Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e35372e302f32342d3234203d3e203136323736.roa
File:                     3136392e34302e35372e302f32342d3234203d3e203136323736.roa (raw, json)
Hash identifier:          WudFRZeuwDpdnCvax5QyDfSyF7DorH5Ki03Z8PRaCZs=
Subject key identifier:   D6:6C:D6:42:5A:B1:A6:12:F8:C9:BA:3F:73:C3:AA:09:62:1A:9A:BD
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       5DC2DD08E2EDB3F69E1629B86EDE8851658E3A50
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e35372e302f32342d3234203d3e203136323736.roa
Signing time:             Fri 27 Feb 2026 10:21:05 +0000
ROA not before:           Fri 27 Feb 2026 10:16:05 +0000
ROA not after:            Fri 26 Feb 2027 10:21:05 +0000
asID:                     16276
IP address blocks:        169.40.57.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 06:04:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:c2:dd:08:e2:ed:b3:f6:9e:16:29:b8:6e:de:88:51:65:8e:3a:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: Feb 27 10:16:05 2026 GMT
            Not After : Feb 26 10:21:05 2027 GMT
        Subject: CN=D66CD6425AB1A612F8C9BA3F73C3AA09621A9ABD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:cf:6e:ed:65:93:0d:b8:48:7f:07:71:09:97:
                    e3:67:59:a2:89:6e:3b:fe:c8:87:35:b7:dd:88:b6:
                    84:8a:79:a2:7b:45:2d:03:d5:51:bc:ed:f3:3e:29:
                    94:cf:a0:c6:b8:19:76:72:79:c6:eb:97:81:b5:7f:
                    74:9c:63:cc:17:6e:06:07:4f:7e:46:e4:0c:f7:f6:
                    f3:f1:d0:8f:2d:ef:7d:b0:f3:a7:fc:50:cf:5d:74:
                    d2:a6:4d:3e:a7:aa:68:4b:fc:22:33:2e:ce:0d:12:
                    93:4d:d2:d9:33:0b:d0:05:18:4b:28:a2:a5:f1:9a:
                    59:2e:ad:cd:a7:0f:f2:48:c9:44:da:41:82:8d:ee:
                    09:dd:e6:06:03:ab:ef:4c:de:9e:1c:6e:11:b1:2f:
                    ec:80:fe:70:1a:fc:1d:c2:d2:ca:18:02:39:da:37:
                    e0:67:52:5b:9f:c9:8c:2b:c7:5b:c4:83:c4:22:2b:
                    c9:39:ce:11:eb:19:42:f0:ff:c8:48:54:48:3f:37:
                    c6:e3:2f:80:ad:f6:14:b1:53:49:9c:d5:70:2d:06:
                    a2:23:e0:8f:4e:9c:32:be:4f:2b:40:36:1a:09:72:
                    ab:66:b7:cb:d4:8f:61:38:26:a6:42:dd:5c:f7:40:
                    35:c9:fb:dd:92:22:1b:04:0b:5b:95:dc:a0:e6:47:
                    72:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:6C:D6:42:5A:B1:A6:12:F8:C9:BA:3F:73:C3:AA:09:62:1A:9A:BD
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e35372e302f32342d3234203d3e203136323736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.40.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:57:c7:a6:bf:e7:18:63:80:b8:ba:06:57:60:98:2f:ff:1b:
