Route Origin Authorization

$ rpki-client -vvvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS402276.roa
File:                     AS402276.roa (raw, json)
Hash identifier:          eOYq8ul3ot7F/UpFsXp0l7P+iaxkhX04uv4d11VTIEI=
Subject key identifier:   E7:59:BE:B2:89:7D:BC:65:26:CF:2C:04:DA:3A:EE:EF:A8:6C:AD:EE
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       56C2FB9148B0CDC60EB2B20CA7945B985787AB3D
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS402276.roa
Signing time:             Sun 30 Aug 2026 04:01:59 +0000
ROA not before:           Sun 30 Aug 2026 03:56:59 +0000
ROA not after:            Sun 29 Aug 2027 04:01:59 +0000
asID:                     402276
IP address blocks:        169.40.192.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Sep 2026 23:24:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:c2:fb:91:48:b0:cd:c6:0e:b2:b2:0c:a7:94:5b:98:57:87:ab:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: Aug 30 03:56:59 2026 GMT
            Not After : Aug 29 04:01:59 2027 GMT
        Subject: CN=E759BEB2897DBC6526CF2C04DA3AEEEFA86CADEE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:58:02:9a:88:6c:d1:69:a2:42:d2:55:d8:26:
                    00:33:70:14:4c:fc:9f:b2:70:d4:3f:94:d7:40:cb:
                    42:39:7a:9f:84:0c:a9:4b:65:58:dc:79:14:79:6f:
                    3f:08:92:a3:7b:d1:06:c3:0c:d5:d3:2f:e6:7f:fe:
                    60:75:e4:80:99:f4:35:f4:34:df:31:1c:2e:bc:ec:
                    3f:29:30:f8:6a:11:5d:57:23:50:04:97:27:50:b2:
                    2d:4f:95:0d:4f:34:a0:8d:c4:91:25:7b:53:09:b2:
                    b8:7c:14:37:51:00:8e:e2:1c:40:a2:1f:3f:90:d2:
                    d6:df:7e:0f:e3:af:82:72:ab:07:0d:54:f4:93:c3:
                    7a:18:10:51:e4:62:15:a0:c4:30:65:f4:c9:58:31:
                    b5:6d:47:f5:3d:96:32:7b:dc:ab:5d:f4:a2:14:97:
                    73:fc:08:ca:17:f7:77:fa:10:e2:9f:01:2e:f7:43:
                    c4:5a:ba:7e:d8:73:93:00:4e:ca:bc:5c:ee:c4:7d:
                    76:a3:4c:32:a5:a8:97:20:12:cf:f2:95:d2:7d:ef:
                    af:c5:1f:f4:65:65:9d:32:c3:96:4b:0c:c7:f4:fc:
                    3b:23:d3:7c:7f:be:08:81:d4:1a:2d:41:37:72:e7:
                    57:e9:13:aa:58:d3:9c:97:09:c3:2e:8d:82:60:a7:
                    d9:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:59:BE:B2:89:7D:BC:65:26:CF:2C:04:DA:3A:EE:EF:A8:6C:AD:EE
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS402276.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.40.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ae:ec:a4:92:8e:b5:d1:18:3c:02:df:2b:27:33:3c:48:51:e8:
         05:f8:69:d0:c1:d6:9b:ed:6a:1b:7b:a0:ce:ae:f5:ec:df:67:
         72:eb:75:f2:67:82:49:ec:14:95:db:42:8d:cb:56:37:8b:e2:
         52:58:51:96:02:a1:6a:14:92:81:47:3a:09:89:b8:74:5d:05:
         50:01:8e:0f:97:a6:0d:fc:83:ca:40:9f:46:ab:bc:37:a1:3b:
         a2:02:e7:46:b3:d1:c9:82:d1:c5:f4:3b:dd:cf:51:1b:fc:33:
         48:b8:88:bc:34:94:27:5d:2e:7e:1d:48:d8:39:f9:72:4b:75:
         9e:19:91:48:49:1c:24:97:de:9d:d6:4c:cb:da:a0:28:d1:bc:
         f7:39:2f:ee:e6:ab:52:c3:85:96:d5:0f:c1:80:a8:88:c5:50:
         a0:f2:9c:b2:05:86:e1:28:86:48:70:ec:e3:75:e5:fe:90:4d:
         27:98:89:66:51:04:9f:a0:62:c8:d3:fd:c9:6a:38:6c:77:6f:
         fa:af:ab:7a:f8:e1:56:cf:fc:6a:e3:61:7e:03:9f:86:92:0f:
         35:0d:e8:cb:a0:09:78:0d:b2:c2:c3:e4:24:3b:e9:e5:fe:ad:
         dc:64:da:47:4f:30:1e:16:f9:69:93:db:4e:9d:ec:b7:8f:c0:
         d0:e4:2f:51
-----BEGIN CERTIFICATE-----
MIIFJTCCBA2gAwIBAgIUVsL7kUiwzcYOsrIMp5RbmFeHqz0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUVGNzY2RjEwM0IyRUY5OURGOEM3MTk3OEE3RkU1MTlE
NzMwQjE1NTAeFw0yNjA4MzAwMzU2NTlaFw0yNzA4MjkwNDAxNTlaMDMxMTAvBgNV
BAMTKEU3NTlCRUIyODk3REJDNjUyNkNGMkMwNERBM0FFRUVGQTg2Q0FERUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgWAKaiGzRaaJC0lXYJgAzcBRM
/J+ycNQ/lNdAy0I5ep+EDKlLZVjceRR5bz8IkqN70QbDDNXTL+Z//mB15ICZ9DX0
NN8xHC687D8pMPhqEV1XI1AElydQsi1PlQ1PNKCNxJEle1MJsrh8FDdRAI7iHECi
Hz+Q0tbffg/jr4JyqwcNVPSTw3oYEFHkYhWgxDBl9MlYMbVtR/U9ljJ73Ktd9KIU
l3P8CMoX93f6EOKfAS73Q8Raun7Yc5MATsq8XO7EfXajTDKlqJcgEs/yldJ976/F
H/RlZZ0yw5ZLDMf0/Dsj03x/vgiB1BotQTdy51fpE6pY05yXCcMujYJgp9lNAgMB
AAGjggIvMIICKzAdBgNVHQ4EFgQU51m+sol9vGUmzywE2jru76hsre4wHwYDVR0j
BBgwFoAUrvdm8QOy75nfjHGXin/lGdcwsVUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
MzAzMjdiOWUtMjI3YS00ZWJkLTgyNWItM2I5ODA5NWRjOTI3LTAvMC9BRUY3NjZG
MTAzQjJFRjk5REY4QzcxOTc4QTdGRTUxOUQ3MzBCMTU1LmNybDCBngYIKwYBBQUH
AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1
OTBiOTlhZi80L0FFRjc2NkYxMDNCMkVGOTlERjhDNzE5NzhBN0ZFNTE5RDczMEIx
NTUuY2VyMHIGCCsGAQUFBwELBGYwZDBiBggrBgEFBQcwC4ZWcnN5bmM6Ly9yLm1h
Z2VsbGFuLmlweG8uY29tL3JlcG8vMzAzMjdiOWUtMjI3YS00ZWJkLTgyNWItM2I5
ODA5NWRjOTI3LTAvMC9BUzQwMjI3Ni5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAqkowDANBgkqhkiG9w0B
AQsFAAOCAQEAruykko610Rg8At8rJzM8SFHoBfhp0MHWm+1qG3ugzq717N9ncut1
8meCSewUldtCjctWN4viUlhRlgKhahSSgUc6CYm4dF0FUAGOD5emDfyDykCfRqu8
N6E7ogLnRrPRyYLRxfQ73c9RG/wzSLiIvDSUJ10ufh1I2Dn5ckt1nhmRSEkcJJfe
ndZMy9qgKNG89zkv7uarUsOFltUPwYCoiMVQoPKcsgWG4SiGSHDs43Xl/pBNJ5iJ
ZlEEn6BiyNP9yWo4bHdv+q+revjhVs/8auNhfgOfhpIPNQ3oy6AJeA2ywsPkJDvp
5f6t3GTaR08wHhb5aZPbTp3st4/A0OQvUQ==
-----END CERTIFICATE-----
Generated at Sun Sep 20 11:42:19 2026 by rpki-client