Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3135312e302f32342d3234203d3e2039333138.roa
File:                     3136392e34302e3135312e302f32342d3234203d3e2039333138.roa (raw, json)
Hash identifier:          xrtB3VdrBOc+SJyaJAq4ktc++5665hmYP5k4PWNqPK8=
Subject key identifier:   58:40:36:B9:19:56:03:E7:47:9F:23:05:26:A5:2E:DD:43:C7:60:D7
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       4C52ED1C981E7E45E94F329EE947A4B5AA14338D
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3135312e302f32342d3234203d3e2039333138.roa
Signing time:             Thu 12 Feb 2026 01:05:04 +0000
ROA not before:           Thu 12 Feb 2026 01:00:04 +0000
ROA not after:            Thu 11 Feb 2027 01:05:04 +0000
asID:                     9318
IP address blocks:        169.40.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 06:04:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:52:ed:1c:98:1e:7e:45:e9:4f:32:9e:e9:47:a4:b5:aa:14:33:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: Feb 12 01:00:04 2026 GMT
            Not After : Feb 11 01:05:04 2027 GMT
        Subject: CN=584036B9195603E7479F230526A52EDD43C760D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f9:9d:2e:ae:38:f1:1f:af:4a:ac:2a:94:1b:
                    bf:81:0e:aa:2e:92:66:dd:c2:14:10:14:e6:fb:df:
                    d5:b7:83:6d:3c:7f:4c:08:47:e9:7d:04:d3:0b:76:
                    51:2f:4b:d3:fb:07:21:70:b4:02:85:f2:76:6c:bb:
                    b7:51:b4:5c:a9:72:67:11:96:7a:b2:5c:97:4c:82:
                    e8:fc:cb:93:e0:89:a5:92:a2:75:4e:75:a2:51:6f:
                    eb:d0:09:96:cc:47:44:ab:f3:19:bd:e0:d9:e7:04:
                    b2:e2:38:fe:22:74:4e:61:46:37:27:29:87:ff:94:
                    84:fa:23:30:36:9d:97:52:2c:fc:74:03:12:97:d5:
                    3d:63:05:80:db:8d:09:09:3f:d8:8d:8c:f5:a2:84:
                    c0:10:29:f7:9d:37:2b:c2:a9:f8:e2:45:b9:df:18:
                    fb:06:82:0c:88:cf:ce:ca:d1:fc:93:c2:aa:b7:0b:
                    8e:16:8b:4b:19:65:6f:ed:78:ca:2a:71:ff:10:20:
                    ef:4b:ed:eb:0c:77:88:b1:75:83:0f:b1:b8:e3:0f:
                    b7:c8:10:7d:c0:14:fa:59:48:58:7d:21:f7:fe:89:
                    ff:75:42:92:0c:e3:ad:7b:87:20:02:f0:d2:3b:e7:
                    fb:59:90:2d:ef:1e:19:8c:62:ec:25:a3:fd:f0:ea:
                    9b:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:40:36:B9:19:56:03:E7:47:9F:23:05:26:A5:2E:DD:43:C7:60:D7
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3135312e302f32342d3234203d3e2039333138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.40.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b6:14:c8:65:a0:67:28:63:62:01:16:dd:68:6e:06:dd:b3:e8:
         90:f9:4a:8e:b8:92:37:9a:84:5f:ec:ca:a6:ec:37:dc:35:79:
         ba:4f:1f:b1:34:ae:4c:d7:fb:8b:2d:e7:5a:b6:fd:eb:13:b4:
         41:bd:c6:ef:01:a5:d5:58:21:fb:f2:9a:3b:7e:c1:d3:05:96:
         68:9d:79:fa:1b:64:40:e8:ee:39:d6:e0:bb:2c:7e:0b:31:e3:
         78:e5:22:10:a3:3f:3c:c7:6d:69:a9:04:54:ff:31:83:bd:0f:
         60:9c:7b:7c:de:d9:13:e7:14:8c:03:d7:82:7b:7e:a9:95:f4:
         b9:da:a1:4c:54:52:b6:88:e9:ee:06:1e:02:fb:71:c0:45:cc:
         26:46:1a:4e:6e:2f:b4:20:20:74:63:37:13:ae:85:e4:91:e3:
         cc:13:2f:47:6e:41:60:66:ce:7c:b9:ad:02:89:b5:ad:57:5d:
         6a:ed:0b:d8:1b:1c:44:80:dc:77:52:42:a5:89:ab:e1:32:3b:
         5f:f2:46:f0:95:d3:47:fa:89:8a:d8:80:fe:be:27:32:fc:cc:
         1e:16:93:9b:1b:ef:be:71:ce:5b:6d:a6:0e:cd:79:5f:45:94:
         3f:67:a5:ca:8e:08:57:36:8d:ec:cf:36:a5:d6:93:38:4e:62:
         7e:da:82:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:47:36 2026 by rpki-client