Route Origin Authorization

$ rpki-client -vvvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS38136.roa
File:                     AS38136.roa (raw, json)
Hash identifier:          jyFk0cn1vxcyEUnqprB1FP/syLnHDVRLIjrNT4DkVjs=
Subject key identifier:   66:A0:A4:F3:67:E8:1C:AA:0A:41:06:3E:F8:FC:7A:F6:F8:9A:02:48
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       2A0FAEBD2215B8AAEA17DB14EE82C4139EF153DE
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS38136.roa
Signing time:             Mon 02 Nov 2026 06:22:55 +0000
ROA not before:           Mon 02 Nov 2026 06:17:55 +0000
ROA not after:            Mon 01 Nov 2027 06:22:55 +0000
asID:                     38136
IP address blocks:        13.141.78.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 05 Nov 2026 23:32:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:0f:ae:bd:22:15:b8:aa:ea:17:db:14:ee:82:c4:13:9e:f1:53:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: Nov  2 06:17:55 2026 GMT
            Not After : Nov  1 06:22:55 2027 GMT
        Subject: CN=66A0A4F367E81CAA0A41063EF8FC7AF6F89A0248
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:04:0e:ca:47:59:91:9c:e2:78:83:12:1b:8f:
                    60:0b:c0:ce:5b:93:9e:62:68:5b:2d:a8:b3:1a:ad:
                    10:af:8d:7f:55:cc:69:34:24:ab:3f:ea:0c:c9:5c:
                    4c:b0:4f:a7:95:2e:11:5f:67:d8:82:63:3f:53:20:
                    56:ca:de:31:dd:90:0c:97:39:6e:d6:bc:f8:da:07:
                    87:54:86:70:7f:e4:ff:4b:4a:16:1c:6f:86:24:bb:
                    13:b9:95:c2:52:0a:1e:2d:29:f3:15:fd:0c:4a:b0:
                    a5:d8:f9:76:f3:4b:94:79:71:19:51:0a:72:65:01:
                    6b:91:f3:0b:bd:c6:a1:80:c6:2a:fc:8c:5f:e4:b9:
                    d4:ab:97:44:7a:01:ad:2f:a5:73:2f:b5:1c:59:ca:
                    96:a0:ac:c4:b7:9b:d6:de:35:64:4b:06:b8:32:28:
                    3f:13:9d:2c:e8:06:10:a9:26:5d:fa:76:7e:34:a2:
                    be:07:46:39:0b:32:74:dd:0f:d3:d8:e1:46:71:af:
                    9a:7c:75:58:01:55:f1:a7:04:c9:73:40:63:e5:20:
                    1d:5a:1c:00:8e:92:c1:25:96:f6:1d:11:e6:66:eb:
                    18:18:e9:81:a2:07:2c:76:1b:9a:9f:c0:cd:56:04:
                    0b:f7:aa:f5:2c:dc:55:73:55:89:e0:32:65:4c:b5:
                    4a:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:A0:A4:F3:67:E8:1C:AA:0A:41:06:3E:F8:FC:7A:F6:F8:9A:02:48
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS38136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.141.78.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9e:d2:3d:92:34:19:8f:ac:7c:11:b9:9b:a1:0a:bf:34:a3:18:
