Route Origin Authorization

$ rpki-client -vvvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS403093.roa
File:                     AS403093.roa (raw, json)
Hash identifier:          zzQF94V6Rh6IDKVqy/Q5SjPA5yw6IrDPoQ6djfl2S5E=
Subject key identifier:   E1:79:1C:13:D9:64:BA:E2:E0:DE:A3:37:D3:B8:B0:7B:D8:BB:9E:F8
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       0B51983D8C170D7F9DA452BD2A77A97EF317A8C5
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS403093.roa
Signing time:             Sun 08 Nov 2026 03:18:09 +0000
ROA not before:           Sun 08 Nov 2026 03:13:09 +0000
ROA not after:            Sun 07 Nov 2027 03:18:09 +0000
asID:                     403093
IP address blocks:        169.40.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Nov 2026 15:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:51:98:3d:8c:17:0d:7f:9d:a4:52:bd:2a:77:a9:7e:f3:17:a8:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: Nov  8 03:13:09 2026 GMT
            Not After : Nov  7 03:18:09 2027 GMT
        Subject: CN=E1791C13D964BAE2E0DEA337D3B8B07BD8BB9EF8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:85:87:9d:af:d7:d3:e8:71:75:77:c1:26:33:
                    5b:f0:ee:36:b4:bc:f6:82:56:29:89:62:72:e2:aa:
                    24:ad:fa:c9:17:75:7e:f3:af:2e:db:2b:8f:bc:39:
                    e6:94:db:6a:f9:35:7d:e8:28:f0:df:11:4b:30:e9:
                    8a:41:e5:37:1a:cb:2d:60:ad:aa:ee:8a:ce:a8:6c:
                    c7:36:99:84:e1:14:14:50:60:f4:89:77:f8:f1:aa:
                    8e:c3:6f:e6:d8:42:b7:2d:16:38:af:af:cb:aa:fd:
                    60:f1:f4:fa:ca:b5:42:ba:5b:4c:5d:04:ef:2d:95:
                    b7:b8:d3:40:57:e0:8c:ce:c1:a8:62:43:a7:ad:db:
                    21:fb:a1:d4:0a:d9:94:db:c9:27:ed:33:0f:9d:78:
                    b4:4f:c1:89:1e:91:49:a8:ab:0a:0b:a6:cd:ed:fd:
                    cc:dd:ac:77:51:3f:64:b6:ee:92:c0:f8:8c:ee:68:
                    52:68:cf:48:43:dc:53:6b:53:2b:63:9c:f1:42:de:
                    b0:d1:96:24:21:78:bd:d1:83:01:2b:c1:20:fe:c8:
                    50:9b:8b:ba:25:87:a9:0c:cd:48:df:43:0d:b1:5b:
                    79:91:42:c9:d5:1f:eb:b0:93:53:05:0d:17:6a:b3:
                    03:98:af:f4:c3:92:fa:bb:9a:1e:3a:93:e6:07:91:
                    b5:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:79:1C:13:D9:64:BA:E2:E0:DE:A3:37:D3:B8:B0:7B:D8:BB:9E:F8
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS403093.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.40.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:4d:0a:7c:f5:5d:30:52:a1:ea:07:45:74:76:b7:24:ab:59:
         4a:1a:ce:32:a3:fe:0e:2c:32:50:3e:ed:41:53:10:41:b3:d1:
         53:e6:9b:20:0c:5f:93:c3:11:5d:a7:d4:d1:01:d2:85:e1:57:
         6c:68:f8:a0:6b:85:e3:1a:98:d3:e5:ab:46:14:0b:1f:52:f0:
         79:5d:a4:c4:84:8c:af:34:90:a9:eb:1f:89:69:e0:73:04:e3:
         06:b1:29:85:99:79:c8:cb:12:c0:ab:16:5d:c5:65:df:ad:34:
         0a:6a:44:44:f1:9f:3e:2d:00:95:8a:73:8a:d9:a7:76:ef:97:
         6f:7b:4c:d4:fb:cd:88:45:77:db:61:94:82:0f:a9:e6:6a:f7:
         2a:a8:56:ce:57:52:04:82:83:50:49:3b:5b:65:7e:fd:22:45:
         c0:11:b6:36:1a:d5:c7:dc:d0:40:31:38:43:36:2a:93:9a:46:
         db:06:34:49:55:d2:18:83:76:5b:a2:a5:fe:0b:4a:02:fc:7a:
         54:65:f0:57:8f:47:ad:f8:c2:70:b1:b6:35:9d:2f:d4:e2:df:
         72:5a:45:b6:c1:1c:f2:cd:13:79:e1:d9:1f:57:6e:90:d1:4c:
         f6:b8:ce:8c:cd:9d:ce:63:39:4c:18:93:7f:03:5f:c1:d8:18:
         12:03:7f:8b
-----BEGIN CERTIFICATE-----
MIIFJTCCBA2gAwIBAgIUC1GYPYwXDX+dpFK9KnepfvMXqMUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUVGNzY2RjEwM0IyRUY5OURGOEM3MTk3OEE3RkU1MTlE
NzMwQjE1NTAeFw0yNjExMDgwMzEzMDlaFw0yNzExMDcwMzE4MDlaMDMxMTAvBgNV
BAMTKEUxNzkxQzEzRDk2NEJBRTJFMERFQTMzN0QzQjhCMDdCRDhCQjlFRjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDshYedr9fT6HF1d8EmM1vw7ja0
vPaCVimJYnLiqiSt+skXdX7zry7bK4+8OeaU22r5NX3oKPDfEUsw6YpB5Tcayy1g
raruis6obMc2mYThFBRQYPSJd/jxqo7Db+bYQrctFjivr8uq/WDx9PrKtUK6W0xd
BO8tlbe400BX4IzOwahiQ6et2yH7odQK2ZTbySftMw+deLRPwYkekUmoqwoLps3t
/czdrHdRP2S27pLA+IzuaFJoz0hD3FNrUytjnPFC3rDRliQheL3RgwErwSD+yFCb
i7olh6kMzUjfQw2xW3mRQsnVH+uwk1MFDRdqswOYr/TDkvq7mh46k+YHkbXjAgMB
AAGjggIvMIICKzAdBgNVHQ4EFgQU4XkcE9lkuuLg3qM307iwe9i7nvgwHwYDVR0j
BBgwFoAUrvdm8QOy75nfjHGXin/lGdcwsVUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
MzAzMjdiOWUtMjI3YS00ZWJkLTgyNWItM2I5ODA5NWRjOTI3LTAvMC9BRUY3NjZG
MTAzQjJFRjk5REY4QzcxOTc4QTdGRTUxOUQ3MzBCMTU1LmNybDCBngYIKwYBBQUH
AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1
OTBiOTlhZi80L0FFRjc2NkYxMDNCMkVGOTlERjhDNzE5NzhBN0ZFNTE5RDczMEIx
NTUuY2VyMHIGCCsGAQUFBwELBGYwZDBiBggrBgEFBQcwC4ZWcnN5bmM6Ly9yLm1h
Z2VsbGFuLmlweG8uY29tL3JlcG8vMzAzMjdiOWUtMjI3YS00ZWJkLTgyNWItM2I5
ODA5NWRjOTI3LTAvMC9BUzQwMzA5My5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKkoOjANBgkqhkiG9w0B
AQsFAAOCAQEApk0KfPVdMFKh6gdFdHa3JKtZShrOMqP+DiwyUD7tQVMQQbPRU+ab
IAxfk8MRXafU0QHSheFXbGj4oGuF4xqY0+WrRhQLH1LweV2kxISMrzSQqesfiWng
cwTjBrEphZl5yMsSwKsWXcVl3600CmpERPGfPi0AlYpzitmndu+Xb3tM1PvNiEV3
22GUgg+p5mr3KqhWzldSBIKDUEk7W2V+/SJFwBG2NhrVx9zQQDE4QzYqk5pG2wY0
SVXSGIN2W6Kl/gtKAvx6VGXwV49HrfjCcLG2NZ0v1OLfclpFtsEc8s0TeeHZH1du
kNFM9rjOjM2dzmM5TBiTfwNfwdgYEgN/iw==
-----END CERTIFICATE-----
Generated at Tue Nov 10 08:30:30 2026 by rpki-client