Route Origin Authorization

$ rpki-client -vvvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS12083.roa
File:                     AS12083.roa (raw, json)
Hash identifier:          fy6yHIiu8OM1lgXV9BfoGXHi6gtSomTzsPsKxmPEGr0=
Subject key identifier:   FA:2F:3A:14:3F:3E:4E:B8:6C:DF:A8:D5:5C:31:B6:2A:CB:FA:98:22
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       4F201EF4DED75D24FC13E4ECE20E18AD7BC7F919
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS12083.roa
Signing time:             Thu 17 Sep 2026 00:04:43 +0000
ROA not before:           Wed 16 Sep 2026 23:59:43 +0000
ROA not after:            Thu 16 Sep 2027 00:04:43 +0000
asID:                     12083
IP address blocks:        13.141.0.0/20 maxlen: 24
                          13.141.16.0/22 maxlen: 24
                          13.141.40.0/22 maxlen: 24
                          169.40.144.0/24 maxlen: 24
                          169.40.145.0/24 maxlen: 24
                          169.40.184.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 14:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:20:1e:f4:de:d7:5d:24:fc:13:e4:ec:e2:0e:18:ad:7b:c7:f9:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: Sep 16 23:59:43 2026 GMT
            Not After : Sep 16 00:04:43 2027 GMT
        Subject: CN=FA2F3A143F3E4EB86CDFA8D55C31B62ACBFA9822
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:6d:dc:19:b2:ca:f4:59:46:fd:3b:60:30:6c:
                    66:e6:f5:62:54:9a:ee:c8:74:7a:d9:3d:e6:b8:e2:
                    f1:fc:07:22:2e:c5:3c:89:e8:35:47:7c:9e:24:ce:
                    4a:c0:fe:f7:4c:80:65:d9:28:2c:87:76:ba:3e:1d:
                    0a:b6:a4:d9:30:67:3d:2e:70:49:a6:70:6d:82:4f:
                    ac:80:09:ef:7c:59:2d:7b:15:a3:70:60:bf:84:53:
                    f6:ce:24:d0:c9:80:fc:39:3e:8f:14:f6:78:a5:d7:
                    6b:d1:58:f7:f5:96:6c:2c:d3:bd:a7:63:80:d5:0a:
                    00:7e:52:f5:12:3e:85:4c:a6:3b:f4:c7:8a:e1:ff:
                    21:47:b9:79:d1:6c:7c:ff:b6:c7:9a:cf:2d:46:18:
                    ce:38:5b:e0:62:d1:fa:a0:e9:3f:0a:1c:4c:32:2a:
                    fb:74:b9:cb:26:06:86:99:1f:57:5c:fd:4a:27:47:
                    8a:81:6e:5d:07:6e:82:9f:ff:dd:62:28:81:04:b3:
                    08:d1:66:05:e7:a1:7b:7a:da:ca:32:98:0e:cd:2f:
                    ad:59:05:59:41:77:22:a4:3e:c3:c2:e0:4d:22:3f:
                    05:7d:bc:60:88:99:bc:49:35:9c:d0:da:44:fe:70:
                    be:f0:1b:ef:2f:07:65:c5:a9:a7:31:96:3c:5e:06:
                    85:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:2F:3A:14:3F:3E:4E:B8:6C:DF:A8:D5:5C:31:B6:2A:CB:FA:98:22
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS12083.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.141.0.0-13.141.19.255
                  13.141.40.0/22
                  169.40.144.0/23
