Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e33332e302f32342d3234203d3e203633313939.roa
File:                     3136392e34302e33332e302f32342d3234203d3e203633313939.roa (raw, json)
Hash identifier:          HhpTbyZp02/F4k9CITC1z2gm4Ak1tfZTT6xiFL1fpWY=
Subject key identifier:   42:3F:81:1F:CA:C3:E7:ED:C2:53:7A:AB:F0:D7:CE:C9:4C:D4:59:68
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       5D115B78E62DE2888B2855B80097468038C9820A
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e33332e302f32342d3234203d3e203633313939.roa
Signing time:             Fri 13 Feb 2026 07:57:53 +0000
ROA not before:           Fri 13 Feb 2026 07:52:53 +0000
ROA not after:            Fri 12 Feb 2027 07:57:53 +0000
asID:                     63199
IP address blocks:        169.40.33.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 14:28:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:11:5b:78:e6:2d:e2:88:8b:28:55:b8:00:97:46:80:38:c9:82:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: Feb 13 07:52:53 2026 GMT
            Not After : Feb 12 07:57:53 2027 GMT
        Subject: CN=423F811FCAC3E7EDC2537AABF0D7CEC94CD45968
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:3e:64:93:31:25:29:9e:4b:0e:59:07:ca:8f:
                    bf:94:36:c5:18:1c:f6:df:47:4c:75:56:52:49:89:
                    e7:7f:c9:31:4c:d4:b2:5d:ed:81:d6:92:30:d6:ba:
                    a8:cb:2a:62:22:5e:27:aa:76:a1:a6:53:16:02:46:
                    4c:18:fd:61:58:92:54:fd:90:8e:ca:bf:52:c7:c3:
                    dd:b9:1a:b0:78:a6:d3:78:5e:9b:a1:a4:86:8c:87:
                    57:27:9c:f7:1a:2d:15:84:e6:54:29:0c:17:cb:78:
                    ab:e0:59:ea:ee:a8:09:3a:6f:52:b0:61:fd:e8:38:
                    3e:d6:c0:79:a7:0b:26:c9:84:7c:ee:dd:56:59:c7:
                    e5:68:3a:66:8c:6c:e5:bd:b6:39:90:a1:3b:5b:ca:
                    77:6e:4b:66:88:c8:25:f5:21:46:5c:68:1d:aa:42:
                    d0:52:87:54:50:16:8a:de:8b:29:c5:73:3f:93:11:
                    b8:0e:77:bc:1f:2a:68:a2:33:08:e5:1e:3d:49:3f:
                    6e:96:55:6c:44:66:3c:1e:5c:f4:7a:99:3f:5a:2a:
                    fd:ec:49:44:4c:a6:fd:12:86:12:ae:34:64:a2:aa:
                    5c:b8:d2:e0:24:0d:87:d4:7f:0b:eb:ad:29:3c:37:
                    6f:65:59:a6:fd:b7:f6:32:00:5f:75:69:8d:17:75:
                    5a:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:3F:81:1F:CA:C3:E7:ED:C2:53:7A:AB:F0:D7:CE:C9:4C:D4:59:68
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e33332e302f32342d3234203d3e203633313939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.40.33.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:2c:b2:2b:ce:b0:4f:3d:d7:72:7f:6a:2e:9f:da:c2:b5:73:
         fa:01:63:f0:eb:83:44:f6:9a:50:62:85:eb:0d:b3:d9:88:f7:
         1b:c3:9c:b6:c9:74:2a:46:eb:8c:1c:d0:2a:55:e5:f8:54:66:
         3c:0a:31:35:66:8e:09:23:21:34:fe:04:16:3f:55:d7:0b:19:
         ea:d2:ae:4b:c4:d9:55:b3:23:d9:7a:ac:65:71:c3:9a:f1:15:
         b2:eb:6e:7b:13:5d:d0:39:7e:f2:75:c0:94:95:e0:93:0c:6c:
         8f:78:9b:99:1e:02:54:41:1d:d0:17:52:a3:70:65:2a:72:8e:
         4a:54:c6:10:ad:70:e4:9e:d6:db:6f:01:1f:e7:26:02:35:1b:
         a5:2f:a6:39:74:60:d6:fc:d3:ea:82:69:b5:a7:99:cb:c0:2d:
         b6:6a:62:36:82:07:48:a1:46:c8:ff:14:ab:07:6d:3d:19:45:
         43:1e:3a:85:b7:02:0c:09:47:2d:18:db:79:04:c2:77:df:9c:
         ca:c0:bc:64:33:0a:7f:62:3a:9e:5b:ed:59:93:65:c0:0a:9a:
         bf:14:8f:b4:11:56:c0:0d:06:4c:86:fc:7f:02:bc:94:7b:3a:
         b3:a1:83:52:74:ef:d4:9c:41:9e:92:d7:89:ca:cc:5e:94:16:
         18:02:1d:92
-----BEGIN CERTIFICATE-----
MIIFVjCCBD6gAwIBAgIUXRFbeOYt4oiLKFW4AJdGgDjJggowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUVGNzY2RjEwM0IyRUY5OURGOEM3MTk3OEE3RkU1MTlE
NzMwQjE1NTAeFw0yNjAyMTMwNzUyNTNaFw0yNzAyMTIwNzU3NTNaMDMxMTAvBgNV
BAMTKDQyM0Y4MTFGQ0FDM0U3RURDMjUzN0FBQkYwRDdDRUM5NENENDU5NjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9PmSTMSUpnksOWQfKj7+UNsUY
HPbfR0x1VlJJied/yTFM1LJd7YHWkjDWuqjLKmIiXieqdqGmUxYCRkwY/WFYklT9
kI7Kv1LHw925GrB4ptN4XpuhpIaMh1cnnPcaLRWE5lQpDBfLeKvgWeruqAk6b1Kw
Yf3oOD7WwHmnCybJhHzu3VZZx+VoOmaMbOW9tjmQoTtbynduS2aIyCX1IUZcaB2q
QtBSh1RQForeiynFcz+TEbgOd7wfKmiiMwjlHj1JP26WVWxEZjweXPR6mT9aKv3s
SURMpv0ShhKuNGSiqly40uAkDYfUfwvrrSk8N29lWab9t/YyAF91aY0XdVqpAgMB
AAGjggJgMIICXDAdBgNVHQ4EFgQUQj+BH8rD5+3CU3qr8NfOyUzUWWgwHwYDVR0j
BBgwFoAUrvdm8QOy75nfjHGXin/lGdcwsVUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
MzAzMjdiOWUtMjI3YS00ZWJkLTgyNWItM2I5ODA5NWRjOTI3LTAvMC9BRUY3NjZG
MTAzQjJFRjk5REY4QzcxOTc4QTdGRTUxOUQ3MzBCMTU1LmNybDCBngYIKwYBBQUH
AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1
OTBiOTlhZi80L0FFRjc2NkYxMDNCMkVGOTlERjhDNzE5NzhBN0ZFNTE5RDczMEIx
NTUuY2VyMIGiBggrBgEFBQcBCwSBlTCBkjCBjwYIKwYBBQUHMAuGgYJyc3luYzov
L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby8zMDMyN2I5ZS0yMjdhLTRlYmQtODI1
Yi0zYjk4MDk1ZGM5MjctMC8wLzMxMzYzOTJlMzQzMDJlMzMzMzJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDM2MzMzMTM5Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACpKCEwDQYJKoZIhvcN
AQELBQADggEBAFossivOsE8913J/ai6f2sK1c/oBY/Drg0T2mlBihesNs9mI9xvD
nLbJdCpG64wc0CpV5fhUZjwKMTVmjgkjITT+BBY/VdcLGerSrkvE2VWzI9l6rGVx
w5rxFbLrbnsTXdA5fvJ1wJSV4JMMbI94m5keAlRBHdAXUqNwZSpyjkpUxhCtcOSe
1ttvAR/nJgI1G6Uvpjl0YNb80+qCabWnmcvALbZqYjaCB0ihRsj/FKsHbT0ZRUMe
OoW3AgwJRy0Y23kEwnffnMrAvGQzCn9iOp5b7VmTZcAKmr8Uj7QRVsANBkyG/H8C
vJR7OrOhg1J079ScQZ6S14nKzF6UFhgCHZI=
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:17:16 2026 by rpki-client