Route Origin Authorization

$ rpki-client -vvvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS401160.roa
File:                     AS401160.roa (raw, json)
Hash identifier:          l9HA1pwpLGfw76/7nXjaklHyjWzhauc4qedBz05m+iI=
Subject key identifier:   4E:1B:9A:74:87:E8:3F:6A:95:9D:8D:34:8B:FF:7B:C6:10:57:FF:36
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       741595B5FF50C46A4D2529E06C1A8A7E4E0EC53A
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS401160.roa
Signing time:             Sat 22 Aug 2026 05:29:44 +0000
ROA not before:           Sat 22 Aug 2026 05:24:44 +0000
ROA not after:            Sat 21 Aug 2027 05:29:44 +0000
asID:                     401160
IP address blocks:        169.40.150.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 10 Sep 2026 21:04:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:15:95:b5:ff:50:c4:6a:4d:25:29:e0:6c:1a:8a:7e:4e:0e:c5:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: Aug 22 05:24:44 2026 GMT
            Not After : Aug 21 05:29:44 2027 GMT
        Subject: CN=4E1B9A7487E83F6A959D8D348BFF7BC61057FF36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:fd:de:f3:8a:74:1f:d6:59:1d:d6:0e:57:db:
                    b1:68:3e:77:c4:68:03:56:89:97:23:be:82:be:fb:
                    4d:a6:fa:f8:04:e5:a7:29:d6:61:22:f9:ee:44:a8:
                    ca:09:06:76:99:66:9b:a3:36:ad:d2:c5:d8:f7:00:
                    42:e8:29:f3:aa:c2:87:9e:fb:4d:1d:d3:52:8e:26:
                    e8:13:d0:16:51:40:6b:61:1d:25:68:ca:61:6a:f9:
                    fe:4f:05:25:10:57:bf:92:7a:6d:84:69:f6:36:70:
                    8f:f8:2b:1a:10:6a:55:6e:24:09:a4:b7:5b:d4:15:
                    ce:a4:8c:4b:2d:80:a7:65:3e:60:14:38:54:89:38:
                    c5:40:2b:5d:fa:9d:a8:97:b2:5d:04:fe:c6:f5:16:
                    23:7e:42:9f:77:80:14:02:cb:27:f7:46:3b:96:eb:
                    15:2c:0f:52:1d:ab:ad:f2:d7:af:1a:a6:90:b9:c2:
                    8f:38:80:30:45:eb:d3:df:90:cb:df:4a:f4:00:5d:
                    e5:9f:73:56:c8:df:3e:74:5f:3a:0c:ce:2d:7d:1b:
                    24:a3:9a:7e:31:de:79:58:76:72:3e:e3:1a:64:2e:
                    5d:9f:dc:06:d2:8a:c5:ce:02:c9:4f:3b:ce:c6:90:
                    70:49:3e:d4:fc:cb:97:cf:d2:61:06:3d:ac:81:6b:
                    f3:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:1B:9A:74:87:E8:3F:6A:95:9D:8D:34:8B:FF:7B:C6:10:57:FF:36
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS401160.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.40.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:1a:af:ed:6e:0f:05:08:3d:a1:cb:8b:ec:b8:29:8f:4f:ec:
         65:3e:96:8c:ff:3a:0d:74:fc:d5:ae:0d:d7:23:88:2d:25:ee:
         53:a8:4b:bb:12:dc:99:90:4c:87:2f:97:38:d4:ab:36:10:41:
         40:83:7b:6a:bc:ce:db:cf:13:2f:3c:5f:b5:72:e9:5a:5d:03:
         21:fa:f8:53:55:39:3b:4b:aa:01:ae:e8:51:0d:b4:b3:44:9c:
         2a:03:c1:18:55:02:26:19:ce:f7:c5:0d:78:a6:de:70:d8:fe:
         a0:7f:61:b8:fa:a7:c2:cc:49:b8:51:8a:d8:c9:6b:53:7e:da:
         7c:4e:65:d9:03:73:47:46:44:39:f3:30:58:cb:6d:ca:7e:5f:
         ed:35:c4:c2:92:f8:d8:71:fb:89:28:ad:2b:f8:6e:42:32:42:
         20:59:98:7b:ae:e8:df:c8:14:d7:e9:9b:d2:ef:39:af:17:fc:
         20:f3:91:37:dc:51:38:61:71:a3:53:85:0c:fc:9d:63:11:1f:
         b8:c7:84:27:6d:d3:bd:2e:f6:dc:04:28:07:f9:b0:99:f9:2b:
         4e:71:d7:89:c3:91:b1:ba:14:72:62:0d:10:aa:e6:b1:c1:82:
         98:f8:88:a0:c3:b7:db:7b:1b:4d:2c:2f:91:37:2a:93:8d:e9:
         e3:86:ed:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 02:47:46 2026 by rpki-client