Route Origin Authorization

$ rpki-client -vvvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS16509.roa
File:                     AS16509.roa (raw, json)
Hash identifier:          i5YNtPHiQW1LgvPVx5wNr1b4/VUjKctoCBDXiVba3sY=
Subject key identifier:   79:3B:FB:51:3A:41:40:41:9B:FA:E8:26:8D:7A:B7:F2:A1:8B:4A:BC
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       0646697ADF58D967F56E056F40A6C548D79F25FB
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS16509.roa
Signing time:             Thu 15 Oct 2026 04:21:49 +0000
ROA not before:           Thu 15 Oct 2026 04:16:49 +0000
ROA not after:            Thu 14 Oct 2027 04:21:49 +0000
asID:                     16509
IP address blocks:        13.141.40.0/23 maxlen: 24
                          13.141.66.0/23 maxlen: 24
                          13.141.124.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 05 Nov 2026 17:37:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:46:69:7a:df:58:d9:67:f5:6e:05:6f:40:a6:c5:48:d7:9f:25:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: Oct 15 04:16:49 2026 GMT
            Not After : Oct 14 04:21:49 2027 GMT
        Subject: CN=793BFB513A4140419BFAE8268D7AB7F2A18B4ABC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:26:85:3d:05:24:fe:d3:31:18:ad:24:31:41:
                    4f:2a:7c:8e:5d:23:b7:3b:9e:1e:6f:a5:b7:1a:cf:
                    ec:c6:73:a3:fe:37:21:3a:e3:9f:0e:bf:7f:3d:26:
                    86:df:ec:d3:f0:7c:50:d0:f1:71:bf:6b:51:48:79:
                    71:0a:1d:89:8b:87:d3:66:a1:d0:df:47:64:68:84:
                    b4:f3:11:43:86:33:9f:dc:a2:39:84:af:d5:1a:5d:
                    50:f5:8b:4e:0e:e4:ce:9a:bd:5f:48:a0:af:df:64:
                    78:78:81:51:ae:b3:c7:9d:fd:54:81:60:b4:bb:75:
                    f2:46:eb:05:f6:68:94:fc:bb:00:66:76:b9:f0:6c:
                    d4:a0:68:c7:5c:7d:35:56:c8:29:43:16:a0:2b:c1:
                    fb:6e:6e:63:38:66:a8:aa:d0:ef:c6:2d:a1:bd:5e:
                    87:6b:75:6e:7e:6e:1e:be:30:a6:06:b8:e4:33:49:
                    ad:15:e3:55:58:0b:bd:82:cb:ff:ad:6c:53:f4:bd:
                    a2:c7:59:49:4e:fb:f1:73:a2:3d:72:47:fa:96:f1:
                    85:b1:37:ec:8c:1d:a2:66:0b:99:7b:1d:39:07:7a:
                    8b:08:11:92:b1:cf:e1:0d:da:1c:ae:4b:c4:f1:1b:
                    a8:1d:b5:62:e6:d2:4f:3f:ac:8e:f4:fc:a2:57:9f:
                    0b:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:3B:FB:51:3A:41:40:41:9B:FA:E8:26:8D:7A:B7:F2:A1:8B:4A:BC
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS16509.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.141.40.0/23
                  13.141.66.0/23
                  13.141.124.0/23

    Signature Algorithm: sha256WithRSAEncryption
         50:6c:23:f3:f1:ba:6b:2d:2e:97:7f:3f:44:f3:d0:f5:cc:91:
         d4:45:01:20:d1:12:8b:80:04:2a:72:cd:26:3e:8c:f2:e0:0f:
         94:70:ae:68:b1:95:57:23:14:83:15:62:65:ba:a9:66:e9:be:
         85:1c:c7:fa:38:f3:e6:74:33:16:0c:fb:02:d9:a7:af:1c:63:
         e5:9d:ef:4a:aa:29:7d:ea:e7:5d:75:28:0e:92:e9:6b:a7:c5:
         ba:c4:4b:9d:56:46:81:46:3c:f6:7d:8b:77:2e:fd:e5:de:b8:
         cd:42:bd:7c:fc:dc:15:78:42:85:95:bf:e0:1f:c3:5d:b0:f6:
         ff:4d:07:84:b4:9f:43:fa:45:a7:98:2d:c6:3e:0b:d7:0a:38:
         37:86:46:26:89:f5:24:66:a7:8b:9f:e9:e6:52:26:29:8b:95:
         70:be:93:fa:e2:32:d5:3d:41:ea:a4:7b:4f:d1:95:a9:0c:80:
         a8:02:7c:f4:b8:b4:a5:c1:7a:4e:8f:90:79:43:c8:7d:6a:71:
         db:3b:3e:69:77:5c:11:5d:c4:c7:03:16:1c:32:b4:cb:9f:ce:
         0e:2e:be:2b:09:da:8a:ee:d0:70:2c:3d:24:58:b5:c6:55:bf:
         be:a0:02:d6:44:8f:90:e9:ab:a3:54:3e:a4:b0:de:60:10:c4:
         03:f0:4e:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 03:36:03 2026 by rpki-client