Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3134382e302f32332d3234203d3e2035363530.roa
File:                     3136392e34302e3134382e302f32332d3234203d3e2035363530.roa (raw, json)
Hash identifier:          LBzPDmkxp7Q/NKiBrPYI6n2vtxub65S3a5GNv2ydAhg=
Subject key identifier:   1C:A3:53:17:F5:F5:50:13:76:E4:F4:BA:D0:D5:E4:F1:E5:E8:23:D6
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       1B3CB71014C208048A761EC286990FDBE99A0C18
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3134382e302f32332d3234203d3e2035363530.roa
Signing time:             Thu 12 Feb 2026 01:05:06 +0000
ROA not before:           Thu 12 Feb 2026 01:00:06 +0000
ROA not after:            Thu 11 Feb 2027 01:05:06 +0000
asID:                     5650
IP address blocks:        169.40.148.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 06:04:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:3c:b7:10:14:c2:08:04:8a:76:1e:c2:86:99:0f:db:e9:9a:0c:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: Feb 12 01:00:06 2026 GMT
            Not After : Feb 11 01:05:06 2027 GMT
        Subject: CN=1CA35317F5F5501376E4F4BAD0D5E4F1E5E823D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:5b:7d:3e:e4:0e:14:3b:ff:6b:f9:39:7f:1c:
                    3f:b7:5f:f7:8e:5c:78:dd:ee:49:ee:38:91:6a:a0:
                    ef:d5:93:38:31:ea:dd:fb:7b:df:6f:b8:dc:3c:39:
                    d0:b7:03:85:82:de:6a:64:d3:62:99:9d:f9:77:dd:
                    91:9b:4b:e6:5d:d9:e2:2d:e9:f8:38:d9:f4:40:f1:
                    f3:2c:dd:55:8f:91:b0:e2:a9:82:ad:14:db:be:9c:
                    ea:68:f1:09:7c:12:07:35:2c:39:92:c4:b3:b0:f4:
                    c2:39:69:a6:51:46:1b:3c:3a:cd:b8:fa:9a:4f:dc:
                    03:ae:ca:73:25:a5:98:b7:a6:30:7b:05:0f:4c:d8:
                    87:e6:39:f3:cb:5d:94:be:d5:64:71:64:80:34:7e:
                    fa:5d:f3:9e:23:29:73:b4:54:c5:9e:3f:1d:20:c3:
                    3e:7e:37:a4:1f:38:2c:ee:e3:7a:01:7f:17:4f:ce:
                    7a:af:cb:f8:25:f7:a6:79:b0:03:02:ed:45:ee:f6:
                    82:dc:a2:39:28:ee:86:67:70:cb:b4:49:97:27:1b:
                    48:72:73:43:e4:27:35:c4:48:fc:d6:30:e5:31:db:
                    28:5f:da:7e:25:80:31:37:fa:b8:d1:e2:25:52:46:
                    68:ec:00:0b:0e:e9:3e:84:d0:3f:90:95:bf:56:e9:
                    32:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:A3:53:17:F5:F5:50:13:76:E4:F4:BA:D0:D5:E4:F1:E5:E8:23:D6
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3134382e302f32332d3234203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.40.148.0/23

    Signature Algorithm: sha256WithRSAEncryption
         70:9f:ab:2f:e7:f7:22:b1:bf:35:84:ff:7b:70:cb:e8:8a:29:
         4d:14:27:bf:c3:7e:02:7a:4e:59:4c:0e:a8:bc:b3:f5:ca:ae:
         3e:f4:3c:37:5d:4e:89:a7:70:2b:76:36:0b:9b:61:84:3d:52:
         98:59:ef:03:64:45:83:5e:c0:7a:86:9f:6a:2f:46:e8:80:df:
         9f:d8:4d:57:74:bf:81:e7:7f:0a:4b:4d:14:7b:ba:39:98:09:
         e4:36:e3:ff:eb:b5:9e:7b:e2:80:81:49:55:ee:65:3f:ac:bb:
         9e:88:f6:5e:24:44:89:ff:e7:29:29:a8:f1:18:f2:ce:50:b1:
         70:f9:d0:4d:28:1a:69:cc:51:77:03:4b:43:86:b2:cb:59:7e:
         28:28:52:24:2d:50:d2:a5:49:27:6a:95:46:d9:e5:ee:e7:02:
         87:4d:77:6d:e0:a4:6b:59:a0:9d:e0:fd:34:2f:46:29:51:42:
         fd:c7:f2:80:67:7c:af:80:87:d0:04:57:0c:9c:09:96:7f:4f:
         80:dc:a1:f6:11:47:0f:ba:a9:a1:d1:78:0c:78:27:f6:a6:40:
         79:ce:de:38:7a:7d:b5:41:c3:e6:bf:e8:cf:97:17:33:72:a7:
         1f:82:28:90:6f:6a:2a:27:a2:76:01:bd:31:cc:92:ed:0e:da:
         59:3c:4b:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:39:33 2026 by rpki-client