Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS152726.roa
File:                     AS152726.roa (raw, json)
Hash identifier:          Y0ui9sSHQiQbdKV9KVFy2ft69nuzKD1xsrFNAja2Hp8=
Subject key identifier:   9B:00:A4:F0:0A:2C:AC:74:C8:66:EE:8F:83:8A:91:7B:9D:03:23:23
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       1C27E9AF3E71D9055727D68F48DC295A6ABCE6C5
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS152726.roa
Signing time:             Tue 23 Jun 2026 16:40:29 +0000
ROA not before:           Tue 23 Jun 2026 16:35:29 +0000
ROA not after:            Tue 22 Jun 2027 16:40:29 +0000
asID:                     152726
IP address blocks:        169.40.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 28 Jun 2026 10:05:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:27:e9:af:3e:71:d9:05:57:27:d6:8f:48:dc:29:5a:6a:bc:e6:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: Jun 23 16:35:29 2026 GMT
            Not After : Jun 22 16:40:29 2027 GMT
        Subject: CN=9B00A4F00A2CAC74C866EE8F838A917B9D032323
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:02:05:55:13:d8:ba:55:0e:b1:b0:f3:e6:ce:
                    4d:9e:b0:ef:cb:15:1d:b7:f4:ab:2d:b5:f0:c1:3c:
                    a7:37:75:9f:3b:8f:ff:b5:b2:3a:c0:a8:55:7f:81:
                    94:a4:49:1a:c5:72:29:2c:e1:46:66:b7:70:a1:55:
                    44:ac:a1:15:8a:a5:69:d4:1f:0d:97:4a:34:4e:65:
                    c8:87:96:be:3c:13:5e:16:e7:be:15:7f:c7:e9:d8:
                    df:5e:1e:4f:8f:bc:3f:87:e8:87:ff:dc:82:4b:64:
                    93:2c:32:d7:c3:1d:31:8d:67:37:3d:b7:ed:74:c8:
                    23:33:e6:ca:6a:26:70:46:bd:b3:50:da:fb:b1:ec:
                    49:27:66:56:df:18:7f:85:ce:86:04:31:91:17:c3:
                    cd:61:c8:57:32:3f:94:65:8f:93:f9:c4:ca:8a:e8:
                    f5:d0:29:0b:a3:25:f5:9f:2c:54:77:8e:55:2e:24:
                    79:c1:cd:db:17:2f:18:ef:40:e8:24:fd:cb:ee:80:
                    15:57:88:a9:ef:f6:98:65:b7:4f:58:67:fd:e4:29:
                    55:65:e2:b0:9c:9f:29:ba:a9:4e:20:97:6b:e3:3b:
                    18:4d:87:b6:4e:ad:6c:57:93:b6:83:6c:85:af:3b:
                    af:28:a8:d5:7e:db:78:77:af:3c:e9:8a:f1:6e:e0:
                    c7:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:00:A4:F0:0A:2C:AC:74:C8:66:EE:8F:83:8A:91:7B:9D:03:23:23
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS152726.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.40.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:50:9b:49:b3:1a:63:27:3a:fa:f4:10:2e:31:a8:59:ff:9b:
         51:14:48:2e:de:58:42:4d:df:7f:12:ad:d5:3f:07:ac:0f:fa:
         b0:10:90:9d:2c:33:4e:f4:a4:1a:be:c9:48:81:a6:ae:b5:eb:
         09:4c:fb:73:f8:0b:c8:e8:86:e5:59:6f:35:db:c9:0d:7b:10:
         24:1c:90:77:81:8e:45:a8:f6:0c:c9:4c:69:21:1c:11:5b:97:
         c2:64:07:47:9f:28:bd:da:3b:50:9e:19:af:ab:81:8a:fc:37:
         57:7b:6d:3e:bb:39:95:c7:8c:29:df:4e:3f:ec:aa:c0:24:d0:
         2e:b7:f3:a5:0d:7b:c5:79:31:09:cb:29:bf:46:c9:68:85:c2:
         83:4f:84:98:63:ef:9c:99:a8:6f:36:9c:e8:62:69:1e:4c:8c:
         50:97:de:80:22:73:38:19:9c:1c:49:26:36:9c:27:84:c8:4d:
         56:af:5e:2a:57:1e:61:55:ea:83:b6:88:03:fc:47:9a:65:e4:
         40:75:9a:c4:2e:83:6b:3d:dd:62:f9:60:1c:e2:9b:7e:8b:f1:
         e0:10:3a:c2:d4:b8:99:e9:57:f0:41:01:af:88:9a:e6:c4:11:
         8f:f2:1f:e2:72:2d:93:04:c1:2e:03:26:2e:b1:ca:d8:08:8c:
         58:e4:41:cb
-----BEGIN CERTIFICATE-----
MIIFJTCCBA2gAwIBAgIUHCfprz5x2QVXJ9aPSNwpWmq85sUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUVGNzY2RjEwM0IyRUY5OURGOEM3MTk3OEE3RkU1MTlE
NzMwQjE1NTAeFw0yNjA2MjMxNjM1MjlaFw0yNzA2MjIxNjQwMjlaMDMxMTAvBgNV
BAMTKDlCMDBBNEYwMEEyQ0FDNzRDODY2RUU4RjgzOEE5MTdCOUQwMzIzMjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHAgVVE9i6VQ6xsPPmzk2esO/L
FR239KsttfDBPKc3dZ87j/+1sjrAqFV/gZSkSRrFciks4UZmt3ChVUSsoRWKpWnU
Hw2XSjROZciHlr48E14W574Vf8fp2N9eHk+PvD+H6If/3IJLZJMsMtfDHTGNZzc9
t+10yCMz5spqJnBGvbNQ2vux7EknZlbfGH+FzoYEMZEXw81hyFcyP5Rlj5P5xMqK
6PXQKQujJfWfLFR3jlUuJHnBzdsXLxjvQOgk/cvugBVXiKnv9phlt09YZ/3kKVVl
4rCcnym6qU4gl2vjOxhNh7ZOrWxXk7aDbIWvO68oqNV+23h3rzzpivFu4MdPAgMB
AAGjggIvMIICKzAdBgNVHQ4EFgQUmwCk8AosrHTIZu6Pg4qRe50DIyMwHwYDVR0j
BBgwFoAUrvdm8QOy75nfjHGXin/lGdcwsVUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
MzAzMjdiOWUtMjI3YS00ZWJkLTgyNWItM2I5ODA5NWRjOTI3LTAvMC9BRUY3NjZG
MTAzQjJFRjk5REY4QzcxOTc4QTdGRTUxOUQ3MzBCMTU1LmNybDCBngYIKwYBBQUH
AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1
OTBiOTlhZi80L0FFRjc2NkYxMDNCMkVGOTlERjhDNzE5NzhBN0ZFNTE5RDczMEIx
NTUuY2VyMHIGCCsGAQUFBwELBGYwZDBiBggrBgEFBQcwC4ZWcnN5bmM6Ly9yLm1h
Z2VsbGFuLmlweG8uY29tL3JlcG8vMzAzMjdiOWUtMjI3YS00ZWJkLTgyNWItM2I5
ODA5NWRjOTI3LTAvMC9BUzE1MjcyNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKkoOzANBgkqhkiG9w0B
AQsFAAOCAQEAhVCbSbMaYyc6+vQQLjGoWf+bURRILt5YQk3ffxKt1T8HrA/6sBCQ
nSwzTvSkGr7JSIGmrrXrCUz7c/gLyOiG5VlvNdvJDXsQJByQd4GORaj2DMlMaSEc
EVuXwmQHR58ovdo7UJ4Zr6uBivw3V3ttPrs5lceMKd9OP+yqwCTQLrfzpQ17xXkx
Ccspv0bJaIXCg0+EmGPvnJmobzac6GJpHkyMUJfegCJzOBmcHEkmNpwnhMhNVq9e
KlceYVXqg7aIA/xHmmXkQHWaxC6Daz3dYvlgHOKbfovx4BA6wtS4melX8EEBr4ia
5sQRj/If4nItkwTBLgMmLrHK2AiMWORByw==
-----END CERTIFICATE-----
Generated at Sat Jun 27 19:52:37 2026 by rpki-client