Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e34382e302f32312d3234203d3e20383334.roa
File:                     3136392e34302e34382e302f32312d3234203d3e20383334.roa (raw, json)
Hash identifier:          xuCAzjpdzU/P7Ahr0QFmciQFtJ7v4F/6xL1pjoAGyYM=
Subject key identifier:   F6:B1:AA:D2:DB:00:72:4E:B2:B5:8E:47:C0:09:10:9A:10:E2:D6:34
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       721829E6B5645B7E46EF7099EDFE270A8905BAD1
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e34382e302f32312d3234203d3e20383334.roa
Signing time:             Fri 27 Feb 2026 10:24:07 +0000
ROA not before:           Fri 27 Feb 2026 10:19:07 +0000
ROA not after:            Fri 26 Feb 2027 10:24:07 +0000
asID:                     834
IP address blocks:        169.40.48.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 06:04:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:18:29:e6:b5:64:5b:7e:46:ef:70:99:ed:fe:27:0a:89:05:ba:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: Feb 27 10:19:07 2026 GMT
            Not After : Feb 26 10:24:07 2027 GMT
        Subject: CN=F6B1AAD2DB00724EB2B58E47C009109A10E2D634
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:29:b5:3c:51:b7:d9:41:dc:dc:09:a8:1e:5e:
                    fb:6b:7a:ea:2e:63:8b:92:22:af:8f:6f:c6:12:38:
                    f8:30:8c:85:93:98:9a:0c:94:ae:2f:77:d1:40:9f:
                    14:ee:fb:c3:44:d8:f2:5b:30:3e:1b:e2:88:a0:02:
                    4a:e3:8e:f3:9a:a1:41:54:a4:20:1b:44:f0:d1:08:
                    50:dc:bd:9b:fc:c9:30:be:f3:84:c1:96:7d:5e:21:
                    8f:d7:cc:78:80:65:c7:6b:57:f9:0f:a4:2a:7a:95:
                    32:54:bc:f8:b3:cd:80:b9:df:28:ce:dc:39:b2:a5:
                    ce:e4:7f:fd:2d:97:9c:e1:8d:31:45:3d:93:75:21:
                    91:9d:bb:ff:0e:f2:8f:35:5d:81:a0:66:44:cc:95:
                    97:90:80:2d:78:65:57:38:46:ff:51:18:2a:64:d6:
                    15:ad:75:68:e4:8d:9b:31:da:6d:08:30:03:e5:a3:
                    3d:da:fe:fb:d5:2e:b5:0b:02:6a:e4:8f:22:f8:6b:
                    a6:fb:a4:84:f6:0e:92:5e:a8:f8:fb:44:3b:cb:b5:
                    37:e7:9f:e2:75:38:3c:57:75:22:36:49:c3:e2:00:
                    b6:b9:f1:b5:22:c2:43:c8:99:60:e7:34:fa:31:98:
                    7d:ed:52:79:51:53:34:35:36:ac:5d:9a:d5:67:75:
                    07:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:B1:AA:D2:DB:00:72:4E:B2:B5:8E:47:C0:09:10:9A:10:E2:D6:34
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e34382e302f32312d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.40.48.0/21

    Signature Algorithm: sha256WithRSAEncryption
         22:7f:4c:7d:a5:ff:d7:bd:49:c8:ef:47:78:77:39:ed:6f:c5:
         ca:5c:de:d4:bd:e9:c0:01:31:a1:ce:66:ab:ec:ea:5b:8a:68:
         cc:78:6d:2a:ed:51:73:cd:f2:74:ad:87:9c:19:da:fc:7e:5c:
         ee:38:d6:8a:4d:92:a4:0c:87:da:1e:40:3d:8f:72:c2:1a:5f:
         a8:e3:08:99:8f:84:0c:a1:55:8e:f0:9c:fe:aa:8f:88:8b:92:
         80:e3:8f:4d:96:cd:44:22:64:a9:df:fc:2c:07:25:6e:53:e9:
         58:75:92:4b:55:fc:40:41:5e:cf:62:ec:0c:a9:0b:f4:ee:03:
         ec:08:cb:85:4f:02:4f:2f:72:bd:a1:a2:aa:75:56:44:af:56:
         59:b7:ce:5b:b5:8b:01:f6:4d:09:fd:fe:c8:ae:57:40:77:73:
         63:db:27:56:11:63:e8:23:ea:e6:2e:f9:84:7f:1c:f7:7b:a0:
         ae:63:a3:7d:67:19:f5:a9:f3:80:6c:cb:f1:8a:62:07:6a:2d:
         c4:ab:67:50:32:14:50:d7:09:10:76:a5:d3:2b:fb:8b:d3:a5:
         b6:2a:06:72:29:ad:8a:16:f7:52:1a:de:d9:0c:42:54:b1:1b:
         e3:41:77:f1:c1:28:ac:5d:46:64:0d:dc:f3:1d:25:af:c0:71:
         a3:87:d2:63
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUchgp5rVkW35G73CZ7f4nCokFutEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUVGNzY2RjEwM0IyRUY5OURGOEM3MTk3OEE3RkU1MTlE
NzMwQjE1NTAeFw0yNjAyMjcxMDE5MDdaFw0yNzAyMjYxMDI0MDdaMDMxMTAvBgNV
BAMTKEY2QjFBQUQyREIwMDcyNEVCMkI1OEU0N0MwMDkxMDlBMTBFMkQ2MzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1KbU8UbfZQdzcCageXvtreuou
Y4uSIq+Pb8YSOPgwjIWTmJoMlK4vd9FAnxTu+8NE2PJbMD4b4oigAkrjjvOaoUFU
pCAbRPDRCFDcvZv8yTC+84TBln1eIY/XzHiAZcdrV/kPpCp6lTJUvPizzYC53yjO
3Dmypc7kf/0tl5zhjTFFPZN1IZGdu/8O8o81XYGgZkTMlZeQgC14ZVc4Rv9RGCpk
1hWtdWjkjZsx2m0IMAPloz3a/vvVLrULAmrkjyL4a6b7pIT2DpJeqPj7RDvLtTfn
n+J1ODxXdSI2ScPiALa58bUiwkPImWDnNPoxmH3tUnlRUzQ1NqxdmtVndQcvAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQU9rGq0tsAck6ytY5HwAkQmhDi1jQwHwYDVR0j
BBgwFoAUrvdm8QOy75nfjHGXin/lGdcwsVUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
MzAzMjdiOWUtMjI3YS00ZWJkLTgyNWItM2I5ODA5NWRjOTI3LTAvMC9BRUY3NjZG
MTAzQjJFRjk5REY4QzcxOTc4QTdGRTUxOUQ3MzBCMTU1LmNybDCBngYIKwYBBQUH
AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1
OTBiOTlhZi80L0FFRjc2NkYxMDNCMkVGOTlERjhDNzE5NzhBN0ZFNTE5RDczMEIx
NTUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCBigYIKwYBBQUHMAuGfnJzeW5jOi8v
ci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvLzMwMzI3YjllLTIyN2EtNGViZC04MjVi
LTNiOTgwOTVkYzkyNy0wLzAvMzEzNjM5MmUzNDMwMmUzNDM4MmUzMDJmMzIzMTJk
MzIzNDIwM2QzZTIwMzgzMzM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDqSgwMA0GCSqGSIb3DQEBCwUA
A4IBAQAif0x9pf/XvUnI70d4dzntb8XKXN7UvenAATGhzmar7OpbimjMeG0q7VFz
zfJ0rYecGdr8flzuONaKTZKkDIfaHkA9j3LCGl+o4wiZj4QMoVWO8Jz+qo+Ii5KA
449Nls1EImSp3/wsByVuU+lYdZJLVfxAQV7PYuwMqQv07gPsCMuFTwJPL3K9oaKq
dVZEr1ZZt85btYsB9k0J/f7IrldAd3Nj2ydWEWPoI+rmLvmEfxz3e6CuY6N9Zxn1
qfOAbMvximIHai3Eq2dQMhRQ1wkQdqXTK/uL06W2KgZyKa2KFvdSGt7ZDEJUsRvj
QXfxwSisXUZkDdzzHSWvwHGjh9Jj
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:02:49 2026 by rpki-client