Route Origin Authorization

$ rpki-client -vvvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS152460.roa
File:                     AS152460.roa (raw, json)
Hash identifier:          9VkL6sRteMozJkyE/LfPTh+2gVDj6UYtsAAp8ZaEksk=
Subject key identifier:   7B:78:58:4A:7B:A6:6F:ED:55:36:1D:2D:8A:25:91:E9:A2:EF:32:42
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       1C14A61245AC5267EDEBE8B17AF9E0C245CF9915
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS152460.roa
Signing time:             Mon 21 Sep 2026 15:38:42 +0000
ROA not before:           Mon 21 Sep 2026 15:33:42 +0000
ROA not after:            Mon 20 Sep 2027 15:38:42 +0000
asID:                     152460
IP address blocks:        169.40.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:46:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:14:a6:12:45:ac:52:67:ed:eb:e8:b1:7a:f9:e0:c2:45:cf:99:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: Sep 21 15:33:42 2026 GMT
            Not After : Sep 20 15:38:42 2027 GMT
        Subject: CN=7B78584A7BA66FED55361D2D8A2591E9A2EF3242
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:0c:82:62:10:4c:87:db:f8:f7:50:f7:3c:d2:
                    50:cc:9d:0d:b0:52:7a:20:d0:71:86:ca:ea:52:36:
                    3f:cd:5c:fd:f3:4c:23:48:9e:47:82:73:26:98:ab:
                    65:7d:b8:10:2a:08:28:37:b0:b8:eb:44:18:ad:a6:
                    dc:27:61:94:82:4b:5c:b9:2b:f1:c8:43:7e:00:72:
                    e2:88:4a:8c:c8:7e:8a:da:98:0d:53:3a:e4:2d:64:
                    64:94:11:f6:56:96:f8:94:dc:15:f7:6e:21:3b:83:
                    54:5e:d6:bb:03:73:0b:83:ae:d8:f5:5e:12:d3:f3:
                    07:d3:90:f0:a6:69:ca:77:fd:aa:f5:a4:e8:4e:f3:
                    cb:57:ac:83:28:c3:f3:3d:c6:f9:00:aa:ca:38:39:
                    8a:a9:fc:dd:76:f4:34:d4:71:8c:98:35:74:97:ba:
                    8f:01:0d:2f:aa:7f:bf:aa:f9:8f:9f:d5:e9:fa:fd:
                    5e:f7:ad:ec:51:08:75:33:cf:3a:af:a0:9c:ac:b9:
                    50:f4:02:24:34:da:ea:77:16:1f:d2:ee:cc:fd:43:
                    83:cf:c4:d6:83:48:58:8b:29:1e:5e:c3:a2:dd:48:
                    bf:b0:b6:ef:21:6a:15:ec:d9:e6:ac:8a:bb:62:6e:
                    e4:36:72:04:25:17:df:8a:7c:2d:d7:7f:60:c0:b3:
                    35:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:78:58:4A:7B:A6:6F:ED:55:36:1D:2D:8A:25:91:E9:A2:EF:32:42
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS152460.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.40.36.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ab:b2:c9:b6:1b:25:51:97:53:bb:54:70:16:06:c9:a0:4c:57:
         f5:31:4d:af:7f:9a:e7:9e:0d:02:fe:a0:ba:aa:fa:c2:a5:13:
         ef:35:04:17:56:ee:6f:57:ea:d0:86:58:8b:7c:dd:a6:b5:69:
         02:ac:96:81:90:1a:61:69:eb:15:a5:5a:9c:72:f7:cb:17:4d:
         bd:f4:30:ba:a6:e2:6f:43:16:df:79:ae:fd:46:5d:87:84:73:
         7f:c7:a4:a0:3e:3c:24:85:c8:1f:a2:6a:3b:22:7c:9a:46:6f:
         21:49:56:49:05:5f:33:82:f6:fc:65:71:19:3e:27:dc:b8:8d:
         13:0c:4f:68:14:08:88:e3:11:eb:41:7c:01:57:b6:7c:23:2f:
         72:fb:ff:90:55:d4:f0:b9:6b:88:97:80:72:59:cf:bf:61:c4:
         81:34:d9:ef:fa:aa:9a:b1:47:4a:5a:f8:fd:95:03:ad:14:b9:
         cc:10:c4:f5:7a:aa:bc:26:8a:b7:f4:e5:76:ed:ef:cc:f3:a5:
         36:1e:b3:0d:33:f0:1d:5e:d3:06:c4:ea:3f:34:43:46:e7:79:
         2c:f4:fd:e2:33:fa:db:1f:9b:c8:78:50:c9:63:43:a9:74:7e:
         3d:dc:6f:f9:a6:22:36:2f:9a:44:98:04:f2:85:3c:af:f4:c8:
         34:92:a5:bb
-----BEGIN CERTIFICATE-----
MIIFJTCCBA2gAwIBAgIUHBSmEkWsUmft6+ixevngwkXPmRUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUVGNzY2RjEwM0IyRUY5OURGOEM3MTk3OEE3RkU1MTlE
NzMwQjE1NTAeFw0yNjA5MjExNTMzNDJaFw0yNzA5MjAxNTM4NDJaMDMxMTAvBgNV
BAMTKDdCNzg1ODRBN0JBNjZGRUQ1NTM2MUQyRDhBMjU5MUU5QTJFRjMyNDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBDIJiEEyH2/j3UPc80lDMnQ2w
Unog0HGGyupSNj/NXP3zTCNInkeCcyaYq2V9uBAqCCg3sLjrRBitptwnYZSCS1y5
K/HIQ34AcuKISozIforamA1TOuQtZGSUEfZWlviU3BX3biE7g1Re1rsDcwuDrtj1
XhLT8wfTkPCmacp3/ar1pOhO88tXrIMow/M9xvkAqso4OYqp/N129DTUcYyYNXSX
uo8BDS+qf7+q+Y+f1en6/V73rexRCHUzzzqvoJysuVD0AiQ02up3Fh/S7sz9Q4PP
xNaDSFiLKR5ew6LdSL+wtu8hahXs2easirtibuQ2cgQlF9+KfC3Xf2DAszX1AgMB
AAGjggIvMIICKzAdBgNVHQ4EFgQUe3hYSnumb+1VNh0tiiWR6aLvMkIwHwYDVR0j
BBgwFoAUrvdm8QOy75nfjHGXin/lGdcwsVUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
MzAzMjdiOWUtMjI3YS00ZWJkLTgyNWItM2I5ODA5NWRjOTI3LTAvMC9BRUY3NjZG
MTAzQjJFRjk5REY4QzcxOTc4QTdGRTUxOUQ3MzBCMTU1LmNybDCBngYIKwYBBQUH
AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1
OTBiOTlhZi80L0FFRjc2NkYxMDNCMkVGOTlERjhDNzE5NzhBN0ZFNTE5RDczMEIx
NTUuY2VyMHIGCCsGAQUFBwELBGYwZDBiBggrBgEFBQcwC4ZWcnN5bmM6Ly9yLm1h
Z2VsbGFuLmlweG8uY29tL3JlcG8vMzAzMjdiOWUtMjI3YS00ZWJkLTgyNWItM2I5
ODA5NWRjOTI3LTAvMC9BUzE1MjQ2MC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKkoJDANBgkqhkiG9w0B
AQsFAAOCAQEAq7LJthslUZdTu1RwFgbJoExX9TFNr3+a554NAv6guqr6wqUT7zUE
F1bub1fq0IZYi3zdprVpAqyWgZAaYWnrFaVanHL3yxdNvfQwuqbib0MW33mu/UZd
h4Rzf8ekoD48JIXIH6JqOyJ8mkZvIUlWSQVfM4L2/GVxGT4n3LiNEwxPaBQIiOMR
60F8AVe2fCMvcvv/kFXU8LlriJeAclnPv2HEgTTZ7/qqmrFHSlr4/ZUDrRS5zBDE
9XqqvCaKt/Tldu3vzPOlNh6zDTPwHV7TBsTqPzRDRud5LPT94jP62x+byHhQyWND
qXR+Pdxv+aYiNi+aRJgE8oU8r/TINJKluw==
-----END CERTIFICATE-----
Generated at Tue Sep 22 04:30:39 2026 by rpki-client