Route Origin Authorization

$ rpki-client -vvvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS834.roa
File:                     AS834.roa (raw, json)
Hash identifier:          QInofXWRSBiehxoszeJq5ZyNs8ozl36HwEXJnnupSz8=
Subject key identifier:   6A:DE:FC:60:1F:D9:5C:0D:04:DC:49:76:F7:4C:A1:86:B7:E6:BB:1E
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       76911813F19063AD6D2DC5E597412957CDC13C52
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS834.roa
Signing time:             Fri 18 Sep 2026 12:27:44 +0000
ROA not before:           Fri 18 Sep 2026 12:22:44 +0000
ROA not after:            Fri 17 Sep 2027 12:27:44 +0000
asID:                     834
IP address blocks:        13.141.24.0/22 maxlen: 24
                          13.141.32.0/22 maxlen: 24
                          13.141.48.0/22 maxlen: 24
                          13.141.56.0/21 maxlen: 24
                          13.141.64.0/20 maxlen: 24
                          13.141.112.0/21 maxlen: 24
                          13.141.120.0/22 maxlen: 24
                          169.40.36.0/24 maxlen: 24
                          169.40.43.0/24 maxlen: 24
                          169.40.44.0/24 maxlen: 24
                          169.40.47.0/24 maxlen: 24
                          169.40.57.0/24 maxlen: 24
                          169.40.68.0/22 maxlen: 24
                          169.40.72.0/21 maxlen: 24
                          169.40.104.0/24 maxlen: 24
                          169.40.124.0/23 maxlen: 24
                          169.40.132.0/24 maxlen: 24
                          169.40.155.0/24 maxlen: 24
                          169.40.158.0/24 maxlen: 24
                          169.40.204.0/22 maxlen: 24
                          169.40.224.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Sep 2026 23:24:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:91:18:13:f1:90:63:ad:6d:2d:c5:e5:97:41:29:57:cd:c1:3c:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: Sep 18 12:22:44 2026 GMT
            Not After : Sep 17 12:27:44 2027 GMT
        Subject: CN=6ADEFC601FD95C0D04DC4976F74CA186B7E6BB1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:3b:03:cb:b8:fe:50:30:0a:16:ee:15:89:cd:
                    f2:0b:4c:d2:b1:b2:b0:4c:9c:c5:fe:e7:50:36:e1:
                    6f:b3:87:53:6a:0c:8c:21:cf:f2:5c:4d:f6:a3:79:
                    fd:a4:58:c1:17:44:87:82:ca:af:15:1d:02:6f:65:
                    2d:ba:c7:af:59:b9:08:39:b7:5f:8f:6d:ab:13:2c:
                    6b:c5:83:62:e8:a1:7c:88:8b:1b:95:6b:23:bd:52:
                    80:62:25:a6:ed:b8:d1:a8:3d:ad:1b:69:2d:9b:8a:
                    ce:65:fe:81:e9:7e:17:b4:08:aa:e7:15:c3:38:00:
                    7a:31:5c:a5:fe:e2:05:18:85:f4:01:3e:25:6c:87:
                    ee:c9:a7:c1:a5:4b:14:d1:59:cf:b3:07:94:61:7b:
                    8d:24:14:31:d1:47:be:c3:d3:a2:ee:de:10:ea:26:
                    ea:50:0d:9d:85:cd:fb:a1:5b:d7:36:6d:27:2a:67:
                    4d:79:f3:c9:eb:36:50:c5:80:19:3d:b4:42:b1:71:
                    6f:13:e6:15:66:c2:ec:7e:fb:98:bf:e1:71:09:ad:
                    0d:71:0b:0a:99:ab:d9:00:4d:97:f0:34:6e:40:f6:
                    da:b7:ac:8b:a1:ed:9f:52:3b:29:32:cc:38:b9:8e:
                    e6:39:ea:8f:d7:31:bd:c8:e1:31:32:52:7f:c7:f5:
                    06:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:DE:FC:60:1F:D9:5C:0D:04:DC:49:76:F7:4C:A1:86:B7:E6:BB:1E
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.141.24.0/22
                  13.141.32.0/22
                  13.141.48.0/22
                  13.141.56.0-13.141.79.255
                  13.141.112.0-13.141.123.255
                  169.40.36.0/24
                  169.40.43.0-169.40.44.255
                  169.40.47.0/24
                  169.40.57.0/24
                  169.40.68.0-169.40.79.255
                  169.40.104.0/24
                  169.40.124.0/23
                  169.40.132.0/24
                  169.40.155.0/24
                  169.40.158.0/24
                  169.40.204.0/22
                  169.40.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         5d:81:ee:05:64:e5:5e:35:c8:d4:1a:ac:1c:9c:03:57:6b:6f:
         60:95:1f:bc:72:53:aa:0b:ed:f9:04:0a:f4:77:dc:6f:f3:e7:
         db:b7:12:b7:70:8c:54:53:17:cb:ad:3e:f8:c9:d9:f4:e9:c0:
         f8:c1:9a:ff:a5:4c:35:82:9d:aa:af:1c:33:8d:0d:e6:4a:78:
         d3:74:f0:54:bc:fc:bf:2b:8e:48:a8:89:33:bd:7d:40:5c:68:
         ae:22:7c:74:5e:07:ea:57:3c:1c:1f:dc:9b:f1:0c:99:ac:f1:
         a8:87:dc:21:44:ed:d8:1d:81:33:cf:bb:69:0f:65:74:e4:11:
         3f:8b:91:97:9b:5c:d9:7f:ff:0e:be:99:3e:1b:5c:e8:7c:4d:
         53:08:e3:e0:d2:40:3b:8a:1c:be:90:3b:32:43:82:b9:f5:dd:
         53:22:3b:9b:36:d8:72:c3:18:10:2b:b4:ea:c5:55:29:8d:65:
         0e:96:a5:e3:79:be:cd:61:4e:fd:70:7e:f8:7c:2d:52:3b:e3:
         f4:b8:a2:1e:f9:17:65:d8:1b:a1:42:55:1f:0f:a9:6b:bc:e0:
         c5:b2:4a:ee:b0:fe:54:c4:ad:21:c2:12:9f:b4:01:c4:66:b7:
         93:2b:b3:92:f7:fd:1e:24:41:1e:2b:20:ed:26:71:83:98:dc:
         38:fd:3f:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 13:25:05 2026 by rpki-client