Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS402281.roa
File:                     AS402281.roa (raw, json)
Hash identifier:          Fa8iGTIli86eG+SseUH0DHdd8KhZGOxtfojqsSYU9Go=
Subject key identifier:   B0:3A:D5:99:BA:40:09:85:9E:87:06:6D:1C:ED:C8:87:58:23:EF:6E
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       7B114F4C75DD455A713136C230E67AEE44BDFE94
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS402281.roa
Signing time:             Thu 16 Apr 2026 09:05:15 +0000
ROA not before:           Thu 16 Apr 2026 09:00:15 +0000
ROA not after:            Thu 15 Apr 2027 09:05:15 +0000
asID:                     402281
IP address blocks:        169.40.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 Apr 2026 09:44:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:11:4f:4c:75:dd:45:5a:71:31:36:c2:30:e6:7a:ee:44:bd:fe:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: Apr 16 09:00:15 2026 GMT
            Not After : Apr 15 09:05:15 2027 GMT
        Subject: CN=B03AD599BA4009859E87066D1CEDC8875823EF6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:be:70:17:cc:a5:64:12:84:73:83:fd:2f:cc:
                    cd:6c:9e:55:bd:24:98:aa:8c:8a:04:00:a5:ef:6b:
                    7f:f2:43:41:6b:2f:44:b9:aa:7d:ba:f7:5e:96:cb:
                    da:6b:56:34:d6:36:1d:ae:c6:99:45:29:12:d0:9d:
                    19:85:c4:c6:e8:d3:f7:45:6f:0e:d6:0a:36:05:ae:
                    55:5c:a9:1a:56:05:3f:65:6c:2a:5b:56:07:0a:fc:
                    b5:a8:42:95:40:e5:cb:32:cf:1c:81:ca:46:64:aa:
                    1a:29:05:e1:ba:3c:13:ff:51:79:9b:92:2b:01:04:
                    1d:3c:ff:1d:10:fc:66:4d:b9:8c:b8:a0:bc:b3:35:
                    03:f7:ef:66:3d:b1:a3:e3:1b:d6:73:7f:fb:c8:d2:
                    d5:89:37:0f:2a:3b:bf:66:45:0b:80:15:6c:15:67:
                    5e:bd:95:07:c0:36:02:11:9d:a5:af:69:ae:0e:b5:
                    c4:b7:5f:4e:5d:e1:88:d0:9c:b9:d6:97:c0:5f:24:
                    aa:07:c8:01:5c:28:17:08:21:96:a5:08:0a:d4:c4:
                    16:15:2c:e5:2b:88:fa:8a:45:cd:13:9a:1f:28:4b:
                    0a:af:a1:ad:5a:44:de:95:63:19:d5:ba:cc:38:2c:
                    5f:a6:a7:38:c7:d3:f8:ba:94:38:f0:2d:3e:d2:1b:
                    30:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:3A:D5:99:BA:40:09:85:9E:87:06:6D:1C:ED:C8:87:58:23:EF:6E
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS402281.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.40.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:9a:b5:3d:2f:94:1d:8e:73:04:0a:bd:14:e2:93:b0:cb:dd:
         20:94:2f:9b:8f:38:6c:5d:9f:2d:2c:da:9a:dc:ab:b8:42:00:
         f3:2a:ef:71:13:67:a4:ac:ed:7b:e8:5d:af:30:a7:a1:f0:83:
         56:8a:19:07:e2:ca:6b:71:a2:02:21:ef:45:a8:29:f6:99:fb:
         29:4c:d9:93:2f:2a:8b:f0:29:33:e4:fb:45:b2:97:c5:14:f5:
         db:12:5e:a2:f5:cb:12:0d:ac:12:4f:28:91:33:2f:56:07:86:
         b5:75:02:6c:95:77:9f:21:0f:a5:ac:e1:27:7a:b2:c2:5e:52:
         de:f1:f4:69:9b:fa:a0:52:27:cf:ca:e7:81:77:84:26:d0:27:
         01:d6:08:9d:09:c3:51:40:6e:62:cd:4d:3d:a5:29:6c:5e:ac:
         38:8d:c0:b5:46:25:8e:1a:93:61:47:c9:8f:97:08:72:7c:c0:
         57:f0:94:94:93:cb:eb:93:a1:47:7a:2a:74:aa:05:7e:86:28:
         0f:62:03:8b:e9:a8:1d:c8:af:1e:d1:47:ab:ba:62:97:ca:77:
         07:a2:46:06:5a:7b:a7:f4:98:59:e3:d3:55:42:b9:5f:3c:a3:
         8f:8a:c4:e7:16:4b:5c:ab:e0:db:fc:68:64:8f:99:83:27:dd:
         4f:ba:1c:ed
-----BEGIN CERTIFICATE-----
MIIFJTCCBA2gAwIBAgIUexFPTHXdRVpxMTbCMOZ67kS9/pQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUVGNzY2RjEwM0IyRUY5OURGOEM3MTk3OEE3RkU1MTlE
NzMwQjE1NTAeFw0yNjA0MTYwOTAwMTVaFw0yNzA0MTUwOTA1MTVaMDMxMTAvBgNV
BAMTKEIwM0FENTk5QkE0MDA5ODU5RTg3MDY2RDFDRURDODg3NTgyM0VGNkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFvnAXzKVkEoRzg/0vzM1snlW9
JJiqjIoEAKXva3/yQ0FrL0S5qn26916Wy9prVjTWNh2uxplFKRLQnRmFxMbo0/dF
bw7WCjYFrlVcqRpWBT9lbCpbVgcK/LWoQpVA5csyzxyBykZkqhopBeG6PBP/UXmb
kisBBB08/x0Q/GZNuYy4oLyzNQP372Y9saPjG9Zzf/vI0tWJNw8qO79mRQuAFWwV
Z169lQfANgIRnaWvaa4OtcS3X05d4YjQnLnWl8BfJKoHyAFcKBcIIZalCArUxBYV
LOUriPqKRc0Tmh8oSwqvoa1aRN6VYxnVusw4LF+mpzjH0/i6lDjwLT7SGzAdAgMB
AAGjggIvMIICKzAdBgNVHQ4EFgQUsDrVmbpACYWehwZtHO3Ih1gj724wHwYDVR0j
BBgwFoAUrvdm8QOy75nfjHGXin/lGdcwsVUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
MzAzMjdiOWUtMjI3YS00ZWJkLTgyNWItM2I5ODA5NWRjOTI3LTAvMC9BRUY3NjZG
MTAzQjJFRjk5REY4QzcxOTc4QTdGRTUxOUQ3MzBCMTU1LmNybDCBngYIKwYBBQUH
AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1
OTBiOTlhZi80L0FFRjc2NkYxMDNCMkVGOTlERjhDNzE5NzhBN0ZFNTE5RDczMEIx
NTUuY2VyMHIGCCsGAQUFBwELBGYwZDBiBggrBgEFBQcwC4ZWcnN5bmM6Ly9yLm1h
Z2VsbGFuLmlweG8uY29tL3JlcG8vMzAzMjdiOWUtMjI3YS00ZWJkLTgyNWItM2I5
ODA5NWRjOTI3LTAvMC9BUzQwMjI4MS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKkoZTANBgkqhkiG9w0B
AQsFAAOCAQEAqZq1PS+UHY5zBAq9FOKTsMvdIJQvm484bF2fLSzamtyruEIA8yrv
cRNnpKzte+hdrzCnofCDVooZB+LKa3GiAiHvRagp9pn7KUzZky8qi/ApM+T7RbKX
xRT12xJeovXLEg2sEk8okTMvVgeGtXUCbJV3nyEPpazhJ3qywl5S3vH0aZv6oFIn
z8rngXeEJtAnAdYInQnDUUBuYs1NPaUpbF6sOI3AtUYljhqTYUfJj5cIcnzAV/CU
lJPL65OhR3oqdKoFfoYoD2IDi+moHcivHtFHq7pil8p3B6JGBlp7p/SYWePTVUK5
Xzyjj4rE5xZLXKvg2/xoZI+ZgyfdT7oc7Q==
-----END CERTIFICATE-----
Generated at Sat Apr 18 22:08:31 2026 by rpki-client