                  169.40.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         37:2b:0d:f2:3d:27:97:44:1c:cb:e1:b9:3b:f0:03:b9:8b:e2:
         8b:dd:92:43:6e:11:f9:7e:37:51:e3:cd:e2:ad:5f:8d:a4:35:
         0b:b7:27:5e:26:7c:d4:b7:da:52:6e:1d:d2:c3:a3:56:32:47:
         e4:48:ef:73:bf:2e:0a:52:6f:7b:fa:fd:86:d8:21:5c:ec:72:
         40:7e:59:b3:98:bf:32:ba:3b:26:19:ae:80:64:b9:f3:81:67:
         f3:f4:53:3c:0a:e0:a1:c5:f2:20:3d:55:c2:14:fa:08:6a:a6:
         e6:82:b7:9f:fa:05:b3:6a:65:e6:ec:7d:e4:18:f6:c4:43:d8:
         c8:9e:e2:86:ee:99:db:58:9f:f0:9f:e1:ed:b0:9d:e5:f7:7a:
         68:44:83:6c:f4:b0:19:16:66:38:3d:c0:07:eb:85:1c:7a:cd:
         01:b2:9f:05:7c:7a:5f:1c:4f:f3:fc:79:ac:2d:d6:d8:9f:ec:
         18:44:c8:67:b5:17:35:74:78:a0:d3:f0:5d:af:10:a7:44:c5:
         e2:34:a1:a9:43:4b:35:99:59:67:3e:f1:8c:b0:b5:09:34:bc:
         86:6d:4d:eb:b1:1d:53:54:04:a6:ca:ee:1c:b0:ab:08:ae:f1:
         0c:a9:c4:2d:76:11:a4:32:00:3e:76:45:72:30:6c:c4:b3:cb:
         9c:99:87:29
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUTyAe9N7XXST8E+Ts4g4YrXvH+RkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUVGNzY2RjEwM0IyRUY5OURGOEM3MTk3OEE3RkU1MTlE
NzMwQjE1NTAeFw0yNjA5MTYyMzU5NDNaFw0yNzA5MTYwMDA0NDNaMDMxMTAvBgNV
BAMTKEZBMkYzQTE0M0YzRTRFQjg2Q0RGQThENTVDMzFCNjJBQ0JGQTk4MjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMbdwZssr0WUb9O2AwbGbm9WJU
mu7IdHrZPea44vH8ByIuxTyJ6DVHfJ4kzkrA/vdMgGXZKCyHdro+HQq2pNkwZz0u
cEmmcG2CT6yACe98WS17FaNwYL+EU/bOJNDJgPw5Po8U9nil12vRWPf1lmws072n
Y4DVCgB+UvUSPoVMpjv0x4rh/yFHuXnRbHz/tseazy1GGM44W+Bi0fqg6T8KHEwy
Kvt0ucsmBoaZH1dc/UonR4qBbl0HboKf/91iKIEEswjRZgXnoXt62soymA7NL61Z
BVlBdyKkPsPC4E0iPwV9vGCImbxJNZzQ2kT+cL7wG+8vB2XFqacxljxeBoUTAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQU+i86FD8+Trhs36jVXDG2Ksv6mCIwHwYDVR0j
BBgwFoAUrvdm8QOy75nfjHGXin/lGdcwsVUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
MzAzMjdiOWUtMjI3YS00ZWJkLTgyNWItM2I5ODA5NWRjOTI3LTAvMC9BRUY3NjZG
MTAzQjJFRjk5REY4QzcxOTc4QTdGRTUxOUQ3MzBCMTU1LmNybDCBngYIKwYBBQUH
AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1
OTBiOTlhZi80L0FFRjc2NkYxMDNCMkVGOTlERjhDNzE5NzhBN0ZFNTE5RDczMEIx
NTUuY2VyMHEGCCsGAQUFBwELBGUwYzBhBggrBgEFBQcwC4ZVcnN5bmM6Ly9yLm1h
Z2VsbGFuLmlweG8uY29tL3JlcG8vMzAzMjdiOWUtMjI3YS00ZWJkLTgyNWItM2I5
ODA5NWRjOTI3LTAvMC9BUzEyMDgzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMDgGCCsGAQUFBwEHAQH/BCkwJzAlBAIAATAfMAsDAwANjQMEAg2NEAMEAg2N
KAMEAakokAMEAqkouDANBgkqhkiG9w0BAQsFAAOCAQEANysN8j0nl0Qcy+G5O/AD
uYvii92SQ24R+X43UePN4q1fjaQ1C7cnXiZ81LfaUm4d0sOjVjJH5Ejvc78uClJv
e/r9htghXOxyQH5Zs5i/Mro7JhmugGS584Fn8/RTPArgocXyID1VwhT6CGqm5oK3
n/oFs2pl5ux95Bj2xEPYyJ7ihu6Z21if8J/h7bCd5fd6aESDbPSwGRZmOD3AB+uF
HHrNAbKfBXx6XxxP8/x5rC3W2J/sGETIZ7UXNXR4oNPwXa8Qp0TF4jShqUNLNZlZ
Zz7xjLC1CTS8hm1N67EdU1QEpsruHLCrCK7xDKnELXYRpDIAPnZFcjBsxLPLnJmH
KQ==
-----END CERTIFICATE-----
Generated at Sun Sep 20 21:50:51 2026 by rpki-client