Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3132312e302f32342d3234203d3e20383334.roa
File:                     3136392e34302e3132312e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          lQk8l3HrKsJbqmHXKSC/k2wMqbgkqqJ1JwYwfV35mss=
Subject key identifier:   86:1C:0F:D7:D8:F1:29:00:D3:FB:24:57:01:7F:37:22:B6:59:D2:C7
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       4F946903FFE65D7FD5CA1A66767FE53AF6C2ED86
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3132312e302f32342d3234203d3e20383334.roa
Signing time:             Mon 16 Feb 2026 11:36:04 +0000
ROA not before:           Mon 16 Feb 2026 11:31:04 +0000
ROA not after:            Mon 15 Feb 2027 11:36:04 +0000
asID:                     834
IP address blocks:        169.40.121.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 06:04:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:94:69:03:ff:e6:5d:7f:d5:ca:1a:66:76:7f:e5:3a:f6:c2:ed:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: Feb 16 11:31:04 2026 GMT
            Not After : Feb 15 11:36:04 2027 GMT
        Subject: CN=861C0FD7D8F12900D3FB2457017F3722B659D2C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:6c:f9:d1:71:9d:fa:b8:7a:e0:57:13:39:3f:
                    23:1a:91:fd:b6:ad:d5:09:5d:ce:d2:48:1c:1f:15:
                    40:a1:25:80:96:b5:a4:cf:d9:31:e1:78:02:a9:c1:
                    80:de:d4:4d:43:13:d7:b5:cb:bc:cd:c7:a9:43:e1:
                    56:11:f5:3f:5a:99:ce:5f:a9:43:78:6d:bb:97:59:
                    c3:13:62:fc:34:38:97:a8:ab:05:50:da:34:85:29:
                    42:ee:8c:7c:f4:47:0a:8e:91:42:fc:1b:df:8b:8c:
                    f1:d5:23:c7:c0:c5:86:d9:48:86:30:28:89:c5:8c:
                    da:3f:44:e7:40:68:58:b6:27:15:49:22:96:30:fb:
                    9c:c3:cc:fa:ce:51:a8:cf:32:15:54:c0:49:3c:b7:
                    d0:ab:3c:5b:d5:f4:b6:39:db:10:a3:42:4e:5b:8a:
                    2b:fa:46:38:34:5a:c7:a3:ba:f9:f0:94:70:b2:fc:
                    38:ad:5e:7c:54:45:cd:dc:94:39:01:4d:bc:cc:40:
                    a0:fb:3d:db:47:84:7f:a1:14:3d:67:41:c1:09:df:
                    b4:64:a0:57:f8:bb:43:9f:ed:c7:e1:fe:17:cc:32:
                    bc:80:b6:bf:d1:35:00:2e:d8:1e:b9:93:26:91:4d:
                    b5:45:68:df:fd:3b:29:47:c0:8f:55:fe:c4:3c:22:
                    c3:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:1C:0F:D7:D8:F1:29:00:D3:FB:24:57:01:7F:37:22:B6:59:D2:C7
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3132312e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.40.121.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:13:0a:dd:2c:bc:94:15:fd:3f:7f:6e:b0:6d:a8:49:7f:34:
         fa:8e:91:d2:78:ec:10:bb:3e:66:1d:d6:0e:35:82:31:f3:d4:
         91:9e:56:af:4e:2f:9b:f0:b6:ac:f3:98:ae:45:70:19:96:b7:
         65:0b:01:5c:67:db:f1:b8:a4:3a:ae:fe:93:1e:2f:02:70:8e:
         2a:84:88:38:b2:b0:5e:51:ca:57:1a:c3:83:55:99:c4:25:2d:
         83:3e:11:89:22:da:dd:91:91:32:a9:09:07:d8:32:a1:49:89:
         96:35:8f:67:70:8c:67:0f:44:56:2e:14:7e:62:98:ef:18:47:
         3f:58:4a:33:60:5f:c9:59:83:2f:cc:86:41:15:03:f7:86:c0:
         cd:70:50:5c:1e:72:a1:ce:fa:d8:c2:2f:81:ce:7f:88:ad:3c:
         21:f3:a0:a8:74:8e:e2:6b:c6:99:8e:36:03:f7:81:62:52:ae:
         4a:63:bb:1b:9d:5e:c6:82:a3:be:c2:6f:33:96:68:56:ad:59:
         9d:ba:85:13:2f:2a:e0:19:94:d9:f9:88:d8:01:fe:8b:24:50:
         93:be:29:fe:df:26:15:52:3f:8c:aa:f3:1b:1b:63:0f:2c:5f:
         99:b6:b0:83:69:6b:30:99:bf:d4:88:a9:4f:2f:19:20:76:5c:
         9c:b1:f1:eb
-----BEGIN CERTIFICATE-----
MIIFVDCCBDygAwIBAgIUT5RpA//mXX/Vyhpmdn/lOvbC7YYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUVGNzY2RjEwM0IyRUY5OURGOEM3MTk3OEE3RkU1MTlE
NzMwQjE1NTAeFw0yNjAyMTYxMTMxMDRaFw0yNzAyMTUxMTM2MDRaMDMxMTAvBgNV
BAMTKDg2MUMwRkQ3RDhGMTI5MDBEM0ZCMjQ1NzAxN0YzNzIyQjY1OUQyQzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzbPnRcZ36uHrgVxM5PyMakf22
rdUJXc7SSBwfFUChJYCWtaTP2THheAKpwYDe1E1DE9e1y7zNx6lD4VYR9T9amc5f
qUN4bbuXWcMTYvw0OJeoqwVQ2jSFKULujHz0RwqOkUL8G9+LjPHVI8fAxYbZSIYw
KInFjNo/ROdAaFi2JxVJIpYw+5zDzPrOUajPMhVUwEk8t9CrPFvV9LY52xCjQk5b
iiv6Rjg0WsejuvnwlHCy/DitXnxURc3clDkBTbzMQKD7PdtHhH+hFD1nQcEJ37Rk
oFf4u0Of7cfh/hfMMryAtr/RNQAu2B65kyaRTbVFaN/9OylHwI9V/sQ8IsOdAgMB
AAGjggJeMIICWjAdBgNVHQ4EFgQUhhwP19jxKQDT+yRXAX83IrZZ0scwHwYDVR0j
BBgwFoAUrvdm8QOy75nfjHGXin/lGdcwsVUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
MzAzMjdiOWUtMjI3YS00ZWJkLTgyNWItM2I5ODA5NWRjOTI3LTAvMC9BRUY3NjZG
MTAzQjJFRjk5REY4QzcxOTc4QTdGRTUxOUQ3MzBCMTU1LmNybDCBngYIKwYBBQUH
AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1
OTBiOTlhZi80L0FFRjc2NkYxMDNCMkVGOTlERjhDNzE5NzhBN0ZFNTE5RDczMEIx
NTUuY2VyMIGgBggrBgEFBQcBCwSBkzCBkDCBjQYIKwYBBQUHMAuGgYByc3luYzov
L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby8zMDMyN2I5ZS0yMjdhLTRlYmQtODI1
Yi0zYjk4MDk1ZGM5MjctMC8wLzMxMzYzOTJlMzQzMDJlMzEzMjMxMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzgzMzM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqSh5MA0GCSqGSIb3DQEB
CwUAA4IBAQAKEwrdLLyUFf0/f26wbahJfzT6jpHSeOwQuz5mHdYONYIx89SRnlav
Ti+b8Las85iuRXAZlrdlCwFcZ9vxuKQ6rv6THi8CcI4qhIg4srBeUcpXGsODVZnE
JS2DPhGJItrdkZEyqQkH2DKhSYmWNY9ncIxnD0RWLhR+YpjvGEc/WEozYF/JWYMv
zIZBFQP3hsDNcFBcHnKhzvrYwi+Bzn+IrTwh86CodI7ia8aZjjYD94FiUq5KY7sb
nV7GgqO+wm8zlmhWrVmduoUTLyrgGZTZ+YjYAf6LJFCTvin+3yYVUj+MqvMbG2MP
LF+ZtrCDaWswmb/UiKlPLxkgdlycsfHr
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:02:41 2026 by rpki-client