Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3135332e302f32342d3234203d3e2039333034.roa
File:                     3136392e34302e3135332e302f32342d3234203d3e2039333034.roa (raw, json)
Hash identifier:          bi4dY0HzVpmXdLHMhdOqLSe/iz+e7P++6230AKofwlY=
Subject key identifier:   D0:C7:82:1C:A2:80:C0:AB:CF:0F:35:1F:A3:D7:E5:8B:77:A6:76:D2
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       769487ECEAA3B5A8CFCABBDDF0C1D728EF7BB52A
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3135332e302f32342d3234203d3e2039333034.roa
Signing time:             Thu 12 Feb 2026 01:05:04 +0000
ROA not before:           Thu 12 Feb 2026 01:00:04 +0000
ROA not after:            Thu 11 Feb 2027 01:05:04 +0000
asID:                     9304
IP address blocks:        169.40.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 14:28:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:94:87:ec:ea:a3:b5:a8:cf:ca:bb:dd:f0:c1:d7:28:ef:7b:b5:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: Feb 12 01:00:04 2026 GMT
            Not After : Feb 11 01:05:04 2027 GMT
        Subject: CN=D0C7821CA280C0ABCF0F351FA3D7E58B77A676D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:5a:2a:54:33:e3:bf:19:fc:d0:08:68:a3:cb:
                    ef:52:da:c9:88:6d:4a:6e:b5:b1:36:24:fb:84:16:
                    8a:35:8f:f7:29:29:ad:8d:a8:39:44:f2:6b:8a:6f:
                    29:0c:01:b3:ee:d2:67:fb:5a:51:18:27:18:3d:0a:
                    3f:a5:8c:fc:b3:3c:19:b0:a5:82:cc:07:c6:a8:53:
                    2b:03:2c:28:1f:99:fe:c3:39:5c:9a:c1:a4:4c:90:
                    04:34:88:e5:c2:b1:f2:af:b3:0e:7b:c7:7e:f5:ab:
                    5b:f4:53:95:bc:b8:8a:4c:ca:28:76:17:9d:2c:6d:
                    a4:af:9a:bf:43:f0:5e:8f:1b:24:e5:b5:51:12:00:
                    37:f1:44:3e:cb:6a:0a:63:ae:6e:4f:7d:f4:cb:14:
                    5a:fb:d6:76:0e:94:1c:c8:fb:99:20:46:ec:ec:1d:
                    13:4d:fe:a9:22:c0:61:1a:ef:a3:c3:9d:7a:eb:3d:
                    f2:33:3a:ad:bf:b7:58:14:3d:ae:c1:6b:0d:27:ad:
                    28:60:6b:de:3a:77:4e:64:7a:86:a3:23:d9:32:f7:
                    ba:b9:23:da:9f:51:3f:4b:8a:a3:85:4b:64:2a:0d:
                    82:5f:cc:6e:77:9c:f3:7e:d9:5c:45:c3:a1:a3:7a:
                    2b:b4:d5:b1:69:80:7f:bf:d3:9b:30:0d:86:21:37:
                    d0:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:C7:82:1C:A2:80:C0:AB:CF:0F:35:1F:A3:D7:E5:8B:77:A6:76:D2
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3135332e302f32342d3234203d3e2039333034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.40.153.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:d5:7d:02:0c:65:e5:79:8b:d8:a8:f3:3e:26:78:ee:6c:be:
