg9AL3VVD79Adrz2Om8DGwixFu
2flDQbF2y7nnqTMLa075aoEoOLpFUn+zu5t/6iyVSBnD1vA5q5j0brhNDxIw48eN
zXqJ2RVD8rRgfwbdexkcE6liam7psd5DObHcBrprKcPCzI22ANqbQzBge5FOMHxP
rpvmUD3qc1fx4oWirWaaMZQMfrnxk5RqayQOCZg5+BZPlW30gEoPGZMD7xPSMrqg
FqPLVTmQnCwM2gczVVVtxraHrEBnvCY6nkGXobb2QTJL6ngtQyOv6nzAgMDBAgMB
AAGjggJiMIICXjAdBgNVHQ4EFgQUXcuMtxh2V9HDw2g+VnVoKmHJ6jYwHwYDVR0j
BBgwFoAUrvdm8QOy75nfjHGXin/lGdcwsVUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
MzAzMjdiOWUtMjI3YS00ZWJkLTgyNWItM2I5ODA5NWRjOTI3LTAvMC9BRUY3NjZG
MTAzQjJFRjk5REY4QzcxOTc4QTdGRTUxOUQ3MzBCMTU1LmNybDCBngYIKwYBBQUH
AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1
OTBiOTlhZi80L0FFRjc2NkYxMDNCMkVGOTlERjhDNzE5NzhBN0ZFNTE5RDczMEIx
NTUuY2VyMIGkBggrBgEFBQcBCwSBlzCBlDCBkQYIKwYBBQUHMAuGgYRyc3luYzov
L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby8zMDMyN2I5ZS0yMjdhLTRlYmQtODI1
Yi0zYjk4MDk1ZGM5MjctMC8wLzMxMzYzOTJlMzQzMDJlMzEzMTM0MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzQzMjM4MzMzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKkocjANBgkqhkiG
9w0BAQsFAAOCAQEASRtnve71chGvzpbiCmDNBCoBSX7fz5Tdak51KIAAG0ctagcg
D4Gukmhu7v/HfRnw/RF0cIF88YE+NiV4uS7tewi0rljRwggU7GSy3SIFUfjrNbl4
NLneuB10qyul7Yfw21+5T8MxpWWGMq2NbDNXvjmKEzmgHdI9Dj3/exSVFjZEmK7K
ytAlxbuHq52/if2Aju1pHtAbITKDe7f/pMFbTZC7fxpNYHq6EVXZVaFqiGNb6J1T
FERmQY0gn1qmBQPDoqHSsiTf/gAW2LzHJqU+f40Ybagk0thxUHtIErG+dJ/VdlRp
dH+mcf2bVigLoNlVKaX3+S/d4AKzX2aiXsg6qQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:02:24 2026 by rpki-client