Route Origin Authorization

$ rpki-client -vvvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS274328.roa
File:                     AS274328.roa (raw, json)
Hash identifier:          Ji1DupYc0Kp1TV9zAOhTCmXluEBByMpRyQ5fdfmm/tw=
Subject key identifier:   51:10:99:BC:25:A6:11:C7:F1:61:43:37:B9:E8:78:AD:F7:FF:93:CD
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       24868BE0AD1CF3CD848C0D2D690BF0E82DC1B80B
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS274328.roa
Signing time:             Thu 05 Nov 2026 13:11:09 +0000
ROA not before:           Thu 05 Nov 2026 13:06:09 +0000
ROA not after:            Thu 04 Nov 2027 13:11:09 +0000
asID:                     274328
IP address blocks:        169.40.204.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Nov 2026 15:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:86:8b:e0:ad:1c:f3:cd:84:8c:0d:2d:69:0b:f0:e8:2d:c1:b8:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: Nov  5 13:06:09 2026 GMT
            Not After : Nov  4 13:11:09 2027 GMT
        Subject: CN=511099BC25A611C7F1614337B9E878ADF7FF93CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:4a:42:08:c0:7b:ae:11:47:0b:03:ff:66:fa:
                    3f:e5:2e:53:c3:66:65:60:8a:09:6d:61:b6:3b:57:
                    41:5b:15:d8:0a:23:43:9c:a7:4b:93:e4:69:7d:87:
                    61:dd:3f:35:a7:dc:13:dd:3f:0d:e2:76:5e:12:1a:
                    6c:3f:69:a1:b6:c8:ac:3d:d6:02:f3:16:3c:b8:00:
                    3c:41:fc:50:a9:ee:0e:2f:fd:59:34:4a:47:6d:84:
                    da:88:28:bc:91:75:b1:1e:82:ca:5d:56:a3:e7:67:
                    00:48:cb:eb:44:7e:7e:af:d3:ce:af:06:f2:a3:ca:
                    79:da:6f:1e:1a:28:70:78:dc:af:97:58:ad:91:2a:
                    70:10:aa:09:47:99:1f:49:d9:06:de:7a:00:d5:ce:
                    2a:da:47:5b:e5:e0:14:37:22:dd:78:f6:9a:76:b7:
                    29:1e:ce:4a:5c:d3:a2:a6:8a:5c:2a:b7:7d:7f:13:
                    7e:06:99:59:c6:4e:29:d6:7b:fc:d7:ce:62:3f:c4:
                    cc:14:8c:74:08:d7:94:8e:06:07:d6:e9:67:6d:03:
                    46:e0:79:42:03:a0:8b:6e:ff:90:5c:06:4c:74:0a:
                    d5:ec:7f:d0:f8:e9:c8:b7:9e:55:e3:b4:42:1b:e6:
                    3c:27:20:9e:62:f9:54:5f:4c:0f:c9:9c:4b:75:a5:
                    f7:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:10:99:BC:25:A6:11:C7:F1:61:43:37:B9:E8:78:AD:F7:FF:93:CD
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS274328.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.40.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         72:1e:ac:6e:cf:62:98:a9:3a:45:1e:31:f6:9d:9d:5d:cf:86:
         48:4b:50:7a:2a:e4:b2:0e:52:cc:24:e1:8d:30:6b:0c:40:3e:
         f3:29:9f:67:d6:cd:87:90:d5:05:c4:3b:01:d5:f9:b8:8b:77:
         7b:e6:fc:7e:6d:0c:41:33:06:bd:7e:39:f3:a1:f8:46:01:9c:
         14:45:d1:ab:4f:5f:3f:c8:25:d7:da:1a:fb:88:d4:98:48:94:
         11:01:10:77:f7:5e:78:b8:bd:fe:11:4f:c6:2c:f0:37:71:bf:
         a7:d8:d7:53:78:66:6c:23:08:a7:e0:1a:b5:ca:6a:0f:80:78:
         e7:01:cd:34:17:72:21:63:c0:16:4c:60:ca:df:19:1a:b0:01:
         e4:7a:80:af:50:4f:6d:46:96:cd:5a:c5:94:2d:fc:23:86:80:
         ce:a2:16:ba:f8:d3:70:22:41:13:70:1f:be:7f:ba:e9:59:2e:
         89:1e:92:18:b1:d6:ee:8f:17:b8:fe:eb:46:b6:1e:fc:9f:73:
         89:93:00:07:bf:6d:62:ab:0e:50:7e:90:6e:b2:7a:35:e6:b2:
         9a:a1:7c:c7:c8:a1:45:7c:6e:0b:9e:ff:f0:fd:17:fa:9f:f6:
         b2:46:f2:4c:27:13:48:d1:a2:bd:84:10:42:3a:c2:af:38:36:
         25:65:87:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 08:31:11 2026 by rpki-client