Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3138342e302f32322d3232203d3e2035363530.roa
File:                     3136392e34302e3138342e302f32322d3232203d3e2035363530.roa (raw, json)
Hash identifier:          uG388kDZnIAlvwIO+PmjNU0jIvOsAdmwwhnJi3Fw30g=
Subject key identifier:   09:8E:0F:03:CD:40:97:0B:AE:CE:B6:8C:0E:28:2D:1B:7A:3B:AD:4D
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       34136C553A8C2CAE3F1E0F9840D48866A40A52F0
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3138342e302f32322d3232203d3e2035363530.roa
Signing time:             Thu 12 Feb 2026 01:05:04 +0000
ROA not before:           Thu 12 Feb 2026 01:00:04 +0000
ROA not after:            Thu 11 Feb 2027 01:05:04 +0000
asID:                     5650
IP address blocks:        169.40.184.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 14:28:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:13:6c:55:3a:8c:2c:ae:3f:1e:0f:98:40:d4:88:66:a4:0a:52:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: Feb 12 01:00:04 2026 GMT
            Not After : Feb 11 01:05:04 2027 GMT
        Subject: CN=098E0F03CD40970BAECEB68C0E282D1B7A3BAD4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:ab:c6:50:d1:f6:13:19:47:72:9e:b2:69:1f:
                    60:92:57:28:82:bf:af:67:30:d7:ad:4c:e6:70:8c:
                    b8:69:47:e2:d7:18:4e:c0:02:d1:ae:48:a4:3b:32:
                    38:e2:91:0d:29:8a:09:0b:11:96:da:59:90:02:0b:
                    eb:de:7f:f4:bb:bf:e8:2f:99:04:37:84:69:0d:4b:
                    ca:29:23:bd:76:66:98:3d:c8:67:36:c1:13:48:f8:
                    f0:5b:7e:48:bd:8e:fa:1f:03:ba:08:e2:b2:91:ae:
                    ba:ac:b5:2d:03:cf:58:0d:fe:d2:a0:e3:11:0d:70:
                    46:df:1c:fa:f7:4c:35:ee:92:1b:56:58:87:74:39:
                    e9:4e:99:79:ed:bb:c2:15:76:46:4a:a3:d2:a0:74:
                    35:da:1a:df:0f:db:46:46:9b:79:ea:52:4f:8c:4a:
                    1f:50:37:1a:40:e6:44:f1:c7:cf:13:e7:f6:cc:61:
                    b2:ba:56:70:2e:01:b5:00:7b:a3:be:7f:b9:c7:dd:
                    ac:7d:a4:bc:f6:b9:79:4b:d0:07:4d:c8:42:cc:a0:
                    34:ec:4b:c5:ae:39:79:96:13:b6:ac:87:05:2d:e6:
                    f0:d4:37:f7:a4:2c:68:21:aa:ff:62:38:01:f5:be:
                    c3:91:1b:52:78:0b:60:dc:36:f6:13:81:73:d2:10:
                    06:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:8E:0F:03:CD:40:97:0B:AE:CE:B6:8C:0E:28:2D:1B:7A:3B:AD:4D
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3138342e302f32322d3232203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.40.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         30:8a:18:68:02:82:c1:85:14:40:9b:bc:ce:61:96:ae:78:c6:
         8b:67:80:e2:6e:71:22:92:19:8a:67:93:9a:5c:b1:b0:ec:1c:
         23:96:47:44:6a:4f:d9:f1:01:06:a6:0e:79:08:ee:47:8d:cd:
         d2:c1:78:e8:cb:25:f4:33:b8:2c:4b:e7:3f:e8:21:63:86:5f:
         78:94:86:09:56:ea:3d:05:f9:6c:4c:b2:14:65:a9:46:3d:f1:
         11:86:44:bc:8d:64:fe:84:b5:8c:13:07:6e:84:22:a7:bd:58:
         9c:ab:db:14:7d:92:2a:07:64:40:ae:b3:2f:9d:4e:61:03:cc:
         a9:99:27:5c:07:01:94:2c:f8:be:15:fc:fe:86:d2:9e:d3:82:
         76:c1:97:e1:7a:d8:aa:da:d0:c3:cc:43:59:ad:69:5a:03:7a:
         a6:3f:e5:7f:53:b5:6d:5b:64:21:08:9a:0b:c0:d4:1e:80:96:
         75:5e:75:33:64:03:98:e8:76:a1:28:e5:5f:50:27:ad:88:63:
         84:7c:c9:e5:2b:ac:97:cf:97:b6:74:da:c7:94:c4:84:84:f8:
         7b:53:b9:a4:7b:7e:07:92:e9:94:1b:ab:bd:87:0b:78:66:44:
         ac:40:58:13:8f:38:a5:3d:e3:56:94:d5:84:97:c6:ea:11:90:
         11:79:ab:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:38:25 2026 by rpki-client