Route Origin Authorization

$ rpki-client -vvvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS152179.roa
File:                     AS152179.roa (raw, json)
Hash identifier:          GfTjU9HtBgxQ0Di3OfESK9YbkVtyOpm3ETQ9RZvqXto=
Subject key identifier:   97:E9:A6:C7:4E:A4:DD:BB:BA:2D:85:2C:1B:F1:C8:3E:AD:80:E7:3C
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       5478DDB725C888841DABF653A7C3A4016D766E35
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS152179.roa
Signing time:             Tue 22 Sep 2026 05:30:04 +0000
ROA not before:           Tue 22 Sep 2026 05:25:04 +0000
ROA not after:            Tue 21 Sep 2027 05:30:04 +0000
asID:                     152179
IP address blocks:        169.40.158.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 17:13:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:78:dd:b7:25:c8:88:84:1d:ab:f6:53:a7:c3:a4:01:6d:76:6e:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: Sep 22 05:25:04 2026 GMT
            Not After : Sep 21 05:30:04 2027 GMT
        Subject: CN=97E9A6C74EA4DDBBBA2D852C1BF1C83EAD80E73C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:52:5d:cd:60:17:f5:97:a8:56:34:41:14:59:
                    da:6f:9a:d0:de:ae:bd:67:38:1d:dc:ae:f1:6f:05:
                    15:95:e1:b6:25:6a:d7:f0:7c:e9:09:9b:4f:4f:a4:
                    4b:58:52:58:ed:bd:98:9b:57:98:d5:18:00:74:47:
                    b9:96:2b:66:36:0a:7f:0c:70:f5:ef:7e:96:23:83:
                    55:33:8c:2b:a4:8e:69:cc:7b:4d:b7:3e:6c:38:99:
                    a7:66:71:26:af:3f:2a:81:32:2e:8c:df:3f:99:cd:
                    f7:dc:30:d7:18:b7:f4:d5:47:db:fe:5b:3f:e4:6f:
                    8d:f6:27:92:e3:62:3c:b2:5a:32:75:bf:2e:c7:03:
                    ab:04:3f:dc:8e:2a:25:02:e3:62:5b:0a:ca:03:54:
                    17:b2:3a:ee:52:4a:24:1c:18:77:64:2d:98:77:08:
                    a4:1a:6f:55:e6:84:61:2c:d4:88:dd:5c:90:dd:85:
                    01:78:ed:17:4d:f9:13:08:a3:4f:5f:5c:30:b2:90:
                    6f:d8:c5:a0:70:3c:9d:b6:0e:eb:ce:a5:5e:8c:ba:
                    63:75:cc:ce:e0:db:4a:b4:fd:58:64:6f:e9:76:86:
                    4e:30:3d:64:62:c9:fe:b8:5d:36:ad:9a:10:e2:78:
                    aa:51:fc:ad:ed:05:95:e1:c1:fa:2f:86:49:92:6b:
                    c7:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:E9:A6:C7:4E:A4:DD:BB:BA:2D:85:2C:1B:F1:C8:3E:AD:80:E7:3C
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS152179.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.40.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:71:7e:57:51:d4:f4:d2:7d:f7:05:9b:db:ba:d4:72:ed:49:
         01:7e:7a:b4:6f:0b:2a:33:0b:42:df:5a:b2:cf:2b:99:97:3f:
         ea:c1:a3:18:de:7a:91:c3:68:1c:95:da:53:d0:c5:37:c0:71:
         fd:4c:c1:32:65:20:4d:8d:9f:e0:f6:d0:34:b2:2c:6e:2b:f9:
         0b:a4:31:10:5f:bd:c7:2f:9a:7f:32:5d:76:f5:52:5a:9f:79:
         81:65:93:f1:32:cd:e5:6f:c7:93:e5:93:86:fc:0c:09:6b:b7:
         8a:fe:fe:29:d1:28:d8:da:ff:16:a6:f7:a3:49:e0:23:75:cb:
         c9:89:e8:73:44:5f:c0:2c:eb:1f:a4:78:a9:a4:99:8f:e1:6d:
         f1:95:ba:dd:ff:8f:56:59:2d:01:f3:1b:02:e2:48:eb:4b:5f:
         40:39:25:80:de:04:62:c7:47:d0:74:81:b9:24:cb:72:e6:4f:
         78:91:33:ec:99:3e:26:e1:e4:aa:52:6a:f1:5b:ba:c8:4c:88:
         fa:3f:29:dc:da:d8:ba:de:68:3d:f6:c5:5f:cd:37:ab:4b:95:
         50:24:96:65:50:04:df:6a:bb:5f:20:2d:d7:3a:59:32:ec:88:
         2b:aa:c7:b2:17:4f:a6:fd:6f:00:58:a9:a6:79:fe:60:7b:e8:
         23:f4:90:5c
-----BEGIN CERTIFICATE-----
MIIFJTCCBA2gAwIBAgIUVHjdtyXIiIQdq/ZTp8OkAW12bjUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUVGNzY2RjEwM0IyRUY5OURGOEM3MTk3OEE3RkU1MTlE
NzMwQjE1NTAeFw0yNjA5MjIwNTI1MDRaFw0yNzA5MjEwNTMwMDRaMDMxMTAvBgNV
BAMTKDk3RTlBNkM3NEVBNEREQkJCQTJEODUyQzFCRjFDODNFQUQ4MEU3M0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRUl3NYBf1l6hWNEEUWdpvmtDe
rr1nOB3crvFvBRWV4bYlatfwfOkJm09PpEtYUljtvZibV5jVGAB0R7mWK2Y2Cn8M
cPXvfpYjg1UzjCukjmnMe023Pmw4madmcSavPyqBMi6M3z+ZzffcMNcYt/TVR9v+
Wz/kb432J5LjYjyyWjJ1vy7HA6sEP9yOKiUC42JbCsoDVBeyOu5SSiQcGHdkLZh3
CKQab1XmhGEs1IjdXJDdhQF47RdN+RMIo09fXDCykG/YxaBwPJ22DuvOpV6MumN1
zM7g20q0/Vhkb+l2hk4wPWRiyf64XTatmhDieKpR/K3tBZXhwfovhkmSa8fhAgMB
AAGjggIvMIICKzAdBgNVHQ4EFgQUl+mmx06k3bu6LYUsG/HIPq2A5zwwHwYDVR0j
BBgwFoAUrvdm8QOy75nfjHGXin/lGdcwsVUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
MzAzMjdiOWUtMjI3YS00ZWJkLTgyNWItM2I5ODA5NWRjOTI3LTAvMC9BRUY3NjZG
MTAzQjJFRjk5REY4QzcxOTc4QTdGRTUxOUQ3MzBCMTU1LmNybDCBngYIKwYBBQUH
AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1
OTBiOTlhZi80L0FFRjc2NkYxMDNCMkVGOTlERjhDNzE5NzhBN0ZFNTE5RDczMEIx
NTUuY2VyMHIGCCsGAQUFBwELBGYwZDBiBggrBgEFBQcwC4ZWcnN5bmM6Ly9yLm1h
Z2VsbGFuLmlweG8uY29tL3JlcG8vMzAzMjdiOWUtMjI3YS00ZWJkLTgyNWItM2I5
ODA5NWRjOTI3LTAvMC9BUzE1MjE3OS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKkonjANBgkqhkiG9w0B
AQsFAAOCAQEAcHF+V1HU9NJ99wWb27rUcu1JAX56tG8LKjMLQt9ass8rmZc/6sGj
GN56kcNoHJXaU9DFN8Bx/UzBMmUgTY2f4PbQNLIsbiv5C6QxEF+9xy+afzJddvVS
Wp95gWWT8TLN5W/Hk+WThvwMCWu3iv7+KdEo2Nr/Fqb3o0ngI3XLyYnoc0RfwCzr
H6R4qaSZj+Ft8ZW63f+PVlktAfMbAuJI60tfQDklgN4EYsdH0HSBuSTLcuZPeJEz
7Jk+JuHkqlJq8Vu6yEyI+j8p3NrYut5oPfbFX803q0uVUCSWZVAE32q7XyAt1zpZ
MuyIK6rHshdPpv1vAFippnn+YHvoI/SQXA==
-----END CERTIFICATE-----
Generated at Wed Sep 23 09:40:00 2026 by rpki-client