Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3133342e302f32342d3234203d3e203432383331.roa
File:                     3136392e34302e3133342e302f32342d3234203d3e203432383331.roa (raw, json)
Hash identifier:          VeUdg64WwGqdcliXY3eAyo4Tj9BRnrKTwvBVks/svCU=
Subject key identifier:   5E:02:D2:40:E0:3A:AA:AC:A0:0F:0E:80:F1:5E:E9:F9:2E:0E:97:BC
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       0986A2505948D1FB568EA65AFE9E74F9EFFD0F81
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3133342e302f32342d3234203d3e203432383331.roa
Signing time:             Thu 12 Feb 2026 01:05:07 +0000
ROA not before:           Thu 12 Feb 2026 01:00:07 +0000
ROA not after:            Thu 11 Feb 2027 01:05:07 +0000
asID:                     42831
IP address blocks:        169.40.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 06:04:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:86:a2:50:59:48:d1:fb:56:8e:a6:5a:fe:9e:74:f9:ef:fd:0f:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: Feb 12 01:00:07 2026 GMT
            Not After : Feb 11 01:05:07 2027 GMT
        Subject: CN=5E02D240E03AAAACA00F0E80F15EE9F92E0E97BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:7a:57:cd:a0:41:99:6c:00:34:ec:4d:cf:ff:
                    d8:a2:3f:dc:cf:ef:e3:47:11:e5:b8:82:e0:b1:04:
                    fa:f1:13:fc:b7:01:a2:df:f8:4c:c6:d7:52:55:fa:
                    c9:d4:8f:31:7e:92:75:5a:8c:31:e6:4c:ce:51:f5:
                    65:80:6b:da:2b:9c:58:dc:35:3f:b2:60:fa:61:e7:
                    e7:f2:9c:60:f5:8a:c7:56:f3:ee:43:6c:6d:7b:c9:
                    09:4a:4f:59:5b:8e:31:65:b5:ee:bf:06:2a:42:d7:
                    51:66:f3:cd:9a:4a:8e:24:06:ab:fc:d5:86:0c:15:
                    93:fb:e7:92:45:76:39:12:f5:25:a8:06:88:18:a7:
                    b0:0f:ec:00:b2:df:19:d7:1a:6b:40:52:9f:da:7e:
                    b0:14:0e:e4:51:12:ba:c9:a3:42:16:d9:f4:ed:b6:
                    93:9b:fb:22:9d:aa:bb:e9:91:83:b3:69:09:9b:d8:
                    f9:c6:b7:24:bc:a8:43:d4:f7:43:78:eb:46:18:ea:
                    8f:73:21:2c:01:1f:c0:90:c5:20:a6:f0:d7:b5:b4:
                    4a:98:6c:bb:30:e1:ff:91:a1:32:79:5b:72:b0:53:
                    ad:8f:d5:dd:6c:df:ab:0f:5c:fa:e0:c1:c8:87:ca:
                    5e:4f:22:5f:c7:51:76:d8:a0:ff:47:fb:49:4c:89:
                    f1:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:02:D2:40:E0:3A:AA:AC:A0:0F:0E:80:F1:5E:E9:F9:2E:0E:97:BC
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3133342e302f32342d3234203d3e203432383331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.40.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b7:c1:1f:f0:4b:67:89:72:08:45:d1:e8:5f:2a:a5:33:49:d3:
         ef:e6:d4:4d:52:ee:11:eb:48:a9:72:39:b8:5b:0c:46:df:10:
         6b:cf:33:31:22:10:5f:a8:64:4e:24:ab:28:9c:58:69:b7:0c:
         5d:9f:5d:e9:6e:5f:6a:de:55:e0:b1:94:e4:22:6f:0b:35:71:
         da:7d:80:c0:67:d6:9a:bd:48:6e:3c:7e:75:0d:6c:5b:3e:bd:
         9b:23:3e:5b:ca:5a:8d:c7:f5:76:55:9d:a6:1b:e0:30:2b:d3:
         d4:9d:87:80:53:dc:9d:af:e2:85:3b:ca:44:f5:ed:39:77:4b:
         f0:a7:0c:d3:31:4c:bb:d9:cc:99:0d:08:28:6b:b5:37:19:07:
         c7:20:59:85:bb:fb:87:d0:bd:2a:ee:a1:b7:e7:d5:cf:fa:bf:
         f6:06:a9:62:63:e3:13:e7:c9:db:2b:e2:0b:90:74:fa:b6:9d:
         8b:c5:b7:23:93:e0:01:c6:1f:2c:d9:5c:ec:3b:ca:12:0f:24:
         57:49:22:11:2e:67:f0:d3:fc:70:84:50:27:e7:b7:dc:e1:21:
         75:c5:57:9b:7f:11:da:94:98:ff:26:ea:7c:f6:44:11:04:16:
         f1:fb:ec:9e:17:8a:12:a0:02:5d:fd:49:18:86:90:ec:b8:00:
         6c:ba:27:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:00:28 2026 by rpki-client