Route Origin Authorization

$ rpki-client -vvvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS20326.roa
File:                     AS20326.roa (raw, json)
Hash identifier:          9PvzDcxPCxxEv/Kcb0l65jHAfHE3mnAY5aG3sWfIjPc=
Subject key identifier:   1C:62:DC:7F:10:05:B1:FD:D9:4A:DB:02:12:6E:EE:95:F7:A6:38:0F
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       55B31D595FF9D7509DEEB352A7011090C65C025A
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS20326.roa
Signing time:             Fri 25 Sep 2026 01:21:44 +0000
ROA not before:           Fri 25 Sep 2026 01:16:44 +0000
ROA not after:            Fri 24 Sep 2027 01:21:44 +0000
asID:                     20326
IP address blocks:        13.141.25.0/24 maxlen: 24
                          169.40.200.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 18 Oct 2026 20:35:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:b3:1d:59:5f:f9:d7:50:9d:ee:b3:52:a7:01:10:90:c6:5c:02:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: Sep 25 01:16:44 2026 GMT
            Not After : Sep 24 01:21:44 2027 GMT
        Subject: CN=1C62DC7F1005B1FDD94ADB02126EEE95F7A6380F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:27:c1:a0:92:2a:c6:0f:d5:26:4c:77:7f:61:
                    c9:3f:d2:da:d2:ae:de:df:b4:ec:45:1d:a6:47:87:
                    4c:52:36:bd:52:c0:24:53:95:d5:51:c2:d0:81:2a:
                    af:6d:8a:94:73:60:54:55:3f:e5:9b:a5:c9:4e:7e:
                    06:0b:7e:6d:d4:12:e5:df:3d:b6:ee:d1:f8:83:7d:
                    a8:f7:f8:18:6d:35:6f:3b:34:ac:7b:9b:32:a5:39:
                    74:37:ab:19:60:b1:dd:68:9e:9f:0f:8a:b3:8b:8a:
                    85:d0:04:2c:b5:f7:b8:90:90:09:23:f9:af:68:3c:
                    80:51:a7:dd:a3:40:1a:50:4b:3a:da:be:7a:b0:20:
                    06:cf:d9:3e:58:73:2e:5c:d5:5e:da:76:d5:86:15:
                    21:8e:9a:d2:87:79:4b:b3:d8:a0:63:b1:9e:81:9e:
                    6c:56:ff:bc:61:bb:3b:ae:1f:a9:52:08:b1:a4:6f:
                    13:89:9a:1d:98:86:ec:3b:f1:51:98:0f:8f:7d:24:
                    69:e2:80:20:bc:04:8d:2a:a0:ec:87:1e:41:b9:eb:
                    55:c7:27:a8:55:7a:d2:04:79:fa:86:98:36:8f:5d:
                    5b:b1:58:0a:d8:de:16:88:58:5b:bc:44:db:40:ad:
                    0f:67:8f:e9:60:36:39:68:9d:f0:3d:6c:c1:5d:db:
                    e3:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:62:DC:7F:10:05:B1:FD:D9:4A:DB:02:12:6E:EE:95:F7:A6:38:0F
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS20326.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.141.25.0/24
                  169.40.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         74:d9:39:38:b4:23:14:26:fa:59:32:bb:2b:f3:19:db:5c:89:
         22:94:ad:c0:4d:12:93:71:7d:f2:49:d5:07:b8:a2:95:ad:41:
         64:19:27:8b:ba:18:58:a6:68:d7:ae:1e:c3:33:4e:f9:8d:28:
         c3:de:83:6a:15:bb:91:be:a8:b4:c4:17:d8:3d:29:7e:36:cd:
         8e:9f:0f:81:6e:33:37:59:49:95:8a:6f:3a:93:b4:b8:8b:20:
         71:72:8f:d8:04:69:e3:a0:2e:02:21:82:fa:e9:76:76:c9:74:
         02:3b:c4:22:13:4a:cd:3d:90:8b:df:41:de:ac:a4:0c:ed:97:
         73:9a:42:31:09:f8:db:dd:cb:2c:21:b5:4d:fb:fb:90:5e:a8:
         97:b7:a5:fd:22:f4:3e:46:42:49:d3:fb:e4:68:be:5a:65:7e:
         e7:c0:c6:63:95:f5:cc:5f:8f:ae:7e:c8:5a:42:4f:35:34:e9:
         7b:59:e0:10:60:45:72:b9:ac:ad:16:5b:58:17:b1:16:8d:87:
         91:44:f1:06:cf:23:a8:c4:1f:c1:80:04:49:d2:4a:db:04:87:
         69:aa:3d:26:9e:ea:ba:48:38:c1:8f:00:03:ab:59:cd:19:24:
         5d:eb:f8:8a:3a:bb:f9:94:ae:99:bd:9a:0c:bd:77:67:f8:62:
         f1:8a:f1:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 09:41:12 2026 by rpki-client