Route Origin Authorization

$ rpki-client -vvvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS198969.roa
File:                     AS198969.roa (raw, json)
Hash identifier:          ZwojrHVgJQE80czobSY5+XvfL2fG9BWImDOSUqdbDJY=
Subject key identifier:   FC:59:EB:C5:A8:5C:18:52:5E:07:6B:F9:96:BC:55:4D:EA:CC:50:A4
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       6924DF54D2BF818F4BD6F84CE86D0E90DE2993F4
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS198969.roa
Signing time:             Mon 26 Oct 2026 15:02:51 +0000
ROA not before:           Mon 26 Oct 2026 14:57:51 +0000
ROA not after:            Mon 25 Oct 2027 15:02:51 +0000
asID:                     198969
IP address blocks:        13.141.3.0/24 maxlen: 24
                          13.141.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 05 Nov 2026 23:32:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:24:df:54:d2:bf:81:8f:4b:d6:f8:4c:e8:6d:0e:90:de:29:93:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: Oct 26 14:57:51 2026 GMT
            Not After : Oct 25 15:02:51 2027 GMT
        Subject: CN=FC59EBC5A85C18525E076BF996BC554DEACC50A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:29:54:05:08:66:8a:26:12:91:e0:ec:05:cb:
                    3c:71:82:b1:e5:ae:f4:44:31:4f:15:b0:c3:eb:5e:
                    43:a8:c5:06:a4:bd:9e:20:05:57:7c:4d:9b:1d:17:
                    bc:0b:af:21:e8:72:bd:e7:74:c5:0d:df:bb:5d:f2:
                    a3:a0:b2:53:f1:69:56:dd:6d:d8:c6:1c:33:f0:2e:
                    09:08:f4:54:9b:4e:c6:e5:b2:38:7a:ff:5f:fa:f3:
                    12:00:fc:3d:08:81:12:d6:a0:7e:56:12:b4:fe:84:
                    bd:b5:aa:af:22:e3:83:a9:83:a9:63:8d:fb:fa:77:
                    7d:bd:27:7d:04:b6:64:c0:38:45:2c:c7:4e:96:4d:
                    3d:77:78:22:7e:f7:79:d7:e7:55:af:47:b5:ba:a1:
                    29:4c:d5:93:de:43:c8:2b:57:a0:57:36:8d:ae:4d:
                    e1:9b:4b:6e:33:8c:0d:26:46:05:0f:35:76:3c:c1:
                    1b:52:66:d7:f9:5b:d5:c0:23:0f:9e:f9:29:19:f0:
                    f1:63:01:47:a7:27:f2:13:76:30:c3:44:c2:90:f5:
                    4f:b4:2c:e4:76:6d:5e:ca:cf:45:c8:27:3f:b3:c3:
                    fe:78:81:ad:ce:f6:9c:dd:0e:50:a8:4a:60:e0:0c:
                    db:dc:82:ed:b1:f3:ab:0d:c0:d0:7a:76:17:b6:b3:
                    c6:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:59:EB:C5:A8:5C:18:52:5E:07:6B:F9:96:BC:55:4D:EA:CC:50:A4
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS198969.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.141.3.0/24
                  13.141.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:57:7b:e9:76:26:19:58:f9:a6:8a:9e:2c:c5:da:9f:28:c0:
