Route Origin Authorization

$ rpki-client -vvvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS1002.roa
File:                     AS1002.roa (raw, json)
Hash identifier:          01TZKwmCm+9n/x5ONLDQCSLBMWpVfLulAZWTXT9Q9Oc=
Subject key identifier:   E4:BF:CA:4A:B9:49:5E:78:12:B2:4F:08:78:90:FF:32:09:84:C5:CC
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       22F107D5DEF8353D3FBA933A3164309B3A2214D0
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS1002.roa
Signing time:             Fri 02 Oct 2026 04:14:08 +0000
ROA not before:           Fri 02 Oct 2026 04:09:08 +0000
ROA not after:            Fri 01 Oct 2027 04:14:08 +0000
asID:                     1002
IP address blocks:        169.40.46.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 Oct 2026 06:29:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:f1:07:d5:de:f8:35:3d:3f:ba:93:3a:31:64:30:9b:3a:22:14:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: Oct  2 04:09:08 2026 GMT
            Not After : Oct  1 04:14:08 2027 GMT
        Subject: CN=E4BFCA4AB9495E7812B24F087890FF320984C5CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:9f:06:c4:3e:2f:b5:82:e0:43:54:e6:a1:12:
                    91:c5:05:3d:41:9e:17:87:ae:89:75:77:bd:0a:b3:
                    32:39:b8:97:af:75:26:e2:45:be:19:14:8e:b1:fd:
                    cc:15:71:c9:d7:d5:22:8e:5a:32:90:21:b3:ce:e9:
                    87:4e:2f:b1:e9:e4:f6:65:91:26:65:97:62:e7:48:
                    58:63:32:5c:7a:77:a7:37:12:2a:a9:58:8a:3a:73:
                    d8:73:55:87:89:2f:f4:31:fb:a0:b4:61:39:d8:1f:
                    53:9e:46:fd:6a:6b:54:c2:be:04:8f:c2:6c:fb:73:
                    dd:be:3c:04:64:69:e6:1f:08:b2:4a:eb:77:0c:cf:
                    ab:34:df:af:5b:5f:e5:07:39:49:0f:70:d3:77:bf:
                    ef:30:74:83:6c:44:92:60:66:57:0a:b8:95:ec:92:
                    96:2a:3f:ae:0c:40:ce:7a:10:7d:a3:0c:80:47:72:
                    59:0c:0c:0a:46:f6:5a:f1:4d:c8:10:b6:ad:df:a4:
                    43:22:c2:da:31:bf:4e:84:66:3e:93:4b:9d:72:8f:
                    a4:a7:2b:6a:01:25:3a:e1:eb:c7:35:79:f2:60:05:
                    73:01:2e:28:7f:ea:94:49:b6:10:48:a8:3a:cf:69:
                    f1:11:5c:e9:95:81:b7:1d:65:0c:61:3b:4b:14:3b:
                    5c:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:BF:CA:4A:B9:49:5E:78:12:B2:4F:08:78:90:FF:32:09:84:C5:CC
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS1002.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.40.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:64:3a:ef:34:e0:0e:7e:59:27:a4:e4:10:c2:11:51:af:1f:
         1a:d6:0c:c4:d2:0c:a8:db:3f:b3:07:fb:fb:b3:62:5e:c5:5d:
         db:de:2c:b6:72:16:18:0e:4b:6f:ba:57:55:3f:ea:d6:dd:75:
         c8:76:36:5d:39:1d:87:9a:62:00:3b:92:4e:22:6c:0a:86:bb:
         0b:74:b0:8a:ee:df:02:02:db:24:ec:23:af:82:64:5e:bc:6e:
         a7:da:ce:02:de:50:e4:9a:bb:ce:26:ef:5d:19:5e:98:7b:81:
         70:aa:72:4f:d4:f7:d8:66:d1:7d:10:93:2e:4e:b7:0c:f0:4d:
         bd:0b:0e:42:4e:3f:26:92:86:72:b3:70:f4:95:ea:5d:27:46:
         53:15:2c:a9:3a:f8:2d:c0:f6:8b:b4:83:69:0c:97:ad:41:a9:
         cb:49:83:74:13:55:8c:bf:01:08:1b:65:a3:74:b9:0a:39:40:
         65:cf:9e:a0:03:8c:59:cb:a7:d2:00:7f:9a:6e:2b:fb:ad:f9:
         72:84:22:cf:0d:93:bc:3f:b3:8c:48:75:55:64:77:78:09:0e:
         f5:e1:6a:12:f4:a8:01:c9:cb:1b:d8:e0:0b:16:d8:ff:fd:45:
         53:fa:81:0a:b4:27:43:98:fe:b5:ff:f7:45:28:4a:6a:c3:0f:
         40:b0:7e:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 12:41:30 2026 by rpki-client