         96:00:9d:2f:b4:b1:2f:41:cf:a8:dc:90:46:35:30:24:65:f2:
         f5:35:ea:de:a3:e0:a1:5c:c9:6c:fc:76:2a:2d:7b:91:b3:5e:
         31:d0:6f:70:93:f6:51:20:96:d0:00:8e:ed:80:c8:d3:0b:8e:
         a3:4c:57:ef:56:84:da:97:6e:b2:b7:d3:a9:19:d8:55:da:4b:
         75:3f:a0:bc:8c:04:ba:be:d4:56:52:df:63:ed:d0:95:68:ba:
         fc:36:cb:86:c7:c7:de:7f:44:c5:1b:74:69:db:b3:ef:42:f9:
         49:06:07:86:e4:92:61:91:d5:23:d4:e5:de:84:bf:01:42:d4:
         93:e0:ea:24:14:a8:15:12:75:6c:4f:b2:04:7b:27:c4:9c:92:
         af:fc:95:34:a8:b4:2e:0a:47:73:18:fa:9f:be:2f:d8:77:44:
         ab:2b:63:46:f9:3d:74:ea:a1:2d:93:eb:72:fa:71:f8:95:28:
         09:8b:94:cd:ca:9a:4c:95:5a:83:4a:60:e8:c4:ac:8a:64:9c:
         b8:32:af:c2:88:ce:ec:ae:cc:44:6b:27:4d:c1:e1:3c:61:92:
         f6:d4:95:4b:04:43:f0:47:f4:1d:d5:9d:2f:53:ce:32:a1:5b:
         50:77:a3:bd
-----BEGIN CERTIFICATE-----
MIIFJDCCBAygAwIBAgIUKg+uvSIVuKrqF9sU7oLEE57xU94wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUVGNzY2RjEwM0IyRUY5OURGOEM3MTk3OEE3RkU1MTlE
NzMwQjE1NTAeFw0yNjExMDIwNjE3NTVaFw0yNzExMDEwNjIyNTVaMDMxMTAvBgNV
BAMTKDY2QTBBNEYzNjdFODFDQUEwQTQxMDYzRUY4RkM3QUY2Rjg5QTAyNDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuBA7KR1mRnOJ4gxIbj2ALwM5b
k55iaFstqLMarRCvjX9VzGk0JKs/6gzJXEywT6eVLhFfZ9iCYz9TIFbK3jHdkAyX
OW7WvPjaB4dUhnB/5P9LShYcb4YkuxO5lcJSCh4tKfMV/QxKsKXY+XbzS5R5cRlR
CnJlAWuR8wu9xqGAxir8jF/kudSrl0R6Aa0vpXMvtRxZypagrMS3m9beNWRLBrgy
KD8TnSzoBhCpJl36dn40or4HRjkLMnTdD9PY4UZxr5p8dVgBVfGnBMlzQGPlIB1a
HACOksEllvYdEeZm6xgY6YGiByx2G5qfwM1WBAv3qvUs3FVzVYngMmVMtUoHAgMB
AAGjggIuMIICKjAdBgNVHQ4EFgQUZqCk82foHKoKQQY++Px69viaAkgwHwYDVR0j
BBgwFoAUrvdm8QOy75nfjHGXin/lGdcwsVUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
MzAzMjdiOWUtMjI3YS00ZWJkLTgyNWItM2I5ODA5NWRjOTI3LTAvMC9BRUY3NjZG
MTAzQjJFRjk5REY4QzcxOTc4QTdGRTUxOUQ3MzBCMTU1LmNybDCBngYIKwYBBQUH
AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1
OTBiOTlhZi80L0FFRjc2NkYxMDNCMkVGOTlERjhDNzE5NzhBN0ZFNTE5RDczMEIx
NTUuY2VyMHEGCCsGAQUFBwELBGUwYzBhBggrBgEFBQcwC4ZVcnN5bmM6Ly9yLm1h
Z2VsbGFuLmlweG8uY29tL3JlcG8vMzAzMjdiOWUtMjI3YS00ZWJkLTgyNWItM2I5
ODA5NWRjOTI3LTAvMC9BUzM4MTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBDY1OMA0GCSqGSIb3DQEB
CwUAA4IBAQCe0j2SNBmPrHwRuZuhCr80oxiWAJ0vtLEvQc+o3JBGNTAkZfL1Nere
o+ChXMls/HYqLXuRs14x0G9wk/ZRIJbQAI7tgMjTC46jTFfvVoTal26yt9OpGdhV
2kt1P6C8jAS6vtRWUt9j7dCVaLr8NsuGx8fef0TFG3Rp27PvQvlJBgeG5JJhkdUj
1OXehL8BQtST4OokFKgVEnVsT7IEeyfEnJKv/JU0qLQuCkdzGPqfvi/Yd0SrK2NG
+T106qEtk+ty+nH4lSgJi5TNyppMlVqDSmDoxKyKZJy4Mq/CiM7srsxEaydNweE8
YZL21JVLBEPwR/Qd1Z0vU84yoVtQd6O9
-----END CERTIFICATE-----
Generated at Thu Nov 5 11:13:10 2026 by rpki-client