Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS834.roa
File:                     AS834.roa (raw, json)
Hash identifier:          Lk1+SiqEvsIyfOXmiGfiUMdIbioRzh+fFWKVWswITr8=
Subject key identifier:   77:E8:44:F8:23:31:1E:3A:24:53:A8:34:5D:7E:67:00:30:36:BF:4C
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       7FE775298438E5F82DD66C76B44913BD4F05536F
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS834.roa
Signing time:             Sat 27 Jun 2026 09:30:46 +0000
ROA not before:           Sat 27 Jun 2026 09:25:46 +0000
ROA not after:            Sat 26 Jun 2027 09:30:46 +0000
asID:                     834
IP address blocks:        13.141.24.0/22 maxlen: 24
                          13.141.32.0/22 maxlen: 24
                          13.141.56.0/21 maxlen: 24
                          13.141.72.0/21 maxlen: 24
                          13.141.96.0/22 maxlen: 24
                          13.141.104.0/21 maxlen: 24
                          13.141.112.0/21 maxlen: 24
                          13.141.120.0/22 maxlen: 24
                          169.40.33.0/24 maxlen: 24
                          169.40.34.0/23 maxlen: 24
                          169.40.37.0/24 maxlen: 24
                          169.40.38.0/23 maxlen: 24
                          169.40.43.0/24 maxlen: 24
                          169.40.47.0/24 maxlen: 24
                          169.40.48.0/23 maxlen: 24
                          169.40.51.0/24 maxlen: 24
                          169.40.57.0/24 maxlen: 24
                          169.40.68.0/22 maxlen: 24
                          169.40.72.0/21 maxlen: 24
                          169.40.80.0/20 maxlen: 24
                          169.40.98.0/24 maxlen: 24
                          169.40.100.0/24 maxlen: 24
                          169.40.104.0/24 maxlen: 24
                          169.40.112.0/24 maxlen: 24
                          169.40.114.0/23 maxlen: 24
                          169.40.116.0/24 maxlen: 24
                          169.40.119.0/24 maxlen: 24
                          169.40.121.0/24 maxlen: 24
                          169.40.122.0/24 maxlen: 24
                          169.40.124.0/23 maxlen: 24
                          169.40.128.0/24 maxlen: 24
                          169.40.132.0/24 maxlen: 24
                          169.40.136.0/24 maxlen: 24
                          169.40.143.0/24 maxlen: 24
                          169.40.151.0/24 maxlen: 24
                          169.40.152.0/24 maxlen: 24
                          169.40.158.0/23 maxlen: 24
                          169.40.160.0/22 maxlen: 24
                          169.40.192.0/21 maxlen: 24
                          169.40.200.0/22 maxlen: 24
                          169.40.208.0/22 maxlen: 24
                          169.40.224.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 28 Jun 2026 10:05:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:e7:75:29:84:38:e5:f8:2d:d6:6c:76:b4:49:13:bd:4f:05:53:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: Jun 27 09:25:46 2026 GMT
            Not After : Jun 26 09:30:46 2027 GMT
        Subject: CN=77E844F823311E3A2453A8345D7E67003036BF4C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:a2:df:f5:42:c4:a3:e7:b5:1d:54:d9:31:7d:
                    c4:e6:69:a0:a2:6b:75:0f:e3:36:49:f0:08:5f:51:
                    5b:18:d9:f1:de:b7:d7:76:0f:b0:8f:d2:5b:b7:45:
                    a3:2f:d8:38:74:e3:c8:30:b8:99:02:39:de:41:73:
                    83:34:5d:78:f3:a7:90:78:32:2c:4f:4b:c8:03:8b:
                    7f:99:bd:64:6e:de:03:87:0d:1b:1c:f1:46:1d:4c:
                    01:83:85:29:55:d2:15:27:39:64:af:6d:da:15:2e:
                    96:b7:04:80:1b:b4:93:52:ae:31:c0:68:63:b1:07:
                    6a:08:5e:ff:c1:d4:7b:5f:06:66:d7:bd:b7:2c:04:
                    a1:83:52:01:83:3d:28:30:40:1c:23:59:57:14:ed:
                    4b:1e:0b:a3:84:20:22:0a:3e:c1:98:a4:d3:84:b3:
                    8b:ac:2d:65:47:07:af:ef:20:3b:57:1d:93:20:84:
                    5b:ec:e5:4e:c6:56:5a:e4:a5:c2:ee:40:84:dd:d5:
                    93:ca:ab:04:b5:4f:29:df:ea:91:37:32:ce:73:8f:
                    00:29:e1:4e:d3:90:e5:52:e6:ad:36:23:8e:2a:b7:
                    0a:1f:20:db:0d:1f:18:9f:1c:8a:3b:13:15:34:18:
                    37:5e:6a:4c:60:24:46:8a:54:a0:07:ed:5b:bf:ab:
                    ec:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:E8:44:F8:23:31:1E:3A:24:53:A8:34:5D:7E:67:00:30:36:BF:4C
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.141.24.0/22
                  13.141.32.0/22
                  13.141.56.0/21
                  13.141.72.0/21
                  13.141.96.0/22
                  13.141.104.0-13.141.123.255
                  169.40.33.0-169.40.35.255
                  169.40.37.0-169.40.39.255
                  169.40.43.0/24
                  169.40.47.0-169.40.49.255
                  169.40.51.0/24
                  169.40.57.0/24
                  169.40.68.0-169.40.95.255
                  169.40.98.0/24
                  169.40.100.0/24
                  169.40.104.0/24
                  169.40.112.0/24
                  169.40.114.0-169.40.116.255
                  169.40.119.0/24
                  169.40.121.0-169.40.122.255
                  169.40.124.0/23
                  169.40.128.0/24
                  169.40.132.0/24
                  169.40.136.0/24
                  169.40.143.0/24
                  169.40.151.0-169.40.152.255
                  169.40.158.0-169.40.163.255
                  169.40.192.0-169.40.203.255
                  169.40.208.0/22
                  169.40.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         97:35:00:0d:8d:c0:e7:86:92:44:a2:1a:93:bf:5b:d3:d5:04:
         5b:92:0b:c0:3e:47:92:55:a7:d0:2d:09:1e:b3:6d:38:f6:96:
         f8:eb:a5:b7:f8:9b:3c:b5:32:60:82:00:9b:79:17:f2:a5:9a:
         ab:94:c3:73:a2:cd:72:b0:cd:16:38:27:88:26:0b:a3:be:21:
         0a:4a:61:49:e8:00:d0:70:d3:81:0d:4a:44:b8:03:f4:80:5c:
         ba:78:84:34:7e:62:b6:d9:16:b1:af:8f:43:03:d4:60:ef:80:
         c6:75:fe:11:25:ab:b6:27:7a:d0:b5:91:08:99:1d:18:9a:c1:
         80:68:f7:d0:b0:f0:5d:82:ec:3f:64:33:0f:8a:a8:76:2c:73:
         4b:c3:d5:08:53:b6:13:71:84:2a:23:c1:bd:62:7c:09:2f:84:
         c5:38:2a:92:8e:d8:08:1f:2e:24:74:79:6b:91:b0:68:11:a5:
         7e:b9:b9:d7:ce:f7:ff:20:6b:02:f0:5f:cd:ea:52:94:47:b1:
         12:e3:f5:18:c5:7b:3d:a2:f2:88:8a:cb:72:55:d9:27:d4:23:
         91:7e:84:d1:84:55:73:c0:37:bd:af:ee:77:bf:04:2d:fe:fb:
         39:c7:b7:5d:76:e6:7f:df:86:e4:13:11:34:35:51:89:99:4e:
         f8:7a:03:74
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jun 27 19:55:16 2026 by rpki-client