Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3230302e302f32322d3232203d3e2035363530.roa
File:                     3136392e34302e3230302e302f32322d3232203d3e2035363530.roa (raw, json)
Hash identifier:          9cIz3q/joQMdoyFryO4/YP8ZbUSVprX6NzZE6jK6X2s=
Subject key identifier:   27:90:74:6C:AD:24:81:C7:8E:50:22:34:C8:7F:4C:A7:3E:B2:B2:E9
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       278C1401F7BA2B9BE63AC96FDCBE4D83EE14A309
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3230302e302f32322d3232203d3e2035363530.roa
Signing time:             Thu 12 Feb 2026 01:05:06 +0000
ROA not before:           Thu 12 Feb 2026 01:00:06 +0000
ROA not after:            Thu 11 Feb 2027 01:05:06 +0000
asID:                     5650
IP address blocks:        169.40.200.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 06:04:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:8c:14:01:f7:ba:2b:9b:e6:3a:c9:6f:dc:be:4d:83:ee:14:a3:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: Feb 12 01:00:06 2026 GMT
            Not After : Feb 11 01:05:06 2027 GMT
        Subject: CN=2790746CAD2481C78E502234C87F4CA73EB2B2E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:e3:4a:51:80:18:fd:c9:96:3a:10:c9:14:5d:
                    58:18:44:7d:3c:72:35:d1:b0:72:79:da:90:a6:a3:
                    1e:b4:62:74:aa:ee:b3:d3:5b:17:18:f0:8e:57:7b:
                    a0:f3:a8:40:4e:05:ea:7d:ad:50:bb:45:2d:71:cb:
                    c5:ac:8e:48:6e:2a:46:d4:d7:c8:b7:f1:bf:64:5e:
                    b2:30:84:8a:11:be:9e:9f:0e:71:e4:2c:57:98:91:
                    c5:a0:46:91:fb:f9:38:ec:fc:15:cf:05:c1:1e:64:
                    80:d4:8b:99:e0:d1:5e:74:62:39:7e:95:94:00:1e:
                    4b:6e:9e:d2:f3:17:3f:8a:2e:fa:22:79:3d:60:03:
                    53:8a:8b:a2:2a:77:a0:25:e9:d1:4e:9b:7b:77:b7:
                    55:19:72:1c:da:d4:90:20:db:99:ce:c8:eb:2c:41:
                    09:a3:34:e7:0e:7d:3d:4c:e1:56:b0:07:b1:f7:55:
                    f2:31:1a:2b:fd:44:01:07:35:15:32:98:d7:6f:c0:
                    32:82:45:c4:3f:13:f1:f6:b9:21:06:68:88:43:01:
                    a7:4f:b9:3e:3e:34:b9:65:cc:d9:49:20:c5:b3:0c:
                    a6:6c:76:58:d7:89:76:f6:89:dd:07:1e:85:4c:78:
                    7d:17:08:50:30:9d:e4:59:92:11:bc:51:cf:18:2b:
                    b8:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:90:74:6C:AD:24:81:C7:8E:50:22:34:C8:7F:4C:A7:3E:B2:B2:E9
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3230302e302f32322d3232203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.40.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         74:36:40:0d:5a:88:98:e9:cf:ef:36:df:01:6e:53:47:01:8d:
         4c:cd:ca:73:49:0a:88:98:e8:46:fa:0f:c4:1a:40:e8:bf:ad:
         e1:2b:4f:0d:14:ea:3e:19:dc:f7:1c:b1:5d:ed:2c:ce:81:36:
         8f:d2:13:8e:a6:95:10:9b:ef:c1:71:0b:38:b6:69:06:8a:0b:
         e6:39:99:05:67:a3:49:3e:5b:01:f3:18:3d:ed:0f:e7:08:df:
         ab:d4:26:60:6e:96:eb:01:a4:e6:f6:13:6f:c8:9b:e8:04:96:
         c3:c5:69:25:65:a4:ae:eb:f7:aa:da:eb:21:a8:2d:da:ec:96:
         44:75:21:7d:f8:de:8a:75:f3:81:91:a2:59:43:1e:13:11:22:
         96:91:c8:35:36:90:1e:ec:5d:c2:0a:c0:5b:4d:6f:ac:77:19:
         43:c3:9f:07:09:9a:ef:da:bb:07:97:8a:e2:86:23:a4:55:7a:
         8a:58:08:f3:d1:96:6c:a5:45:f3:88:32:56:c1:f2:4e:c5:91:
         c9:18:50:04:5f:35:8d:76:42:7d:d0:20:13:75:e0:58:b3:26:
         8c:3e:89:1e:64:c1:a5:1c:5a:7a:51:16:c8:3b:cc:82:3a:5f:
         f8:d5:49:03:80:20:39:79:60:90:ed:31:0d:ff:2e:98:7c:f5:
         ba:96:39:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:00:25 2026 by rpki-client