Route Origin Authorization

$ rpki-client -vvvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS150142.roa
File:                     AS150142.roa (raw, json)
Hash identifier:          nh+Ck0ZsMqLyX0aAm9KfxqholgbjlOC2n7XLchghvXQ=
Subject key identifier:   55:2B:08:FB:19:33:D5:71:2D:E0:C0:DF:31:F0:BC:DD:58:2D:91:07
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       355496FCC856267AF7721E78BD3DB3D0310091CC
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS150142.roa
Signing time:             Sat 07 Nov 2026 04:52:39 +0000
ROA not before:           Sat 07 Nov 2026 04:47:39 +0000
ROA not after:            Sat 06 Nov 2027 04:52:39 +0000
asID:                     150142
IP address blocks:        169.40.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Nov 2026 15:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:54:96:fc:c8:56:26:7a:f7:72:1e:78:bd:3d:b3:d0:31:00:91:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: Nov  7 04:47:39 2026 GMT
            Not After : Nov  6 04:52:39 2027 GMT
        Subject: CN=552B08FB1933D5712DE0C0DF31F0BCDD582D9107
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:0d:91:8b:dc:a1:30:1f:e2:9d:ed:f5:be:9f:
                    4e:a5:91:20:7f:43:db:56:62:b8:04:98:6e:40:d9:
                    2f:07:60:b7:77:b6:08:3d:a2:e3:9a:7e:ef:cb:b5:
                    76:4b:97:fd:f6:d8:9b:74:51:cc:9a:cc:7b:d1:38:
                    7d:f0:77:87:fb:a1:cd:05:f0:f3:98:38:e7:92:67:
                    a4:a5:e7:fb:21:dc:81:29:a4:21:a9:b7:d5:e3:da:
                    6c:77:36:ce:77:ea:37:9c:f0:4e:90:ed:10:07:7a:
                    e2:99:6c:e4:3d:de:8f:84:dd:53:24:cf:5a:04:f2:
                    ac:e8:3e:36:41:e6:58:64:7c:20:ba:fd:37:fb:55:
                    31:68:f9:81:2a:f2:8f:5e:e1:bf:f3:fd:e8:1c:86:
                    a4:72:4d:bb:8c:15:c4:35:2b:43:58:fe:59:3f:39:
                    2b:60:e7:f4:4c:33:99:b2:33:64:3f:14:04:5b:72:
                    52:d3:4f:cb:70:f6:e0:4b:b2:0c:d9:a7:04:77:d0:
                    a6:70:28:d8:5b:bc:bf:9c:bb:f6:7f:36:13:09:8c:
                    cf:81:87:1e:42:b1:f9:ec:7b:95:6a:9a:38:cb:bc:
                    80:37:53:3e:73:83:2f:80:85:7b:ca:f0:42:50:ca:
                    a7:15:87:50:31:c0:9b:70:b4:b7:c5:d4:93:c8:25:
                    7e:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:2B:08:FB:19:33:D5:71:2D:E0:C0:DF:31:F0:BC:DD:58:2D:91:07
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS150142.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.40.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:dd:10:b9:55:14:bc:9c:57:06:06:64:f8:6b:2d:ab:7c:8a:
         f8:82:53:5d:0e:1f:89:72:df:2a:e8:82:2c:73:4a:82:7e:3c:
         16:ad:62:de:83:75:ab:e6:18:40:06:f3:26:a6:5e:d2:c9:21:
         86:73:27:7e:b4:2b:a3:fb:74:c5:e8:7f:30:62:1f:a8:89:06:
         9b:9b:3b:27:be:c1:c9:26:88:02:d6:67:46:50:75:ba:fd:fc:
         8c:04:76:34:b8:a5:6e:dc:0f:ae:50:fd:b1:ce:ea:00:a5:51:
         d4:ce:c5:1e:25:33:8e:e1:c8:a1:6c:75:f0:dc:29:9e:4c:46:
         2b:c8:45:51:fd:50:dd:0e:0b:93:56:b7:b4:47:91:7e:91:47:
         fc:d4:3f:63:f9:a9:dc:47:e5:66:e3:22:29:89:25:20:e1:29:
         a1:fc:3f:bd:50:00:1b:fb:43:cf:86:b8:8e:6c:b2:43:b4:b1:
         68:97:ff:ad:7c:d9:69:3b:54:67:c4:0e:cc:59:40:51:c5:b2:
         08:31:5b:44:4e:b2:72:77:d1:f3:1b:45:ad:0b:95:63:cd:44:
         2d:13:84:df:c1:5a:28:d0:fb:88:4d:61:38:a8:0a:e4:e5:e7:
         ec:2e:8d:12:d9:7b:21:c1:c8:77:e2:09:18:fb:7d:59:28:f7:
         87:d7:24:1e
-----BEGIN CERTIFICATE-----
MIIFJTCCBA2gAwIBAgIUNVSW/MhWJnr3ch54vT2z0DEAkcwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUVGNzY2RjEwM0IyRUY5OURGOEM3MTk3OEE3RkU1MTlE
NzMwQjE1NTAeFw0yNjExMDcwNDQ3MzlaFw0yNzExMDYwNDUyMzlaMDMxMTAvBgNV
BAMTKDU1MkIwOEZCMTkzM0Q1NzEyREUwQzBERjMxRjBCQ0RENTgyRDkxMDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUDZGL3KEwH+Kd7fW+n06lkSB/
Q9tWYrgEmG5A2S8HYLd3tgg9ouOafu/LtXZLl/322Jt0UcyazHvROH3wd4f7oc0F
8POYOOeSZ6Sl5/sh3IEppCGpt9Xj2mx3Ns536jec8E6Q7RAHeuKZbOQ93o+E3VMk
z1oE8qzoPjZB5lhkfCC6/Tf7VTFo+YEq8o9e4b/z/egchqRyTbuMFcQ1K0NY/lk/
OStg5/RMM5myM2Q/FARbclLTT8tw9uBLsgzZpwR30KZwKNhbvL+cu/Z/NhMJjM+B
hx5Csfnse5VqmjjLvIA3Uz5zgy+AhXvK8EJQyqcVh1AxwJtwtLfF1JPIJX49AgMB
AAGjggIvMIICKzAdBgNVHQ4EFgQUVSsI+xkz1XEt4MDfMfC83VgtkQcwHwYDVR0j
BBgwFoAUrvdm8QOy75nfjHGXin/lGdcwsVUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
MzAzMjdiOWUtMjI3YS00ZWJkLTgyNWItM2I5ODA5NWRjOTI3LTAvMC9BRUY3NjZG
MTAzQjJFRjk5REY4QzcxOTc4QTdGRTUxOUQ3MzBCMTU1LmNybDCBngYIKwYBBQUH
AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1
OTBiOTlhZi80L0FFRjc2NkYxMDNCMkVGOTlERjhDNzE5NzhBN0ZFNTE5RDczMEIx
NTUuY2VyMHIGCCsGAQUFBwELBGYwZDBiBggrBgEFBQcwC4ZWcnN5bmM6Ly9yLm1h
Z2VsbGFuLmlweG8uY29tL3JlcG8vMzAzMjdiOWUtMjI3YS00ZWJkLTgyNWItM2I5
ODA5NWRjOTI3LTAvMC9BUzE1MDE0Mi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKkodDANBgkqhkiG9w0B
AQsFAAOCAQEAQt0QuVUUvJxXBgZk+Gstq3yK+IJTXQ4fiXLfKuiCLHNKgn48Fq1i
3oN1q+YYQAbzJqZe0skhhnMnfrQro/t0xeh/MGIfqIkGm5s7J77BySaIAtZnRlB1
uv38jAR2NLilbtwPrlD9sc7qAKVR1M7FHiUzjuHIoWx18NwpnkxGK8hFUf1Q3Q4L
k1a3tEeRfpFH/NQ/Y/mp3EflZuMiKYklIOEpofw/vVAAG/tDz4a4jmyyQ7SxaJf/
rXzZaTtUZ8QOzFlAUcWyCDFbRE6ycnfR8xtFrQuVY81ELROE38FaKND7iE1hOKgK
5OXn7C6NEtl7IcHId+IJGPt9WSj3h9ckHg==
-----END CERTIFICATE-----
Generated at Tue Nov 10 08:30:10 2026 by rpki-client