Route Origin Authorization

$ rpki-client -vvvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS14315.roa
File:                     AS14315.roa (raw, json)
Hash identifier:          nbyTUZ5RlHhYFtaHOrdUnc+txUg9lZTM3c7KIhp+irY=
Subject key identifier:   F3:B5:50:C9:BC:C7:26:62:F2:17:AF:2D:61:E4:57:A3:23:AB:0E:13
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       2B0F5A1F77DA1C4FB973B3E8BEA93170B2AA078C
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS14315.roa
Signing time:             Thu 03 Sep 2026 07:13:36 +0000
ROA not before:           Thu 03 Sep 2026 07:08:36 +0000
ROA not after:            Thu 02 Sep 2027 07:13:36 +0000
asID:                     14315
IP address blocks:        169.40.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 12:22:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:0f:5a:1f:77:da:1c:4f:b9:73:b3:e8:be:a9:31:70:b2:aa:07:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: Sep  3 07:08:36 2026 GMT
            Not After : Sep  2 07:13:36 2027 GMT
        Subject: CN=F3B550C9BCC72662F217AF2D61E457A323AB0E13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:55:e3:45:85:c0:2c:4d:18:9d:9b:63:8b:3b:
                    d5:1a:00:e4:92:bd:d8:81:46:74:f6:96:04:c6:28:
                    6e:71:5b:3c:ed:14:d8:9e:4e:4d:0e:21:60:85:26:
                    c4:b1:6e:42:39:f3:c7:24:36:b1:94:9d:fe:df:65:
                    00:c9:ab:e5:d2:1f:18:4f:df:6a:1d:8f:6c:62:89:
                    a8:7b:0b:95:56:47:e4:38:ae:ce:56:66:76:d9:51:
                    0d:a2:5c:4a:70:ae:54:da:c6:9b:87:85:64:79:da:
                    ff:b2:6c:ad:2e:db:d4:3f:e7:91:56:d4:50:4b:ff:
                    bc:7e:92:65:11:14:07:cb:42:a9:d3:8b:c0:14:9b:
                    17:2d:bd:99:d0:1a:4f:b8:bc:cc:6a:ca:cb:b9:12:
                    7f:28:bd:cb:a4:4b:f6:d9:2e:4b:cb:ea:02:51:65:
                    6d:3e:fd:c1:18:6e:21:44:ee:76:84:0b:39:fc:80:
                    55:fd:84:16:b9:a7:60:79:ea:19:04:b9:c6:2b:1a:
                    9a:80:3f:dc:e9:b0:e4:eb:66:e5:58:97:76:0d:b3:
                    a2:c9:0d:70:df:44:ac:6f:e8:b8:c0:aa:46:94:5c:
                    a7:d3:dc:b4:8e:f0:e4:e3:13:11:8d:cb:b3:dd:fb:
                    1f:d1:27:e4:d2:90:bf:eb:5d:0e:b0:92:8b:f9:e1:
                    d6:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:B5:50:C9:BC:C7:26:62:F2:17:AF:2D:61:E4:57:A3:23:AB:0E:13
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS14315.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.40.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:6a:dc:6a:1b:9e:63:1e:a4:2c:d6:d8:d5:7e:da:13:e6:8e:
         d9:17:5b:63:60:39:c0:d7:d4:ea:bf:ec:49:42:21:6a:f2:1f:
         53:08:1c:84:9e:71:1b:d5:5f:c0:7f:84:db:47:1d:05:c2:11:
         8c:18:ba:06:52:eb:79:4f:da:a8:05:c3:f1:be:09:51:5e:34:
         a9:ce:0c:81:76:14:17:df:a2:3b:c1:1e:ed:07:71:98:4c:66:
         06:8e:ae:59:b1:1f:9b:14:57:48:61:13:8e:7e:0f:f6:9b:16:
         8d:05:6f:b6:e2:07:9e:66:15:be:6a:b3:d8:36:6d:9b:a5:95:
         02:c0:f1:45:51:65:75:97:a3:97:25:cf:6f:67:f5:28:2c:5c:
         33:66:eb:4d:d7:a9:7c:4a:4f:c7:31:4f:0e:bd:c2:40:92:e5:
         02:c0:c3:11:50:b7:7a:ff:ff:e0:9b:61:6d:20:1c:50:8b:53:
         3b:23:5a:e4:79:80:68:73:cc:f3:38:1a:e7:84:2e:89:52:a9:
         f0:be:35:f1:f3:93:3a:c9:43:13:1a:78:a8:b1:d1:c6:49:03:
         46:0c:22:33:c4:6d:ed:ab:0f:16:d5:85:f1:e6:2d:b4:97:74:
         a6:30:29:b0:b2:ce:84:60:71:54:4a:47:10:09:b7:ae:5f:ff:
         cf:b0:76:63
-----BEGIN CERTIFICATE-----
MIIFJDCCBAygAwIBAgIUKw9aH3faHE+5c7PovqkxcLKqB4wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUVGNzY2RjEwM0IyRUY5OURGOEM3MTk3OEE3RkU1MTlE
NzMwQjE1NTAeFw0yNjA5MDMwNzA4MzZaFw0yNzA5MDIwNzEzMzZaMDMxMTAvBgNV
BAMTKEYzQjU1MEM5QkNDNzI2NjJGMjE3QUYyRDYxRTQ1N0EzMjNBQjBFMTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoVeNFhcAsTRidm2OLO9UaAOSS
vdiBRnT2lgTGKG5xWzztFNieTk0OIWCFJsSxbkI588ckNrGUnf7fZQDJq+XSHxhP
32odj2xiiah7C5VWR+Q4rs5WZnbZUQ2iXEpwrlTaxpuHhWR52v+ybK0u29Q/55FW
1FBL/7x+kmURFAfLQqnTi8AUmxctvZnQGk+4vMxqysu5En8ovcukS/bZLkvL6gJR
ZW0+/cEYbiFE7naECzn8gFX9hBa5p2B56hkEucYrGpqAP9zpsOTrZuVYl3YNs6LJ
DXDfRKxv6LjAqkaUXKfT3LSO8OTjExGNy7Pd+x/RJ+TSkL/rXQ6wkov54dYFAgMB
AAGjggIuMIICKjAdBgNVHQ4EFgQU87VQybzHJmLyF68tYeRXoyOrDhMwHwYDVR0j
BBgwFoAUrvdm8QOy75nfjHGXin/lGdcwsVUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
MzAzMjdiOWUtMjI3YS00ZWJkLTgyNWItM2I5ODA5NWRjOTI3LTAvMC9BRUY3NjZG
MTAzQjJFRjk5REY4QzcxOTc4QTdGRTUxOUQ3MzBCMTU1LmNybDCBngYIKwYBBQUH
AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1
OTBiOTlhZi80L0FFRjc2NkYxMDNCMkVGOTlERjhDNzE5NzhBN0ZFNTE5RDczMEIx
NTUuY2VyMHEGCCsGAQUFBwELBGUwYzBhBggrBgEFBQcwC4ZVcnN5bmM6Ly9yLm1h
Z2VsbGFuLmlweG8uY29tL3JlcG8vMzAzMjdiOWUtMjI3YS00ZWJkLTgyNWItM2I5
ODA5NWRjOTI3LTAvMC9BUzE0MzE1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqSh0MA0GCSqGSIb3DQEB
CwUAA4IBAQCnatxqG55jHqQs1tjVftoT5o7ZF1tjYDnA19Tqv+xJQiFq8h9TCByE
nnEb1V/Af4TbRx0FwhGMGLoGUut5T9qoBcPxvglRXjSpzgyBdhQX36I7wR7tB3GY
TGYGjq5ZsR+bFFdIYROOfg/2mxaNBW+24geeZhW+arPYNm2bpZUCwPFFUWV1l6OX
Jc9vZ/UoLFwzZutN16l8Sk/HMU8OvcJAkuUCwMMRULd6///gm2FtIBxQi1M7I1rk
eYBoc8zzOBrnhC6JUqnwvjXx85M6yUMTGniosdHGSQNGDCIzxG3tqw8W1YXx5i20
l3SmMCmwss6EYHFUSkcQCbeuX//PsHZj
-----END CERTIFICATE-----
Generated at Fri Sep 4 22:17:41 2026 by rpki-client