         66:ba:fe:4e:3c:0c:29:68:48:a2:19:f3:85:23:9f:b3:7d:07:
         52:63:3b:bd:76:6d:1e:f7:dc:a2:00:c9:0a:db:4f:ba:24:b1:
         43:0e:90:2f:f7:68:20:ea:b9:4d:ff:49:5b:4c:28:0a:69:15:
         0f:6d:b2:24:5e:90:78:0d:9d:ae:e8:ea:d5:91:ab:58:05:63:
         b9:6e:c0:44:de:11:0d:dc:11:b7:35:ef:38:08:2a:5f:3c:e0:
         29:08:ae:03:d1:d4:ce:b4:28:be:bb:57:1e:14:3f:49:28:5f:
         d4:62:4b:78:b0:c7:35:84:6e:e9:41:b9:c0:ca:c2:dc:95:c0:
         4e:23:09:17:0c:fb:f0:98:82:aa:e6:0f:92:f0:d1:75:f0:18:
         61:f0:94:d8:7b:e2:ec:4f:7c:be:82:19:cd:42:31:e4:44:dd:
         9c:04:8e:f7:da:35:74:0c:2c:d2:d5:ff:35:d5:4b:e1:f0:7a:
         db:6e:09:41:d0:e4:96:d1:bf:c1:d3:b2:e1:9c:03:b5:fc:74:
         e9:4d:8c:54:98:a3:bd:43:be:8b:20:52:dd:ba:ec:3e:10:ee:
         2a:97:be:87:ed:ab:67:7f:5c:83:ae:54:c8:ff:5a:05:0b:a2:
         01:6a:5b:dc
-----BEGIN CERTIFICATE-----
MIIFKzCCBBOgAwIBAgIUaSTfVNK/gY9L1vhM6G0OkN4pk/QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUVGNzY2RjEwM0IyRUY5OURGOEM3MTk3OEE3RkU1MTlE
NzMwQjE1NTAeFw0yNjEwMjYxNDU3NTFaFw0yNzEwMjUxNTAyNTFaMDMxMTAvBgNV
BAMTKEZDNTlFQkM1QTg1QzE4NTI1RTA3NkJGOTk2QkM1NTRERUFDQzUwQTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkKVQFCGaKJhKR4OwFyzxxgrHl
rvREMU8VsMPrXkOoxQakvZ4gBVd8TZsdF7wLryHocr3ndMUN37td8qOgslPxaVbd
bdjGHDPwLgkI9FSbTsblsjh6/1/68xIA/D0IgRLWoH5WErT+hL21qq8i44Opg6lj
jfv6d329J30EtmTAOEUsx06WTT13eCJ+93nX51WvR7W6oSlM1ZPeQ8grV6BXNo2u
TeGbS24zjA0mRgUPNXY8wRtSZtf5W9XAIw+e+SkZ8PFjAUenJ/ITdjDDRMKQ9U+0
LOR2bV7Kz0XIJz+zw/54ga3O9pzdDlCoSmDgDNvcgu2x86sNwNB6dhe2s8ZDAgMB
AAGjggI1MIICMTAdBgNVHQ4EFgQU/FnrxahcGFJeB2v5lrxVTerMUKQwHwYDVR0j
BBgwFoAUrvdm8QOy75nfjHGXin/lGdcwsVUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
MzAzMjdiOWUtMjI3YS00ZWJkLTgyNWItM2I5ODA5NWRjOTI3LTAvMC9BRUY3NjZG
MTAzQjJFRjk5REY4QzcxOTc4QTdGRTUxOUQ3MzBCMTU1LmNybDCBngYIKwYBBQUH
AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1
OTBiOTlhZi80L0FFRjc2NkYxMDNCMkVGOTlERjhDNzE5NzhBN0ZFNTE5RDczMEIx
NTUuY2VyMHIGCCsGAQUFBwELBGYwZDBiBggrBgEFBQcwC4ZWcnN5bmM6Ly9yLm1h
Z2VsbGFuLmlweG8uY29tL3JlcG8vMzAzMjdiOWUtMjI3YS00ZWJkLTgyNWItM2I5
ODA5NWRjOTI3LTAvMC9BUzE5ODk2OS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAlBggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAA2NAwMEAA2NODANBgkq
hkiG9w0BAQsFAAOCAQEAd1d76XYmGVj5poqeLMXanyjAZrr+TjwMKWhIohnzhSOf
s30HUmM7vXZtHvfcogDJCttPuiSxQw6QL/doIOq5Tf9JW0woCmkVD22yJF6QeA2d
rujq1ZGrWAVjuW7ARN4RDdwRtzXvOAgqXzzgKQiuA9HUzrQovrtXHhQ/SShf1GJL
eLDHNYRu6UG5wMrC3JXATiMJFwz78JiCquYPkvDRdfAYYfCU2Hvi7E98voIZzUIx
5ETdnASO99o1dAws0tX/NdVL4fB6224JQdDkltG/wdOy4ZwDtfx06U2MVJijvUO+
iyBS3brsPhDuKpe+h+2rZ39cg65UyP9aBQuiAWpb3A==
-----END CERTIFICATE-----
Generated at Thu Nov 5 16:50:21 2026 by rpki-client