Route Origin Authorization

$ rpki-client -vvvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS30456.roa
File:                     AS30456.roa (raw, json)
Hash identifier:          zjmwUM6uskzMzxZP3BMhfkhQHvJnz6COngaP+gv8uNU=
Subject key identifier:   49:51:EF:CE:ED:2B:E9:BD:32:0D:5E:7C:80:18:EA:FA:21:AF:1E:19
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       2B825BD4931759398938A8DBC4A09BE539802DCA
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS30456.roa
Signing time:             Sat 17 Oct 2026 04:14:56 +0000
ROA not before:           Sat 17 Oct 2026 04:09:56 +0000
ROA not after:            Sat 16 Oct 2027 04:14:56 +0000
asID:                     30456
IP address blocks:        169.40.46.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 13:57:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:82:5b:d4:93:17:59:39:89:38:a8:db:c4:a0:9b:e5:39:80:2d:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: Oct 17 04:09:56 2026 GMT
            Not After : Oct 16 04:14:56 2027 GMT
        Subject: CN=4951EFCEED2BE9BD320D5E7C8018EAFA21AF1E19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:ab:32:46:82:74:3b:e1:60:04:74:04:5f:9f:
                    c8:02:12:6f:85:d4:c1:c9:8f:03:e0:ed:11:39:25:
                    c1:82:9e:93:8f:e7:db:bd:85:e9:6a:bc:00:09:66:
                    35:87:f7:ed:4e:75:3f:2d:bd:74:7a:d1:60:b6:5e:
                    ba:c2:94:e4:28:39:a1:9f:ba:c5:5b:3f:cd:78:71:
                    43:90:c1:be:82:c5:7b:86:60:32:b1:c9:06:60:99:
                    bc:2d:7c:bd:fe:be:05:18:c6:af:51:f4:ad:b0:29:
                    cc:fa:f3:27:50:ff:26:ab:92:6d:bd:83:15:73:e2:
                    62:e7:22:b9:5f:c9:21:8f:e0:05:0a:d6:b7:be:43:
                    85:b3:cc:36:bb:4f:75:f2:5b:c3:ee:fb:4b:7e:1a:
                    b4:75:68:ff:98:37:e9:f4:43:14:bd:bb:91:f8:6a:
                    f9:16:19:34:0e:36:3c:bf:50:c9:5f:2c:15:47:f1:
                    c7:2d:7d:71:88:c9:79:52:fc:56:e2:83:4e:3e:33:
                    82:27:ac:cf:d3:35:e4:da:f8:76:59:f9:44:e1:a8:
                    24:19:82:45:90:3a:18:f4:94:2f:0c:5c:4b:21:66:
                    aa:89:61:74:06:31:aa:cd:4d:b8:28:5e:65:d7:54:
                    f0:4a:db:ab:86:d7:6b:54:30:be:68:5a:55:e5:e7:
                    a6:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:51:EF:CE:ED:2B:E9:BD:32:0D:5E:7C:80:18:EA:FA:21:AF:1E:19
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS30456.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.40.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:8d:9a:97:17:ff:7d:21:79:38:81:7e:43:c6:3b:5f:9a:3e:
         14:67:50:20:ca:ab:d1:8c:25:ab:36:1b:c5:a8:57:7d:f5:e4:
         c0:25:89:1f:76:29:c4:9f:5d:04:7f:d9:fd:cd:d6:29:97:70:
         4b:70:18:1c:a4:36:58:71:8d:fe:29:a6:7b:80:85:34:21:b1:
         18:7d:a1:99:5d:d4:36:7c:a7:ca:dd:d6:a5:cf:ee:35:13:fb:
         e5:d8:41:cf:ba:8e:29:40:8f:5c:61:21:2b:b1:ec:79:11:b1:
         67:91:a8:6b:6d:56:fb:10:e9:c4:57:c3:88:d9:37:63:f4:8f:
         b1:33:84:cd:00:fd:c9:d5:0f:d6:ef:e6:c4:7a:b4:68:7f:1a:
         ae:62:ed:7e:c2:25:f7:ef:f4:f2:fb:86:0e:48:e0:c3:72:64:
         2e:8d:0c:f4:e5:9a:3a:5f:2f:cc:bc:ac:20:48:26:8a:cd:be:
         25:9d:10:3e:ac:45:cc:d6:1c:35:31:97:59:27:88:7c:de:0b:
         77:d3:92:91:f5:c4:9e:39:2f:7f:d3:45:d3:ef:a6:c8:c0:8d:
         21:21:84:35:65:72:2a:4f:50:db:5c:0f:d7:b2:70:19:96:64:
         b8:fb:4b:d5:f2:de:46:18:d3:66:13:cf:28:4c:c1:a6:c9:67:
         4c:ae:17:78
-----BEGIN CERTIFICATE-----
MIIFJDCCBAygAwIBAgIUK4Jb1JMXWTmJOKjbxKCb5TmALcowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUVGNzY2RjEwM0IyRUY5OURGOEM3MTk3OEE3RkU1MTlE
NzMwQjE1NTAeFw0yNjEwMTcwNDA5NTZaFw0yNzEwMTYwNDE0NTZaMDMxMTAvBgNV
BAMTKDQ5NTFFRkNFRUQyQkU5QkQzMjBENUU3QzgwMThFQUZBMjFBRjFFMTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCMqzJGgnQ74WAEdARfn8gCEm+F
1MHJjwPg7RE5JcGCnpOP59u9helqvAAJZjWH9+1OdT8tvXR60WC2XrrClOQoOaGf
usVbP814cUOQwb6CxXuGYDKxyQZgmbwtfL3+vgUYxq9R9K2wKcz68ydQ/yarkm29
gxVz4mLnIrlfySGP4AUK1re+Q4WzzDa7T3XyW8Pu+0t+GrR1aP+YN+n0QxS9u5H4
avkWGTQONjy/UMlfLBVH8cctfXGIyXlS/Fbig04+M4InrM/TNeTa+HZZ+UThqCQZ
gkWQOhj0lC8MXEshZqqJYXQGMarNTbgoXmXXVPBK26uG12tUML5oWlXl56Y5AgMB
AAGjggIuMIICKjAdBgNVHQ4EFgQUSVHvzu0r6b0yDV58gBjq+iGvHhkwHwYDVR0j
BBgwFoAUrvdm8QOy75nfjHGXin/lGdcwsVUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
MzAzMjdiOWUtMjI3YS00ZWJkLTgyNWItM2I5ODA5NWRjOTI3LTAvMC9BRUY3NjZG
MTAzQjJFRjk5REY4QzcxOTc4QTdGRTUxOUQ3MzBCMTU1LmNybDCBngYIKwYBBQUH
AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1
OTBiOTlhZi80L0FFRjc2NkYxMDNCMkVGOTlERjhDNzE5NzhBN0ZFNTE5RDczMEIx
NTUuY2VyMHEGCCsGAQUFBwELBGUwYzBhBggrBgEFBQcwC4ZVcnN5bmM6Ly9yLm1h
Z2VsbGFuLmlweG8uY29tL3JlcG8vMzAzMjdiOWUtMjI3YS00ZWJkLTgyNWItM2I5
ODA5NWRjOTI3LTAvMC9BUzMwNDU2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqSguMA0GCSqGSIb3DQEB
CwUAA4IBAQBEjZqXF/99IXk4gX5Dxjtfmj4UZ1AgyqvRjCWrNhvFqFd99eTAJYkf
dinEn10Ef9n9zdYpl3BLcBgcpDZYcY3+KaZ7gIU0IbEYfaGZXdQ2fKfK3dalz+41
E/vl2EHPuo4pQI9cYSErsex5EbFnkahrbVb7EOnEV8OI2Tdj9I+xM4TNAP3J1Q/W
7+bEerRofxquYu1+wiX37/Ty+4YOSODDcmQujQz05Zo6Xy/MvKwgSCaKzb4lnRA+
rEXM1hw1MZdZJ4h83gt305KR9cSeOS9/00XT76bIwI0hIYQ1ZXIqT1DbXA/XsnAZ
lmS4+0vV8t5GGNNmE88oTMGmyWdMrhd4
-----END CERTIFICATE-----
Generated at Tue Oct 27 19:16:25 2026 by rpki-client