Route Origin Authorization

$ rpki-client -vvvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS402265.roa
File:                     AS402265.roa (raw, json)
Hash identifier:          JzxpHkF4MFRwMcRJZX8Nc9IC6Aj1EVrVTTzMU95oo94=
Subject key identifier:   8A:16:39:FD:C4:02:4D:0B:66:0F:BF:66:10:09:90:22:41:21:5C:07
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       152AE8D3B0D06B799B7CA83E06A05D222EC64350
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS402265.roa
Signing time:             Fri 30 Oct 2026 00:13:33 +0000
ROA not before:           Fri 30 Oct 2026 00:08:33 +0000
ROA not after:            Fri 29 Oct 2027 00:13:33 +0000
asID:                     402265
IP address blocks:        13.141.33.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 06 Nov 2026 08:45:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:2a:e8:d3:b0:d0:6b:79:9b:7c:a8:3e:06:a0:5d:22:2e:c6:43:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: Oct 30 00:08:33 2026 GMT
            Not After : Oct 29 00:13:33 2027 GMT
        Subject: CN=8A1639FDC4024D0B660FBF661009902241215C07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:6a:03:3c:38:a6:40:a4:0d:26:d0:bc:03:96:
                    90:11:e7:6f:d3:52:7a:01:80:d6:3c:56:49:df:da:
                    4a:3f:02:4e:8e:0d:11:54:4f:40:16:40:b5:61:f3:
                    9f:2b:ec:69:52:60:51:2f:85:47:98:94:0c:04:8d:
                    f9:cf:88:c1:f8:05:8e:d3:e0:82:1d:03:d9:ac:ea:
                    e8:ea:96:a5:f5:61:42:c5:69:ad:02:bf:b2:79:c8:
                    f9:6a:10:80:27:58:54:57:9a:4b:ed:d9:13:1c:7d:
                    26:d3:42:c3:5d:5e:8f:33:c0:9f:ca:35:67:5d:a5:
                    86:b2:9f:f6:33:42:e5:51:e4:3c:f1:bb:e7:00:e1:
                    3b:13:04:9a:02:88:4a:60:94:da:46:14:42:97:10:
                    d2:1d:e1:2b:03:90:d5:a3:ae:d0:81:d4:09:35:aa:
                    d4:1a:1f:d4:5d:31:59:a9:e2:b5:a8:5f:d6:28:d8:
                    8c:5f:27:ef:4e:94:f8:58:8a:89:6c:e6:90:87:2b:
                    17:3b:b1:1e:41:13:04:bc:bd:37:03:23:8f:eb:11:
                    24:9e:a6:ab:7c:c0:78:7b:a9:81:d5:55:26:46:8c:
                    fd:71:b7:ae:f7:5d:cb:a1:5a:fe:bd:93:13:f4:19:
                    07:5d:c3:d4:5f:21:2f:b8:d8:d8:3c:ad:c1:55:46:
                    e6:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:16:39:FD:C4:02:4D:0B:66:0F:BF:66:10:09:90:22:41:21:5C:07
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS402265.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.141.33.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:42:c0:98:2a:75:ca:49:b0:67:79:6c:a0:63:05:b0:d9:31:
         ee:e5:51:60:3f:0b:d0:2e:d5:52:e5:40:60:6d:cc:20:98:9b:
         99:c4:65:ca:a9:f0:cf:01:ec:bc:b1:6f:89:b6:89:7e:c1:bc:
         91:d8:d2:51:9f:a6:01:3e:fb:6c:d0:d7:36:3e:e8:7b:3c:cc:
         fc:9a:e5:9c:0c:c3:c1:d3:e3:7c:02:5e:df:83:cf:18:74:4c:
         4c:7c:ca:15:cb:38:b7:0e:bf:a8:93:42:62:a1:cf:c7:f1:3e:
         10:16:52:19:91:0a:59:6b:81:37:95:a9:19:a4:82:ad:07:53:
         11:8f:6e:7d:c8:2c:65:b1:32:12:9e:fb:75:c6:4c:d5:ef:b8:
         52:6a:6a:03:41:59:57:0c:6b:3a:3d:5b:8f:c7:bc:ad:80:c8:
         6e:e5:64:59:3e:e9:4b:6e:7b:38:53:ed:38:81:01:a6:5c:5a:
         62:a3:40:0e:20:cc:84:7e:a7:39:cf:fa:15:6f:d9:9d:59:26:
         00:6f:76:17:15:da:f8:83:90:f4:9d:85:9a:d9:83:1a:02:3a:
         3c:50:d9:79:dc:1a:04:95:b3:46:24:eb:a3:ca:e9:6c:b6:39:
         bd:21:a4:6f:c3:36:53:ed:54:b8:e0:6d:39:53:de:91:34:0c:
         2d:46:da:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 19:12:24 2026 by rpki-client