Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3133332e302f32342d3234203d3e20313337383937.roa
File:                     3136392e34302e3133332e302f32342d3234203d3e20313337383937.roa (raw, json)
Hash identifier:          iivemxrcjD6hXwVPD8lh8APROsknkUSCZob40KURbZc=
Subject key identifier:   9E:6C:61:66:0E:C2:C7:5F:D5:5E:99:40:B8:12:0C:22:F5:6C:81:83
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       5C3389BD29AC535284D8A5D4E643BACC8E45C766
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3133332e302f32342d3234203d3e20313337383937.roa
Signing time:             Thu 12 Feb 2026 01:05:05 +0000
ROA not before:           Thu 12 Feb 2026 01:00:05 +0000
ROA not after:            Thu 11 Feb 2027 01:05:05 +0000
asID:                     137897
IP address blocks:        169.40.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 01:41:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:33:89:bd:29:ac:53:52:84:d8:a5:d4:e6:43:ba:cc:8e:45:c7:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: Feb 12 01:00:05 2026 GMT
            Not After : Feb 11 01:05:05 2027 GMT
        Subject: CN=9E6C61660EC2C75FD55E9940B8120C22F56C8183
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:5c:b2:58:a9:b7:9e:cc:f2:1b:69:74:4e:f3:
                    2a:0e:f9:93:69:f9:6b:19:08:f6:5b:a3:5f:67:c4:
                    ed:f3:f4:de:54:1a:4f:78:c9:02:9d:0f:a6:26:68:
                    98:ce:e8:67:16:45:87:b4:07:e2:44:4f:4c:ef:05:
                    a5:ab:c0:37:8e:10:db:25:21:99:5f:47:1f:28:24:
                    0d:74:a0:26:f1:02:ea:50:ac:de:85:2a:13:3d:f4:
                    cc:83:03:17:72:99:a6:a1:35:6c:0c:72:a8:66:2b:
                    2e:ac:db:c0:f2:95:a5:83:c2:9e:d2:e6:67:8e:6d:
                    fd:5f:fc:91:f8:a9:a1:fd:23:f5:8b:89:c9:10:4d:
                    80:59:a3:ed:36:ab:d7:bf:0e:9a:26:44:6b:b8:b4:
                    ca:36:54:c5:f2:95:1f:b3:be:b7:9d:58:11:d7:4f:
                    d2:9a:bc:8d:94:fc:86:d6:15:d9:05:cb:26:4c:03:
                    b9:09:ad:22:3d:9d:b4:9f:8e:c9:96:02:da:0c:28:
                    d9:b4:48:98:bd:0a:30:92:24:28:4a:b8:99:0d:dc:
                    92:71:ef:b5:06:ee:f1:86:2c:35:48:6f:aa:6c:ae:
                    2b:b4:6e:9a:97:41:b2:da:17:b4:dd:aa:27:d0:ce:
                    62:69:fc:09:46:17:ab:d1:c6:f3:59:ca:2e:59:a8:
                    ef:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:6C:61:66:0E:C2:C7:5F:D5:5E:99:40:B8:12:0C:22:F5:6C:81:83
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3133332e302f32342d3234203d3e20313337383937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.40.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:6d:1a:7f:1c:98:05:d1:e5:98:d8:2a:b9:d0:b9:fa:7f:10:
