Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3134362e302f32332d3234203d3e2035363530.roa
File:                     3136392e34302e3134362e302f32332d3234203d3e2035363530.roa (raw, json)
Hash identifier:          Sc+uO+SwGE2YnwFzbLM8RL2ldxQoXONULOkzdLjGF+8=
Subject key identifier:   2C:8A:FC:CF:4C:7B:AE:B2:B4:8A:5A:4C:D1:D5:E7:85:1D:8F:EA:B9
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       1FD4490B4663F18B30727A673CA786AE38FB8381
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3134362e302f32332d3234203d3e2035363530.roa
Signing time:             Thu 12 Feb 2026 01:05:07 +0000
ROA not before:           Thu 12 Feb 2026 01:00:07 +0000
ROA not after:            Thu 11 Feb 2027 01:05:07 +0000
asID:                     5650
IP address blocks:        169.40.146.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 06:04:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:d4:49:0b:46:63:f1:8b:30:72:7a:67:3c:a7:86:ae:38:fb:83:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: Feb 12 01:00:07 2026 GMT
            Not After : Feb 11 01:05:07 2027 GMT
        Subject: CN=2C8AFCCF4C7BAEB2B48A5A4CD1D5E7851D8FEAB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:5d:8a:af:27:50:df:4d:c7:6b:33:12:50:95:
                    7c:b7:01:5f:bd:cc:ae:38:22:19:8f:01:98:d5:37:
                    cd:b4:bb:c0:5c:81:e8:66:20:50:7e:de:1b:de:59:
                    22:74:68:3f:07:f6:ae:5f:52:80:59:06:44:fd:e5:
                    fd:5c:80:5f:c0:fe:72:13:02:86:82:1a:ac:3c:20:
                    98:09:a3:77:0f:05:9a:33:99:8b:2f:47:47:a2:2e:
                    93:a3:57:e5:e7:1e:39:11:5f:ae:ce:d9:9b:91:84:
                    62:4e:f3:22:d3:6d:cf:04:6a:0d:64:ee:11:3e:7d:
                    e1:c0:37:4e:6c:87:3c:de:af:76:90:c9:15:a8:5b:
                    82:11:f4:c0:f2:9f:55:4f:b1:56:4f:fe:17:71:d6:
                    cd:37:a5:97:f0:cb:11:d8:0b:8e:9d:95:17:a8:40:
                    58:49:3c:03:66:84:75:4c:e7:e3:58:7a:4f:a6:1d:
                    1b:81:e1:54:b6:94:a5:c3:7e:6a:b8:84:c0:05:25:
                    e3:65:63:38:c2:31:4b:3f:3f:be:32:e8:b1:0e:a4:
                    30:1b:20:0f:fc:d9:d0:8a:85:8e:76:9e:5e:d0:83:
                    43:42:da:55:a2:57:34:23:ce:b9:37:e9:dc:72:af:
                    43:6a:ea:bb:7e:fe:d5:d6:ce:47:74:65:bd:dd:47:
                    f8:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:8A:FC:CF:4C:7B:AE:B2:B4:8A:5A:4C:D1:D5:E7:85:1D:8F:EA:B9
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3134362e302f32332d3234203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.40.146.0/23

    Signature Algorithm: sha256WithRSAEncryption
         74:d7:54:4c:0c:f9:f5:ae:3f:c8:66:26:83:85:f4:33:5c:0e:
         c0:7c:22:f8:47:a7:c8:5c:80:8f:1e:18:77:cc:29:a0:96:89:
         d8:8f:9b:cf:b5:e5:68:48:63:fd:d4:01:33:48:bb:8b:c7:f4:
         da:aa:97:27:f7:66:09:34:89:0e:f8:b1:35:48:7b:05:be:04:
         5e:96:bf:9d:4f:a8:f4:2d:57:d7:5d:fb:93:27:15:c8:90:65:
         6b:4e:bc:ea:e5:d4:aa:89:de:87:66:6b:2e:5c:63:fa:bd:cb:
         5e:a2:da:a4:10:6a:67:78:a8:4e:9c:11:c7:50:e1:8a:d0:87:
         2a:e0:7d:f5:ed:65:85:6d:fa:59:44:aa:85:77:a5:94:11:e1:
         61:4b:d5:b4:15:8f:2b:4d:a1:0f:b6:a6:17:59:7e:40:1e:3b:
         d8:94:00:d0:4a:49:02:ef:93:fe:b1:27:01:eb:df:37:b5:c4:
         21:fb:15:56:e6:cd:76:57:f0:a0:cd:00:f1:cc:17:e1:e3:e2:
         fb:de:62:7a:fd:e1:0e:7e:6a:8c:2d:81:03:f5:1b:01:cb:f3:
         8e:3c:61:1d:af:4a:27:47:c4:9f:90:44:ac:8f:1a:a2:2b:a9:
         e8:7c:f6:52:60:d2:f2:90:88:91:0e:90:e7:3e:cc:f0:42:9f:
         71:4f:c0:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:36:18 2026 by rpki-client