Route Origin Authorization

$ rpki-client -vvvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS401776.roa
File:                     AS401776.roa (raw, json)
Hash identifier:          LUUo3q890loTKEVvmT3JN40QXCMqQ4lgWuSHu4c5uk0=
Subject key identifier:   AC:5F:9E:41:C2:9E:AD:BB:93:8C:60:A4:39:73:24:EC:3F:57:8A:A7
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       5E4FD90FF2F3CF2D2F73CDFFDAA058159D7B5B07
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS401776.roa
Signing time:             Fri 30 Oct 2026 09:21:44 +0000
ROA not before:           Fri 30 Oct 2026 09:16:44 +0000
ROA not after:            Fri 29 Oct 2027 09:21:44 +0000
asID:                     401776
IP address blocks:        13.141.73.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 05 Nov 2026 23:32:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:4f:d9:0f:f2:f3:cf:2d:2f:73:cd:ff:da:a0:58:15:9d:7b:5b:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: Oct 30 09:16:44 2026 GMT
            Not After : Oct 29 09:21:44 2027 GMT
        Subject: CN=AC5F9E41C29EADBB938C60A4397324EC3F578AA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:3e:de:ff:f3:7c:16:44:41:71:ab:ec:06:0a:
                    18:e3:1e:db:26:02:f3:3e:1b:10:71:00:f4:df:4e:
                    f7:ee:14:7b:10:64:15:74:18:21:75:87:86:15:a1:
                    bf:81:ab:2e:c9:3f:45:a7:a6:ec:be:ac:b2:ae:19:
                    f1:ae:00:46:18:08:7a:3e:fc:ee:d1:f4:32:49:19:
                    f9:a5:e8:84:89:36:74:27:a1:90:fd:20:14:7a:2c:
                    7e:2d:a5:05:80:4c:43:11:58:52:2b:46:92:d9:10:
                    61:ff:c8:7a:40:b2:8e:e1:14:00:81:76:15:f1:bf:
                    97:39:d0:d6:52:56:0d:50:d4:87:39:58:b7:ad:71:
                    c3:ea:67:2a:ea:65:25:70:f6:15:45:0d:eb:e3:ac:
                    da:7f:6e:5c:50:a8:0b:4c:ff:19:a0:9b:3b:6f:f2:
                    36:a9:c2:c0:ca:e1:d1:0f:2e:62:14:21:97:52:cc:
                    e2:f0:31:bd:47:c4:e3:1f:41:26:17:8c:9e:29:a8:
                    6a:92:da:30:17:1c:11:50:3d:7e:f7:38:32:0b:31:
                    b4:f6:75:3f:95:ad:6c:9f:db:ec:de:55:7a:39:8d:
                    e8:60:7b:b6:4a:88:0a:b1:aa:3b:d3:7e:ba:a4:9a:
                    4c:ca:d8:f2:ce:9f:61:9c:17:8d:60:a9:a1:65:22:
                    5f:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:5F:9E:41:C2:9E:AD:BB:93:8C:60:A4:39:73:24:EC:3F:57:8A:A7
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS401776.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.141.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:96:82:97:89:ab:fd:bc:69:be:3e:1c:36:83:80:f2:e3:db:
         cf:d2:fd:70:c3:e1:b0:c2:67:a7:87:ab:4f:1d:fe:d8:5d:ba:
         bf:f5:4f:72:80:93:28:e3:fd:46:91:a5:65:0d:41:0a:87:27:
         b1:8d:5d:fc:9d:66:ea:e2:37:ac:4a:a0:ac:d0:2d:37:1f:bb:
         e7:4e:c2:8b:86:00:00:d9:ab:ae:82:0a:24:19:c5:fe:ae:c9:
         aa:1f:51:c7:dc:2c:2d:29:91:c4:54:bc:d7:4e:42:e2:6b:85:
         5b:8c:99:e8:1d:ad:06:06:32:78:c2:51:52:d8:82:56:53:1e:
         92:59:a2:ee:62:ad:66:fe:a7:3b:b3:0f:02:4d:57:8d:00:9c:
         6b:e7:93:07:f0:30:86:76:3d:f6:75:48:72:d0:08:08:7d:08:
         da:3c:e8:66:45:f0:2c:35:5a:95:5e:d0:3c:fe:ce:d3:ee:e6:
         00:80:aa:1e:8f:b3:96:ae:1e:f7:2f:f8:0a:d6:ff:01:9c:ab:
         81:a2:4f:2b:3f:23:9b:60:70:52:db:dd:10:74:8b:da:38:8f:
         aa:db:00:9b:7a:21:03:a3:49:a6:87:2c:50:7e:0e:e5:5d:b3:
         04:67:f3:4a:c6:18:21:ef:e5:5f:1c:14:81:12:0b:13:6a:99:
         b8:e8:5c:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 12:10:08 2026 by rpki-client