Route Origin Authorization

$ rpki-client -vvvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS400951.roa
File:                     AS400951.roa (raw, json)
Hash identifier:          3esYogBz8RwAevUu8519GU8SxJvG29ZLEfaN4W99VBI=
Subject key identifier:   80:DB:57:85:43:D2:70:CB:B8:BD:F1:F0:63:EC:7B:47:A6:09:D8:C3
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       3EDE5B467C7D9E9AB6B642D5CD9A0F8D5B7944E2
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS400951.roa
Signing time:             Tue 27 Oct 2026 13:48:27 +0000
ROA not before:           Tue 27 Oct 2026 13:43:27 +0000
ROA not after:            Tue 26 Oct 2027 13:48:27 +0000
asID:                     400951
IP address blocks:        13.141.70.0/23 maxlen: 24
                          169.40.124.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 06 Nov 2026 08:45:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:de:5b:46:7c:7d:9e:9a:b6:b6:42:d5:cd:9a:0f:8d:5b:79:44:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: Oct 27 13:43:27 2026 GMT
            Not After : Oct 26 13:48:27 2027 GMT
        Subject: CN=80DB578543D270CBB8BDF1F063EC7B47A609D8C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:58:07:04:ad:81:13:5a:f4:66:75:bf:38:bc:
                    e5:8b:9d:d8:ee:0d:4d:30:03:3b:fd:1c:07:ef:d5:
                    13:ef:fd:e2:74:d9:87:bf:6a:5a:88:91:d6:76:74:
                    1f:70:cd:68:6e:88:55:e4:1e:b8:ce:ef:20:fe:03:
                    49:5c:c5:fb:ee:4c:d1:8f:f2:6f:ee:a3:a7:25:f5:
                    08:29:19:8c:16:e3:56:4d:e7:b8:2e:37:bb:a0:80:
                    4e:14:c7:04:bd:79:83:f3:1d:3d:e1:01:d2:b2:f0:
                    70:83:18:22:b8:e0:f1:38:b2:e8:74:25:15:70:ba:
                    e8:0a:9e:cb:0c:25:c5:d9:22:80:2b:ed:93:e3:40:
                    b6:c8:5d:12:d7:fb:a2:10:5f:ec:47:33:93:ce:a9:
                    31:e9:2e:93:a7:16:18:a4:83:0b:33:59:24:1f:1e:
                    6b:07:3d:48:84:0d:02:40:a7:47:e2:b1:d9:60:d2:
                    74:58:2f:cd:7a:eb:31:ce:24:ec:90:b8:12:0b:80:
                    92:51:fa:f3:4c:83:78:33:7d:e6:c4:6f:21:69:15:
                    88:fb:ec:29:c8:b2:44:0e:6a:59:00:b3:e2:25:6e:
                    f7:24:fd:8f:bb:16:25:56:43:a5:29:7d:02:e3:15:
                    8f:17:f6:df:a4:6c:07:b0:cc:e9:53:07:bc:e9:9a:
                    8a:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:DB:57:85:43:D2:70:CB:B8:BD:F1:F0:63:EC:7B:47:A6:09:D8:C3
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS400951.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.141.70.0/23
                  169.40.124.0/23

    Signature Algorithm: sha256WithRSAEncryption
         69:ae:21:21:16:5b:46:0a:54:84:46:e4:dc:d7:91:44:26:02:
         40:bd:92:d5:d4:ba:2e:22:db:ba:11:23:bb:ba:06:4d:fb:af:
         22:64:5c:a0:46:9a:9b:95:3f:dd:23:eb:a1:17:8e:2e:ca:c1:
         b1:f5:17:bd:ee:b4:c0:76:c5:1e:0c:27:12:20:8e:f9:d9:b1:
         3c:4b:2e:41:8c:05:4b:c3:35:e4:1c:b5:33:68:31:98:e8:6c:
         07:b8:54:32:7e:76:09:e4:90:34:75:4d:fa:57:fd:d3:73:30:
         b6:d4:d9:69:b1:18:66:35:05:ee:49:cf:93:a0:85:8f:d4:ae:
         e9:e0:49:57:c9:21:8b:26:cf:92:ea:74:d5:62:97:d6:e0:cb:
         52:d0:66:f1:ff:56:b8:2d:ae:82:6d:a7:87:6b:d5:9d:77:6b:
         59:8a:f4:5f:e5:fb:bf:a3:36:5c:35:32:48:77:9e:aa:be:01:
         4e:07:de:b1:02:51:6e:a2:52:6c:d8:43:c0:65:9c:bc:00:7c:
         ba:54:05:f7:2a:ac:23:bb:b9:f2:6c:9b:a7:47:04:d7:0c:a4:
         9e:01:20:aa:e8:d5:a3:a5:2c:6c:27:40:96:29:3c:f0:f4:e6:
         79:b0:2e:4f:18:af:7d:9a:af:67:59:1a:ab:5e:db:e1:d0:eb:
         87:7c:74:7c
-----BEGIN CERTIFICATE-----
MIIFKzCCBBOgAwIBAgIUPt5bRnx9npq2tkLVzZoPjVt5ROIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUVGNzY2RjEwM0IyRUY5OURGOEM3MTk3OEE3RkU1MTlE
NzMwQjE1NTAeFw0yNjEwMjcxMzQzMjdaFw0yNzEwMjYxMzQ4MjdaMDMxMTAvBgNV
BAMTKDgwREI1Nzg1NDNEMjcwQ0JCOEJERjFGMDYzRUM3QjQ3QTYwOUQ4QzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHWAcErYETWvRmdb84vOWLndju
DU0wAzv9HAfv1RPv/eJ02Ye/alqIkdZ2dB9wzWhuiFXkHrjO7yD+A0lcxfvuTNGP
8m/uo6cl9QgpGYwW41ZN57guN7uggE4UxwS9eYPzHT3hAdKy8HCDGCK44PE4suh0
JRVwuugKnssMJcXZIoAr7ZPjQLbIXRLX+6IQX+xHM5POqTHpLpOnFhikgwszWSQf
HmsHPUiEDQJAp0fisdlg0nRYL8166zHOJOyQuBILgJJR+vNMg3gzfebEbyFpFYj7
7CnIskQOalkAs+Ilbvck/Y+7FiVWQ6UpfQLjFY8X9t+kbAewzOlTB7zpmopXAgMB
AAGjggI1MIICMTAdBgNVHQ4EFgQUgNtXhUPScMu4vfHwY+x7R6YJ2MMwHwYDVR0j
BBgwFoAUrvdm8QOy75nfjHGXin/lGdcwsVUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
MzAzMjdiOWUtMjI3YS00ZWJkLTgyNWItM2I5ODA5NWRjOTI3LTAvMC9BRUY3NjZG
MTAzQjJFRjk5REY4QzcxOTc4QTdGRTUxOUQ3MzBCMTU1LmNybDCBngYIKwYBBQUH
AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1
OTBiOTlhZi80L0FFRjc2NkYxMDNCMkVGOTlERjhDNzE5NzhBN0ZFNTE5RDczMEIx
NTUuY2VyMHIGCCsGAQUFBwELBGYwZDBiBggrBgEFBQcwC4ZWcnN5bmM6Ly9yLm1h
Z2VsbGFuLmlweG8uY29tL3JlcG8vMzAzMjdiOWUtMjI3YS00ZWJkLTgyNWItM2I5
ODA5NWRjOTI3LTAvMC9BUzQwMDk1MS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAlBggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAQ2NRgMEAakofDANBgkq
hkiG9w0BAQsFAAOCAQEAaa4hIRZbRgpUhEbk3NeRRCYCQL2S1dS6LiLbuhEju7oG
TfuvImRcoEaam5U/3SProReOLsrBsfUXve60wHbFHgwnEiCO+dmxPEsuQYwFS8M1
5By1M2gxmOhsB7hUMn52CeSQNHVN+lf903MwttTZabEYZjUF7knPk6CFj9Su6eBJ
V8khiybPkup01WKX1uDLUtBm8f9WuC2ugm2nh2vVnXdrWYr0X+X7v6M2XDUySHee
qr4BTgfesQJRbqJSbNhDwGWcvAB8ulQF9yqsI7u58mybp0cE1wykngEgqujVo6Us
bCdAlik88PTmebAuTxivfZqvZ1kaq17b4dDrh3x0fA==
-----END CERTIFICATE-----
Generated at Thu Nov 5 19:06:54 2026 by rpki-client