         1b:cc:3f:56:6f:1b:ac:37:95:95:d3:21:1a:20:d3:ba:66:12:
         b8:16:4f:bb:a8:97:b8:e8:2e:de:6e:9e:55:a4:bd:41:d9:54:
         13:e0:5a:1e:5b:df:4b:21:2c:c0:62:12:12:40:d0:6e:ac:85:
         f7:29:95:c6:6d:56:c2:2f:b3:b9:eb:b5:6c:d0:ba:d9:17:7b:
         23:81:ef:f0:5c:13:01:55:01:da:02:1e:7a:83:63:71:f6:da:
         04:64:53:71:b0:70:53:bd:00:af:19:5a:fb:77:db:38:22:25:
         12:65:5f:ea:bd:3f:2d:11:a8:42:93:87:54:8a:47:ab:b7:8d:
         ce:12:04:83:71:94:e7:da:d0:d4:6c:0c:a2:30:f4:d2:70:8a:
         97:ca:48:bb:f0:b5:b7:cc:de:27:c3:f6:64:da:d8:66:58:f3:
         ec:91:18:87:68:4b:86:5c:d9:88:55:1c:14:b3:a2:9f:95:cb:
         96:06:20:a1:31:7f:f1:0a:93:4d:24:45:c7:79:c9:6c:79:87:
         0d:51:d6:c9:d7:5a:d9:b9:0a:9b:68:84:4c:83:85:ff:4e:ce:
         e4:1f:15:9a:9e:5e:11:6a:8f:7d:2a:a2:3b:f5:2c:7b:06:71:
         51:46:c7:e4
-----BEGIN CERTIFICATE-----
MIIFVjCCBD6gAwIBAgIUXcLdCOLts/aeFim4bt6IUWWOOlAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUVGNzY2RjEwM0IyRUY5OURGOEM3MTk3OEE3RkU1MTlE
NzMwQjE1NTAeFw0yNjAyMjcxMDE2MDVaFw0yNzAyMjYxMDIxMDVaMDMxMTAvBgNV
BAMTKEQ2NkNENjQyNUFCMUE2MTJGOEM5QkEzRjczQzNBQTA5NjIxQTlBQkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3z27tZZMNuEh/B3EJl+NnWaKJ
bjv+yIc1t92ItoSKeaJ7RS0D1VG87fM+KZTPoMa4GXZyecbrl4G1f3ScY8wXbgYH
T35G5Az39vPx0I8t732w86f8UM9ddNKmTT6nqmhL/CIzLs4NEpNN0tkzC9AFGEso
oqXxmlkurc2nD/JIyUTaQYKN7gnd5gYDq+9M3p4cbhGxL+yA/nAa/B3C0soYAjna
N+BnUlufyYwrx1vEg8QiK8k5zhHrGULw/8hIVEg/N8bjL4Ct9hSxU0mc1XAtBqIj
4I9OnDK+TytANhoJcqtmt8vUj2E4JqZC3Vz3QDXJ+92SIhsEC1uV3KDmR3JRAgMB
AAGjggJgMIICXDAdBgNVHQ4EFgQU1mzWQlqxphL4ybo/c8OqCWIamr0wHwYDVR0j
BBgwFoAUrvdm8QOy75nfjHGXin/lGdcwsVUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
MzAzMjdiOWUtMjI3YS00ZWJkLTgyNWItM2I5ODA5NWRjOTI3LTAvMC9BRUY3NjZG
MTAzQjJFRjk5REY4QzcxOTc4QTdGRTUxOUQ3MzBCMTU1LmNybDCBngYIKwYBBQUH
AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1
OTBiOTlhZi80L0FFRjc2NkYxMDNCMkVGOTlERjhDNzE5NzhBN0ZFNTE5RDczMEIx
NTUuY2VyMIGiBggrBgEFBQcBCwSBlTCBkjCBjwYIKwYBBQUHMAuGgYJyc3luYzov
L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby8zMDMyN2I5ZS0yMjdhLTRlYmQtODI1
Yi0zYjk4MDk1ZGM5MjctMC8wLzMxMzYzOTJlMzQzMDJlMzUzNzJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMxMzYzMjM3MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACpKDkwDQYJKoZIhvcN
AQELBQADggEBAExXx6a/5xhjgLi6BldgmC//GxvMP1ZvG6w3lZXTIRog07pmErgW
T7uol7joLt5unlWkvUHZVBPgWh5b30shLMBiEhJA0G6shfcplcZtVsIvs7nrtWzQ
utkXeyOB7/BcEwFVAdoCHnqDY3H22gRkU3GwcFO9AK8ZWvt32zgiJRJlX+q9Py0R
qEKTh1SKR6u3jc4SBINxlOfa0NRsDKIw9NJwipfKSLvwtbfM3ifD9mTa2GZY8+yR
GIdoS4Zc2YhVHBSzop+Vy5YGIKExf/EKk00kRcd5yWx5hw1R1snXWtm5CptohEyD
hf9OzuQfFZqeXhFqj30qojv1LHsGcVFGx+Q=
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:04:02 2026 by rpki-client