Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e33352e302f32342d3234203d3e203633313939.roa
File:                     3136392e34302e33352e302f32342d3234203d3e203633313939.roa (raw, json)
Hash identifier:          rsOnTfjpCVqAd6D4fRRwS3fkQuveNJOlcoQBs6AYTrg=
Subject key identifier:   E3:13:B7:6D:3C:FC:C9:AB:B8:65:58:6E:A1:93:B3:F3:9F:F0:00:F6
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       2043D4CCC31A100DD7D68663E508F0605BCB9AD3
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e33352e302f32342d3234203d3e203633313939.roa
Signing time:             Mon 02 Mar 2026 10:10:21 +0000
ROA not before:           Mon 02 Mar 2026 10:05:21 +0000
ROA not after:            Mon 01 Mar 2027 10:10:21 +0000
asID:                     63199
IP address blocks:        169.40.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 06 Mar 2026 09:19:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:43:d4:cc:c3:1a:10:0d:d7:d6:86:63:e5:08:f0:60:5b:cb:9a:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: Mar  2 10:05:21 2026 GMT
            Not After : Mar  1 10:10:21 2027 GMT
        Subject: CN=E313B76D3CFCC9ABB865586EA193B3F39FF000F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:7b:37:85:19:03:16:c2:06:e3:82:cb:6a:9c:
                    69:e3:9a:11:a4:55:28:7f:7d:e0:5a:69:12:0e:57:
                    28:b5:c4:87:99:9c:92:e1:bd:27:5b:51:7a:56:39:
                    90:b5:90:ba:0c:97:af:d2:8f:16:b2:ed:cf:71:3b:
                    d5:f5:3e:25:65:ef:18:27:83:a6:5c:c1:59:05:a5:
                    ec:d5:e5:d8:50:8d:1c:4a:1c:49:68:0a:12:3b:aa:
                    6a:c7:a8:38:df:54:65:06:2a:e9:3f:94:07:34:d0:
                    88:07:cd:9e:3a:36:94:d5:7b:ac:77:41:18:09:31:
                    6f:57:95:74:f6:76:a5:20:ea:94:ff:1b:6d:4a:1e:
                    5d:0f:b2:fa:8d:da:59:97:bf:88:32:2b:89:8a:ea:
                    3d:ed:71:89:86:a7:c4:ae:04:81:69:67:94:73:8b:
                    ba:8a:28:e8:ac:77:53:37:3a:90:69:45:8a:32:af:
                    b0:0a:e4:67:7b:5d:04:bf:33:45:8a:79:f4:1a:81:
                    a8:34:44:70:0a:f6:f0:4e:5a:04:36:f8:3d:4d:e0:
                    a7:68:c4:20:f7:fc:b6:5c:0f:c1:66:da:7b:22:3f:
                    8f:3d:e6:d1:21:f6:de:f4:8c:f0:d1:77:6a:92:ac:
                    0c:b9:25:7a:8d:d8:e5:50:45:33:04:0f:48:6c:5e:
                    50:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:13:B7:6D:3C:FC:C9:AB:B8:65:58:6E:A1:93:B3:F3:9F:F0:00:F6
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e33352e302f32342d3234203d3e203633313939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.40.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:28:49:0d:60:7d:73:e9:29:1d:58:fb:b2:44:bb:df:9d:2c:
         57:3c:3a:7d:c0:a1:d0:86:2c:39:3c:8e:6e:2f:82:26:ed:2b:
         6d:54:49:ed:c0:18:35:23:d3:2a:9c:55:86:be:9b:bf:9c:e9:
         e4:16:51:51:8b:d9:a1:cd:94:65:c4:6b:1b:4f:b5:77:c0:0b:
         c3:0a:c8:7e:6e:a6:1a:0b:40:25:48:0d:1c:47:c5:35:4c:d8:
         47:eb:a4:93:af:ab:ea:1f:1e:4a:79:19:f1:b6:91:5e:45:ba:
         20:56:fe:3d:4e:09:b2:2b:1b:eb:33:48:f7:11:26:18:50:80:
         7d:73:13:8d:e2:51:24:81:1b:3d:f3:2f:a6:b8:02:34:05:30:
         92:8c:5f:31:41:ef:fb:39:12:ba:44:28:24:7b:90:ce:06:d5:
         b9:78:fb:18:58:03:21:fb:4d:f9:a1:7f:93:fd:dd:9d:05:52:
         2b:37:c8:66:68:df:52:9a:5e:a7:65:32:f8:a1:85:bb:60:cb:
         21:d9:68:b0:65:b3:40:22:be:e0:f0:1f:31:b3:70:b2:96:34:
         8b:8d:42:2b:74:63:95:be:20:f1:c7:c4:8c:b0:a6:12:d7:36:
         52:6c:18:a5:d9:8d:ac:96:2d:7e:e2:b2:ca:07:b4:bf:76:ce:
         89:4d:87:79
-----BEGIN CERTIFICATE-----
MIIFVjCCBD6gAwIBAgIUIEPUzMMaEA3X1oZj5QjwYFvLmtMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUVGNzY2RjEwM0IyRUY5OURGOEM3MTk3OEE3RkU1MTlE
NzMwQjE1NTAeFw0yNjAzMDIxMDA1MjFaFw0yNzAzMDExMDEwMjFaMDMxMTAvBgNV
BAMTKEUzMTNCNzZEM0NGQ0M5QUJCODY1NTg2RUExOTNCM0YzOUZGMDAwRjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrezeFGQMWwgbjgstqnGnjmhGk
VSh/feBaaRIOVyi1xIeZnJLhvSdbUXpWOZC1kLoMl6/Sjxay7c9xO9X1PiVl7xgn
g6ZcwVkFpezV5dhQjRxKHEloChI7qmrHqDjfVGUGKuk/lAc00IgHzZ46NpTVe6x3
QRgJMW9XlXT2dqUg6pT/G21KHl0PsvqN2lmXv4gyK4mK6j3tcYmGp8SuBIFpZ5Rz
i7qKKOisd1M3OpBpRYoyr7AK5Gd7XQS/M0WKefQagag0RHAK9vBOWgQ2+D1N4Kdo
xCD3/LZcD8Fm2nsiP4895tEh9t70jPDRd2qSrAy5JXqN2OVQRTMED0hsXlD/AgMB
AAGjggJgMIICXDAdBgNVHQ4EFgQU4xO3bTz8yau4ZVhuoZOz85/wAPYwHwYDVR0j
BBgwFoAUrvdm8QOy75nfjHGXin/lGdcwsVUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
MzAzMjdiOWUtMjI3YS00ZWJkLTgyNWItM2I5ODA5NWRjOTI3LTAvMC9BRUY3NjZG
MTAzQjJFRjk5REY4QzcxOTc4QTdGRTUxOUQ3MzBCMTU1LmNybDCBngYIKwYBBQUH
AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1
OTBiOTlhZi80L0FFRjc2NkYxMDNCMkVGOTlERjhDNzE5NzhBN0ZFNTE5RDczMEIx
NTUuY2VyMIGiBggrBgEFBQcBCwSBlTCBkjCBjwYIKwYBBQUHMAuGgYJyc3luYzov
L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby8zMDMyN2I5ZS0yMjdhLTRlYmQtODI1
Yi0zYjk4MDk1ZGM5MjctMC8wLzMxMzYzOTJlMzQzMDJlMzMzNTJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDM2MzMzMTM5Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACpKCMwDQYJKoZIhvcN
AQELBQADggEBAJkoSQ1gfXPpKR1Y+7JEu9+dLFc8On3AodCGLDk8jm4vgibtK21U
Se3AGDUj0yqcVYa+m7+c6eQWUVGL2aHNlGXEaxtPtXfAC8MKyH5uphoLQCVIDRxH
xTVM2EfrpJOvq+ofHkp5GfG2kV5FuiBW/j1OCbIrG+szSPcRJhhQgH1zE43iUSSB
Gz3zL6a4AjQFMJKMXzFB7/s5ErpEKCR7kM4G1bl4+xhYAyH7Tfmhf5P93Z0FUis3
yGZo31KaXqdlMvihhbtgyyHZaLBls0AivuDwHzGzcLKWNIuNQit0Y5W+IPHHxIyw
phLXNlJsGKXZjayWLX7issoHtL92zolNh3k=
-----END CERTIFICATE-----
Generated at Thu Mar 5 20:42:35 2026 by rpki-client