Route Origin Authorization

$ rpki-client -vvvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS152726.roa
File:                     AS152726.roa (raw, json)
Hash identifier:          GDtL3cVki2UOIBCtudUHcSI18yqtEHCHH3DX4zvA8+w=
Subject key identifier:   D9:FA:8B:11:FD:A0:0F:F5:9B:02:52:08:26:D7:A9:76:BB:E6:E2:49
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       23C32BEC3FE4CC5BCA742233479D070913AA6DCB
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS152726.roa
Signing time:             Sun 11 Oct 2026 13:01:20 +0000
ROA not before:           Sun 11 Oct 2026 12:56:20 +0000
ROA not after:            Sun 10 Oct 2027 13:01:20 +0000
asID:                     152726
IP address blocks:        13.141.54.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:c3:2b:ec:3f:e4:cc:5b:ca:74:22:33:47:9d:07:09:13:aa:6d:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: Oct 11 12:56:20 2026 GMT
            Not After : Oct 10 13:01:20 2027 GMT
        Subject: CN=D9FA8B11FDA00FF59B02520826D7A976BBE6E249
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:5e:21:ad:0d:47:94:f7:f0:42:01:a7:a6:98:
                    dd:23:9d:6a:bd:32:70:f7:b7:b4:c5:0e:87:d8:38:
                    ca:71:7f:70:52:40:27:cc:80:32:f5:26:e6:61:55:
                    2b:b2:c5:77:27:bd:c9:32:7f:1e:88:d9:32:33:77:
                    7b:22:74:6a:02:fc:e7:e0:c2:59:dd:d7:49:5b:31:
                    60:f0:3d:33:fe:5e:47:67:c8:0e:cf:63:7b:60:80:
                    8f:86:cd:b4:cf:ba:dc:eb:e5:bb:0a:19:00:33:f8:
                    6a:97:ef:c7:eb:85:b1:c4:d3:4f:22:91:c0:c1:1f:
                    ca:07:ac:5c:10:20:9d:27:2a:65:f3:04:94:9f:75:
                    b5:68:f1:d0:53:b0:29:0e:f8:56:84:8e:bf:6a:02:
                    84:72:e8:d9:24:fb:dc:0c:48:91:c7:2c:89:65:fd:
                    2e:72:9d:d6:29:ed:17:cd:3d:4b:73:c3:6f:11:a4:
                    db:39:36:7a:c3:bb:a7:04:a8:a8:68:8f:59:f4:a5:
                    07:e7:63:34:b8:59:61:5a:bc:6b:d8:dc:ab:a8:bd:
                    6b:ac:12:b2:62:a1:5d:1f:9a:e4:c7:a5:2a:8c:f2:
                    95:73:83:a3:08:98:24:4d:21:45:d3:e4:23:f7:ff:
                    f1:cb:43:61:fe:07:4f:ee:59:09:0f:d0:db:34:d1:
                    b8:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:FA:8B:11:FD:A0:0F:F5:9B:02:52:08:26:D7:A9:76:BB:E6:E2:49
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS152726.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.141.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:e7:45:e8:e0:77:ce:6a:1e:2c:e0:f4:0b:08:16:5b:48:85:
         18:47:9a:18:af:34:2e:67:30:3b:18:22:1d:1f:4a:10:05:4f:
         4d:23:32:6e:c8:3f:02:63:b2:fd:fa:82:27:fa:8c:c3:f3:92:
         07:e4:d0:1c:3d:fb:1a:35:a7:8c:5a:a9:f4:12:87:ac:bd:10:
         47:6b:19:34:37:a6:92:6c:30:d3:84:4c:9c:3f:66:43:09:9e:
         8b:45:b8:b4:8f:a3:1e:f4:e4:90:ee:ba:c1:2a:20:03:ba:b3:
         a7:da:2b:a1:00:4f:92:31:f4:69:85:92:4d:e5:7b:70:48:e0:
         4f:86:69:07:a8:3c:7b:09:f0:84:fa:30:15:18:21:ee:c9:be:
         ab:7a:18:b6:6e:c3:01:e5:76:e9:70:e2:c6:cf:4e:f1:cb:6c:
         48:9e:a3:81:13:ed:10:58:fb:7d:0a:68:73:96:bc:54:7c:8c:
         07:6c:c5:8a:45:1c:a3:2a:f0:23:0a:21:08:b5:a7:19:3c:5e:
         af:f2:96:e6:ab:4f:c3:f3:b1:d3:e3:e8:00:27:29:0d:56:1c:
         32:ec:e1:0f:66:f4:34:4e:ec:9e:07:93:25:ad:c6:6a:99:b0:
         d1:2d:32:09:63:8d:01:ff:94:4e:d0:83:11:99:45:4d:ca:ef:
         b8:cc:1b:b5
-----BEGIN CERTIFICATE-----
MIIFJTCCBA2gAwIBAgIUI8Mr7D/kzFvKdCIzR50HCROqbcswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUVGNzY2RjEwM0IyRUY5OURGOEM3MTk3OEE3RkU1MTlE
NzMwQjE1NTAeFw0yNjEwMTExMjU2MjBaFw0yNzEwMTAxMzAxMjBaMDMxMTAvBgNV
BAMTKEQ5RkE4QjExRkRBMDBGRjU5QjAyNTIwODI2RDdBOTc2QkJFNkUyNDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHXiGtDUeU9/BCAaemmN0jnWq9
MnD3t7TFDofYOMpxf3BSQCfMgDL1JuZhVSuyxXcnvckyfx6I2TIzd3sidGoC/Ofg
wlnd10lbMWDwPTP+XkdnyA7PY3tggI+GzbTPutzr5bsKGQAz+GqX78frhbHE008i
kcDBH8oHrFwQIJ0nKmXzBJSfdbVo8dBTsCkO+FaEjr9qAoRy6Nkk+9wMSJHHLIll
/S5yndYp7RfNPUtzw28RpNs5NnrDu6cEqKhoj1n0pQfnYzS4WWFavGvY3KuovWus
ErJioV0fmuTHpSqM8pVzg6MImCRNIUXT5CP3//HLQ2H+B0/uWQkP0Ns00bjFAgMB
AAGjggIvMIICKzAdBgNVHQ4EFgQU2fqLEf2gD/WbAlIIJtepdrvm4kkwHwYDVR0j
BBgwFoAUrvdm8QOy75nfjHGXin/lGdcwsVUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
MzAzMjdiOWUtMjI3YS00ZWJkLTgyNWItM2I5ODA5NWRjOTI3LTAvMC9BRUY3NjZG
MTAzQjJFRjk5REY4QzcxOTc4QTdGRTUxOUQ3MzBCMTU1LmNybDCBngYIKwYBBQUH
AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1
OTBiOTlhZi80L0FFRjc2NkYxMDNCMkVGOTlERjhDNzE5NzhBN0ZFNTE5RDczMEIx
NTUuY2VyMHIGCCsGAQUFBwELBGYwZDBiBggrBgEFBQcwC4ZWcnN5bmM6Ly9yLm1h
Z2VsbGFuLmlweG8uY29tL3JlcG8vMzAzMjdiOWUtMjI3YS00ZWJkLTgyNWItM2I5
ODA5NWRjOTI3LTAvMC9BUzE1MjcyNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAA2NNjANBgkqhkiG9w0B
AQsFAAOCAQEAXedF6OB3zmoeLOD0CwgWW0iFGEeaGK80LmcwOxgiHR9KEAVPTSMy
bsg/AmOy/fqCJ/qMw/OSB+TQHD37GjWnjFqp9BKHrL0QR2sZNDemkmww04RMnD9m
Qwmei0W4tI+jHvTkkO66wSogA7qzp9oroQBPkjH0aYWSTeV7cEjgT4ZpB6g8ewnw
hPowFRgh7sm+q3oYtm7DAeV26XDixs9O8ctsSJ6jgRPtEFj7fQpoc5a8VHyMB2zF
ikUcoyrwIwohCLWnGTxer/KW5qtPw/Ox0+PoACcpDVYcMuzhD2b0NE7sngeTJa3G
apmw0S0yCWONAf+UTtCDEZlFTcrvuMwbtQ==
-----END CERTIFICATE-----
Generated at Sun Oct 11 22:14:52 2026 by rpki-client