         54:22:e5:1c:21:b6:8b:a3:d4:c4:b1:51:a2:76:a2:2b:d3:b9:
         3c:8a:33:77:64:dd:74:a7:ff:d3:13:a0:d8:3f:e5:ba:9e:73:
         1f:f5:8e:cf:69:3f:d8:58:f7:5f:ce:9b:77:3c:73:83:36:e3:
         f5:35:c0:d6:64:0f:0d:71:c0:0d:0f:64:77:0e:ef:12:70:68:
         4a:85:75:f1:63:6d:9e:0c:30:9b:ed:dc:90:02:67:a8:01:71:
         a4:d3:7e:16:8a:4b:73:df:64:cf:41:d9:aa:e1:24:a1:a4:db:
         64:3a:58:e3:f8:02:b9:81:a3:f8:9e:ea:20:41:68:0c:27:27:
         75:19:34:69:d9:74:9f:6f:bd:15:1b:6a:fe:32:1f:69:15:7f:
         d6:45:2a:f7:17:29:06:6f:9e:c7:9d:82:4a:d8:92:07:57:5a:
         1a:be:17:be:30:9c:99:a9:b5:59:85:a0:fc:f6:71:c6:d2:06:
         6a:a2:f9:b6:58:4b:57:3b:6e:9b:57:6b:cf:6e:44:41:67:81:
         04:ef:21:01:28:75:ec:bc:b0:30:11:ce:f5:36:9f:e2:67:a4:
         2a:23:d8:2b:37:b6:58:5d:09:60:ab:4d:65:79:20:97:90:1c:
         9e:09:1a:83
-----BEGIN CERTIFICATE-----
MIIFVjCCBD6gAwIBAgIUdpSH7OqjtajPyrvd8MHXKO97tSowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUVGNzY2RjEwM0IyRUY5OURGOEM3MTk3OEE3RkU1MTlE
NzMwQjE1NTAeFw0yNjAyMTIwMTAwMDRaFw0yNzAyMTEwMTA1MDRaMDMxMTAvBgNV
BAMTKEQwQzc4MjFDQTI4MEMwQUJDRjBGMzUxRkEzRDdFNThCNzdBNjc2RDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrWipUM+O/GfzQCGijy+9S2smI
bUputbE2JPuEFoo1j/cpKa2NqDlE8muKbykMAbPu0mf7WlEYJxg9Cj+ljPyzPBmw
pYLMB8aoUysDLCgfmf7DOVyawaRMkAQ0iOXCsfKvsw57x371q1v0U5W8uIpMyih2
F50sbaSvmr9D8F6PGyTltVESADfxRD7Lagpjrm5PffTLFFr71nYOlBzI+5kgRuzs
HRNN/qkiwGEa76PDnXrrPfIzOq2/t1gUPa7Baw0nrShga946d05keoajI9ky97q5
I9qfUT9LiqOFS2QqDYJfzG53nPN+2VxFw6Gjeiu01bFpgH+/05swDYYhN9BDAgMB
AAGjggJgMIICXDAdBgNVHQ4EFgQU0MeCHKKAwKvPDzUfo9fli3emdtIwHwYDVR0j
BBgwFoAUrvdm8QOy75nfjHGXin/lGdcwsVUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
MzAzMjdiOWUtMjI3YS00ZWJkLTgyNWItM2I5ODA5NWRjOTI3LTAvMC9BRUY3NjZG
MTAzQjJFRjk5REY4QzcxOTc4QTdGRTUxOUQ3MzBCMTU1LmNybDCBngYIKwYBBQUH
AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1
OTBiOTlhZi80L0FFRjc2NkYxMDNCMkVGOTlERjhDNzE5NzhBN0ZFNTE5RDczMEIx
NTUuY2VyMIGiBggrBgEFBQcBCwSBlTCBkjCBjwYIKwYBBQUHMAuGgYJyc3luYzov
L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby8zMDMyN2I5ZS0yMjdhLTRlYmQtODI1
Yi0zYjk4MDk1ZGM5MjctMC8wLzMxMzYzOTJlMzQzMDJlMzEzNTMzMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzkzMzMwMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACpKJkwDQYJKoZIhvcN
AQELBQADggEBAJbVfQIMZeV5i9io8z4meO5svlQi5Rwhtouj1MSxUaJ2oivTuTyK
M3dk3XSn/9MToNg/5bqecx/1js9pP9hY91/Om3c8c4M24/U1wNZkDw1xwA0PZHcO
7xJwaEqFdfFjbZ4MMJvt3JACZ6gBcaTTfhaKS3PfZM9B2arhJKGk22Q6WOP4ArmB
o/ie6iBBaAwnJ3UZNGnZdJ9vvRUbav4yH2kVf9ZFKvcXKQZvnsedgkrYkgdXWhq+
F74wnJmptVmFoPz2ccbSBmqi+bZYS1c7bptXa89uREFngQTvIQEodey8sDARzvU2
n+JnpCoj2Cs3tlhdCWCrTWV5IJeQHJ4JGoM=
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:30:26 2026 by rpki-client