Route Origin Authorization

$ rpki-client -vvvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS199779.roa
File:                     AS199779.roa (raw, json)
Hash identifier:          YoSFzGRGXU8ImyJ2GN08nuydWN+e+uGvHV0F3j1N8Vg=
Subject key identifier:   0E:F9:0A:2E:AD:83:5A:8F:AD:8B:DE:2B:84:BB:E7:0F:A6:B8:CB:EE
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       02A8B7A08FA04F18A8CDDB2A99B63A1D8276041A
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS199779.roa
Signing time:             Fri 30 Oct 2026 05:55:42 +0000
ROA not before:           Fri 30 Oct 2026 05:50:42 +0000
ROA not after:            Fri 29 Oct 2027 05:55:42 +0000
asID:                     199779
IP address blocks:        169.40.150.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 06 Nov 2026 08:45:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:a8:b7:a0:8f:a0:4f:18:a8:cd:db:2a:99:b6:3a:1d:82:76:04:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: Oct 30 05:50:42 2026 GMT
            Not After : Oct 29 05:55:42 2027 GMT
        Subject: CN=0EF90A2EAD835A8FAD8BDE2B84BBE70FA6B8CBEE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:10:5f:13:d4:56:8b:84:ee:fa:4e:68:14:89:
                    81:9f:e1:85:aa:e2:b1:99:c0:50:97:1b:4b:43:a9:
                    7c:d4:7d:2a:4b:79:95:9b:09:b2:31:d6:10:d4:3a:
                    6f:ae:05:47:94:34:ba:08:b6:29:6d:6a:c7:3c:74:
                    79:36:de:07:2f:b5:5e:13:be:62:da:aa:52:24:10:
                    17:b9:d7:93:4f:a5:6f:b0:9e:84:04:bc:76:e9:b2:
                    cc:89:32:d2:ef:69:e8:33:d4:55:4c:ce:5a:6f:04:
                    98:49:10:2e:a9:a1:da:b5:ce:74:2d:81:0e:3c:29:
                    17:4f:61:dc:35:ea:84:4a:fd:5e:4d:18:0a:f3:2c:
                    a6:ac:d1:81:c5:ea:2a:2d:2a:3c:8d:e1:83:ca:c6:
                    82:45:f1:9f:13:8f:e2:cd:68:60:11:de:89:10:bc:
                    bd:c7:e1:c7:cf:49:fe:49:3b:cc:6b:8e:d4:75:97:
                    2d:bc:c3:ee:46:af:1d:ef:44:09:7e:4b:1c:23:8d:
                    cb:6a:be:9c:d4:d8:ca:46:d6:38:2b:a9:d8:28:f1:
                    8d:3d:dc:db:bf:80:23:a7:90:c8:35:ad:5b:e8:93:
                    32:26:b3:6b:77:19:56:a8:0d:9b:bd:3a:4a:02:a1:
                    5e:c7:1d:33:98:11:d3:51:66:4c:54:d8:02:47:3f:
                    4b:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:F9:0A:2E:AD:83:5A:8F:AD:8B:DE:2B:84:BB:E7:0F:A6:B8:CB:EE
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS199779.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.40.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:8b:f0:d2:53:05:ca:64:a3:55:28:97:fd:e8:83:eb:88:b1:
         35:db:f3:84:83:c2:c8:dd:85:ab:a0:13:d0:c3:97:78:07:23:
         1b:49:87:60:8a:4b:c2:fe:29:53:cc:61:72:41:1a:e9:bf:a7:
         58:be:f6:19:38:89:36:b0:9c:bc:fc:a8:87:58:25:ef:72:cf:
         9a:68:d6:dd:8b:31:7c:b8:52:34:48:25:f2:25:5a:4d:89:07:
         42:e2:c8:39:ce:b9:0b:21:65:79:e9:fe:db:0b:1f:10:2f:92:
         55:4b:c3:3d:50:11:c1:21:12:f0:76:d6:b7:b7:1a:e4:86:0e:
         8a:6a:b6:cd:88:00:f6:35:ec:03:f4:bb:fa:23:e4:04:6f:4e:
         0d:55:48:a8:9d:10:bf:5f:79:33:e3:64:3b:82:30:4e:0a:38:
         e9:f4:7a:c5:51:a0:20:f7:9e:2e:4f:0f:28:5f:13:ab:7c:e5:
         64:cf:71:97:94:0d:16:93:a6:87:1c:0b:4c:cb:13:71:07:b1:
         e6:1a:42:c3:57:77:65:ce:9d:16:49:33:70:1b:41:bd:3f:c2:
         be:45:cb:78:28:89:c6:11:fc:79:dc:44:ba:8a:89:a2:65:33:
         b5:ca:ca:ee:9f:b2:3e:38:2d:b2:4a:a6:b0:aa:da:61:be:30:
         dc:78:6d:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 19:06:59 2026 by rpki-client