Route Origin Authorization

$ rpki-client -vvvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS20473.roa
File:                     AS20473.roa (raw, json)
Hash identifier:          TCxS3FoOUUqW60HuI4ElBYrwyp/kIBfrfA3XEeyonsI=
Subject key identifier:   A2:31:6C:1E:D3:9D:E2:B7:2F:84:50:D8:1E:BF:35:0B:08:CB:E8:5D
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       051E40BC9D87D74743B0D1D4C114BF65871E4CCA
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS20473.roa
Signing time:             Sun 08 Nov 2026 21:09:01 +0000
ROA not before:           Sun 08 Nov 2026 21:04:01 +0000
ROA not after:            Sun 07 Nov 2027 21:09:01 +0000
asID:                     20473
IP address blocks:        13.141.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Nov 2026 15:21:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:1e:40:bc:9d:87:d7:47:43:b0:d1:d4:c1:14:bf:65:87:1e:4c:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: Nov  8 21:04:01 2026 GMT
            Not After : Nov  7 21:09:01 2027 GMT
        Subject: CN=A2316C1ED39DE2B72F8450D81EBF350B08CBE85D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:00:62:9c:1f:93:18:1c:16:08:f6:84:1a:a1:
                    aa:6b:48:54:f9:e2:6a:c2:14:a5:88:2a:4e:40:cf:
                    35:75:f4:41:a5:04:a5:db:9f:87:1d:41:69:a2:bd:
                    32:ab:23:75:92:a2:6b:ca:3d:57:f5:c7:16:81:08:
                    38:15:24:78:96:44:80:ab:68:cb:aa:c3:77:08:17:
                    c2:b1:3e:c7:8f:16:f1:99:59:42:09:a1:3a:b9:f2:
                    30:a0:8b:b0:3c:b4:d7:f4:ca:03:6f:af:4b:10:2a:
                    4a:71:34:5a:05:79:66:37:ef:59:ae:29:06:f1:57:
                    82:da:5c:04:bc:dd:29:0b:ff:c9:11:79:8a:59:06:
                    1e:3e:b2:b6:08:1a:c1:b1:3c:4f:f0:3a:c9:7d:7c:
                    d5:e1:d3:9e:cc:5a:3e:2e:ef:34:f9:49:2b:4e:8e:
                    cb:d1:7a:ae:d6:63:8c:31:f2:1e:db:fa:c7:3e:6b:
                    86:9e:bd:11:63:59:de:a8:5f:ad:99:20:eb:70:cb:
                    c1:49:c5:8e:d5:3f:b5:a6:cd:89:31:63:8f:5a:73:
                    84:6c:56:78:74:d5:45:a1:42:80:3d:4a:a0:cd:24:
                    9d:0f:50:e9:47:ee:5e:a9:bf:e5:54:69:d2:1f:3d:
                    a3:03:67:7c:af:16:b4:ad:19:9b:3f:4a:06:89:70:
                    0a:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:31:6C:1E:D3:9D:E2:B7:2F:84:50:D8:1E:BF:35:0B:08:CB:E8:5D
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS20473.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.141.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:11:d9:87:db:e4:be:af:e0:1d:cd:20:af:91:25:15:c8:7f:
         18:70:dd:0c:91:db:2c:45:1a:89:58:89:0a:11:0f:e3:b6:66:
         8f:50:bd:2f:c9:6b:8c:35:5e:a8:f3:0f:a9:de:ef:d8:2a:3d:
         65:87:4c:55:87:e4:49:13:d6:14:64:15:ab:43:3f:43:f8:77:
         b2:e1:12:83:e6:ee:b8:ca:5b:3c:ee:05:d4:84:66:11:03:1f:
         be:ab:d0:99:ea:c6:89:b1:04:ea:2c:32:82:d7:d6:9b:bb:68:
         48:dc:84:b1:0a:c5:6e:ec:a8:ba:a2:9f:d2:43:25:f0:52:4d:
         ed:2e:cf:a7:9b:68:95:fb:32:4e:89:d9:82:42:60:4d:bc:e6:
         a6:15:b7:9c:cd:0e:73:ab:93:f0:5b:00:ac:a5:d3:16:34:24:
         d1:ac:50:92:d0:ed:81:cb:23:06:79:d2:33:77:66:83:39:a9:
         22:f8:59:8c:b2:11:18:cf:cf:41:5a:a7:59:2a:d6:6f:32:91:
         d2:ba:1f:a5:55:8b:c0:49:76:d5:85:37:2f:e5:65:e3:91:f3:
         7b:ca:a4:33:f1:8f:a4:7b:5d:34:a1:71:06:b6:23:79:02:4f:
         a7:89:11:07:a5:29:46:dc:10:22:8f:de:f2:59:c9:33:9c:93:
         ce:b6:6e:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 11 09:08:35 2026 by rpki-client