         db:37:c6:7c:bf:16:49:a7:42:01:16:b6:d8:d7:ed:38:8a:00:
         57:f2:56:d8:0a:77:21:b3:39:c0:d2:03:59:98:8c:5d:9f:4f:
         0c:97:59:79:cb:78:85:0a:6e:87:d2:c9:1b:42:e0:41:bb:7a:
         8f:1c:20:31:84:c6:c8:67:38:be:5c:54:16:33:df:6c:bf:28:
         38:cc:25:14:dc:13:22:27:93:43:0a:69:44:24:31:88:c1:75:
         62:b7:a5:a3:53:de:53:d2:b0:0b:aa:5d:9c:6a:54:cf:c0:04:
         02:84:c5:7c:4d:6c:20:e5:83:55:fe:81:5e:ad:69:e7:fb:16:
         fa:45:f3:ea:ab:ea:73:3b:18:d2:e2:4d:c1:6e:85:ba:94:8a:
         de:dc:c5:48:2a:aa:35:49:29:77:bb:b2:b1:40:96:c6:46:3c:
         29:d8:24:72:44:75:ca:1b:53:e1:a1:33:14:0b:eb:69:6d:58:
         c5:ec:db:23:4f:6d:69:32:88:69:7b:d6:1f:f8:b8:c5:86:ac:
         b8:9c:ab:1e:eb:47:95:85:ce:d3:2b:5c:7a:d6:54:a8:f6:86:
         a2:58:0f:51:9b:a7:6b:74:31:3d:96:d9:9c:8f:ed:67:f0:e3:
         57:0c:99:1b
-----BEGIN CERTIFICATE-----
MIIFWjCCBEKgAwIBAgIUXDOJvSmsU1KE2KXU5kO6zI5Fx2YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUVGNzY2RjEwM0IyRUY5OURGOEM3MTk3OEE3RkU1MTlE
NzMwQjE1NTAeFw0yNjAyMTIwMTAwMDVaFw0yNzAyMTEwMTA1MDVaMDMxMTAvBgNV
BAMTKDlFNkM2MTY2MEVDMkM3NUZENTVFOTk0MEI4MTIwQzIyRjU2QzgxODMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnXLJYqbeezPIbaXRO8yoO+ZNp
+WsZCPZbo19nxO3z9N5UGk94yQKdD6YmaJjO6GcWRYe0B+JET0zvBaWrwDeOENsl
IZlfRx8oJA10oCbxAupQrN6FKhM99MyDAxdymaahNWwMcqhmKy6s28DylaWDwp7S
5meObf1f/JH4qaH9I/WLickQTYBZo+02q9e/DpomRGu4tMo2VMXylR+zvredWBHX
T9KavI2U/IbWFdkFyyZMA7kJrSI9nbSfjsmWAtoMKNm0SJi9CjCSJChKuJkN3JJx
77UG7vGGLDVIb6psriu0bpqXQbLaF7TdqifQzmJp/AlGF6vRxvNZyi5ZqO9XAgMB
AAGjggJkMIICYDAdBgNVHQ4EFgQUnmxhZg7Cx1/VXplAuBIMIvVsgYMwHwYDVR0j
BBgwFoAUrvdm8QOy75nfjHGXin/lGdcwsVUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
MzAzMjdiOWUtMjI3YS00ZWJkLTgyNWItM2I5ODA5NWRjOTI3LTAvMC9BRUY3NjZG
MTAzQjJFRjk5REY4QzcxOTc4QTdGRTUxOUQ3MzBCMTU1LmNybDCBngYIKwYBBQUH
AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1
OTBiOTlhZi80L0FFRjc2NkYxMDNCMkVGOTlERjhDNzE5NzhBN0ZFNTE5RDczMEIx
NTUuY2VyMIGmBggrBgEFBQcBCwSBmTCBljCBkwYIKwYBBQUHMAuGgYZyc3luYzov
L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby8zMDMyN2I5ZS0yMjdhLTRlYmQtODI1
Yi0zYjk4MDk1ZGM5MjctMC8wLzMxMzYzOTJlMzQzMDJlMzEzMzMzMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzMzM3MzgzOTM3LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqSiFMA0GCSqG
SIb3DQEBCwUAA4IBAQArbRp/HJgF0eWY2Cq50Ln6fxDbN8Z8vxZJp0IBFrbY1+04
igBX8lbYCnchsznA0gNZmIxdn08Ml1l5y3iFCm6H0skbQuBBu3qPHCAxhMbIZzi+
XFQWM99svyg4zCUU3BMiJ5NDCmlEJDGIwXVit6WjU95T0rALql2calTPwAQChMV8
TWwg5YNV/oFerWnn+xb6RfPqq+pzOxjS4k3BboW6lIre3MVIKqo1SSl3u7KxQJbG
Rjwp2CRyRHXKG1PhoTMUC+tpbVjF7NsjT21pMohpe9Yf+LjFhqy4nKse60eVhc7T
K1x61lSo9oaiWA9Rm6drdDE9ltmcj+1n8ONXDJkb
-----END CERTIFICATE-----
Generated at Mon Mar 2 12:48:52 2026 by rpki-client