Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS834.roa
File:                     AS834.roa (raw, json)
Hash identifier:          Fxpw2Q8PpV5kDE+2NG/P8FvzKUJA+sw565FXfRTrCBI=
Subject key identifier:   AB:D3:D1:8F:31:22:1C:9D:F8:84:2E:0D:56:9A:0E:AA:D6:D1:7C:0F
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       50A041F83028DC19E92508EB78261805607CCD57
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS834.roa
Signing time:             Tue 11 Aug 2026 00:05:22 +0000
ROA not before:           Tue 11 Aug 2026 00:00:22 +0000
ROA not after:            Tue 10 Aug 2027 00:05:22 +0000
asID:                     834
IP address blocks:        13.141.24.0/22 maxlen: 24
                          13.141.32.0/22 maxlen: 24
                          13.141.56.0/21 maxlen: 24
                          13.141.72.0/21 maxlen: 24
                          13.141.112.0/21 maxlen: 24
                          13.141.120.0/22 maxlen: 24
                          169.40.33.0/24 maxlen: 24
                          169.40.34.0/23 maxlen: 24
                          169.40.37.0/24 maxlen: 24
                          169.40.38.0/23 maxlen: 24
                          169.40.43.0/24 maxlen: 24
                          169.40.44.0/23 maxlen: 24
                          169.40.46.0/24 maxlen: 24
                          169.40.48.0/23 maxlen: 24
                          169.40.51.0/24 maxlen: 24
                          169.40.58.0/23 maxlen: 24
                          169.40.68.0/22 maxlen: 24
                          169.40.72.0/21 maxlen: 24
                          169.40.96.0/24 maxlen: 24
                          169.40.98.0/24 maxlen: 24
                          169.40.100.0/24 maxlen: 24
                          169.40.107.0/24 maxlen: 24
                          169.40.111.0/24 maxlen: 24
                          169.40.112.0/24 maxlen: 24
                          169.40.114.0/23 maxlen: 24
                          169.40.116.0/24 maxlen: 24
                          169.40.119.0/24 maxlen: 24
                          169.40.121.0/24 maxlen: 24
                          169.40.122.0/24 maxlen: 24
                          169.40.128.0/24 maxlen: 24
                          169.40.136.0/24 maxlen: 24
                          169.40.140.0/24 maxlen: 24
                          169.40.142.0/23 maxlen: 24
                          169.40.150.0/23 maxlen: 24
                          169.40.152.0/24 maxlen: 24
                          169.40.155.0/24 maxlen: 24
                          169.40.158.0/23 maxlen: 24
                          169.40.160.0/22 maxlen: 24
                          169.40.192.0/21 maxlen: 24
                          169.40.200.0/22 maxlen: 24
                          169.40.208.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 12 Aug 2026 18:45:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:a0:41:f8:30:28:dc:19:e9:25:08:eb:78:26:18:05:60:7c:cd:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: Aug 11 00:00:22 2026 GMT
            Not After : Aug 10 00:05:22 2027 GMT
        Subject: CN=ABD3D18F31221C9DF8842E0D569A0EAAD6D17C0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:9f:8d:19:51:a8:a1:f3:53:16:a6:79:cc:a7:
                    1e:d7:d7:c8:e8:14:a9:b9:c1:4b:1f:75:0d:de:c2:
                    fb:47:43:2d:59:53:14:af:cb:a3:0f:10:96:68:bc:
                    15:60:56:75:e2:70:f8:91:55:2c:d5:27:a1:87:20:
                    45:78:79:8b:b2:66:a1:f7:76:23:b5:a0:b6:f3:b7:
                    78:1f:e4:e8:e6:8c:15:16:60:91:54:69:12:44:a2:
                    df:ba:09:4a:27:b4:8d:a3:66:6e:d9:66:b5:b4:c0:
                    d0:f7:28:a3:85:d1:27:8f:4c:04:56:78:41:15:7f:
                    67:09:d6:90:a5:00:e9:48:f1:d9:47:06:2d:93:be:
                    dd:c8:44:6d:af:67:df:ca:a3:6b:c8:00:01:b5:26:
                    71:36:2f:91:9b:fd:4e:b4:78:cf:4a:6d:7c:18:46:
                    4a:a0:1d:dc:87:f8:a5:19:93:7c:5b:89:8a:fa:73:
                    8c:1a:05:e5:85:a5:18:61:29:a4:3f:d3:a6:4e:e2:
                    af:0c:a9:08:07:70:29:75:18:6f:4d:0b:ea:62:a2:
                    b6:ec:87:3c:3d:88:1f:28:8c:90:53:e5:56:17:ac:
                    05:b3:a8:be:27:e6:54:bf:d4:1c:05:2d:f0:7b:c2:
                    fc:ef:67:23:05:98:9e:5a:07:e1:de:29:db:29:d0:
                    0a:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:D3:D1:8F:31:22:1C:9D:F8:84:2E:0D:56:9A:0E:AA:D6:D1:7C:0F
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.141.24.0/22
                  13.141.32.0/22
                  13.141.56.0/21
                  13.141.72.0/21
                  13.141.112.0-13.141.123.255
                  169.40.33.0-169.40.35.255
                  169.40.37.0-169.40.39.255
                  169.40.43.0-169.40.46.255
                  169.40.48.0/23
                  169.40.51.0/24
                  169.40.58.0/23
                  169.40.68.0-169.40.79.255
                  169.40.96.0/24
                  169.40.98.0/24
                  169.40.100.0/24
                  169.40.107.0/24
                  169.40.111.0-169.40.112.255
                  169.40.114.0-169.40.116.255
                  169.40.119.0/24
                  169.40.121.0-169.40.122.255
                  169.40.128.0/24
                  169.40.136.0/24
                  169.40.140.0/24
                  169.40.142.0/23
                  169.40.150.0-169.40.152.255
                  169.40.155.0/24
                  169.40.158.0-169.40.163.255
                  169.40.192.0-169.40.203.255
                  169.40.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         59:69:38:45:ef:18:2a:2b:ee:e7:65:38:8b:25:56:dd:9e:55:
         b8:f1:c9:cc:d1:f7:1a:94:4f:2e:55:ec:3f:d4:b6:7c:00:79:
         93:da:f2:fe:73:58:67:27:c1:be:dd:ba:c8:f3:0d:a2:3e:68:
         c2:c6:92:5a:c6:fa:11:87:39:f8:71:8c:cf:7c:29:f6:95:22:
         12:3e:f9:d0:21:8b:7b:af:52:2d:0c:e6:c7:d9:11:29:bc:cd:
         4b:29:28:d9:db:7d:4f:2c:3e:c1:5d:95:59:e7:1f:7e:19:1b:
         79:2e:8b:8c:37:ef:dc:dc:83:21:6f:0c:59:80:ad:91:4c:8f:
         81:dc:24:1a:1e:85:10:48:6e:7e:bd:50:8d:82:47:77:a5:7c:
         76:ee:6f:12:96:5a:80:96:fd:0e:3f:8d:ac:bf:ef:cc:c9:18:
         27:df:7b:0e:f8:cf:ed:3a:8e:a1:bc:42:ac:aa:d6:fc:7f:f8:
         fb:1f:c9:86:ff:1b:74:da:e3:eb:49:0f:7a:64:24:2f:94:24:
         0a:33:b1:a8:c3:27:1b:f8:20:cf:b5:02:cb:5d:ec:4c:c4:dc:
         63:b0:50:b7:c5:e7:49:be:2a:f9:90:4d:98:4a:9c:85:0d:f1:
         49:f3:01:d5:17:05:74:7f:41:c5:ee:8d:9a:f2:5f:61:fe:e0:
         a1:c4:85:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 06:05:21 2026 by rpki-client