Route Origin Authorization

$ rpki-client -vvvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS209829.roa
File:                     AS209829.roa (raw, json)
Hash identifier:          Yd9bHQb61fxM22iSorSsVd1QvX28gb7ZG9K7r8IvQPw=
Subject key identifier:   02:61:3D:D2:37:C5:BA:10:F6:CC:A3:ED:B4:BA:DF:E5:2B:4E:B7:9B
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       5F6282E9A697FAAD578EF4EA1D53AB9395A1A1AE
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS209829.roa
Signing time:             Tue 22 Sep 2026 12:57:40 +0000
ROA not before:           Tue 22 Sep 2026 12:52:40 +0000
ROA not after:            Tue 21 Sep 2027 12:57:40 +0000
asID:                     209829
IP address blocks:        13.141.34.0/24 maxlen: 24
                          13.141.57.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 21:04:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:62:82:e9:a6:97:fa:ad:57:8e:f4:ea:1d:53:ab:93:95:a1:a1:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: Sep 22 12:52:40 2026 GMT
            Not After : Sep 21 12:57:40 2027 GMT
        Subject: CN=02613DD237C5BA10F6CCA3EDB4BADFE52B4EB79B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:55:b9:2c:67:17:1f:5a:70:ea:b3:4b:ec:82:
                    0d:24:48:ce:eb:a3:e9:6d:d7:a6:12:27:55:6a:85:
                    4b:56:fe:56:ab:a2:a3:b3:ff:89:57:a0:de:96:f8:
                    e4:5a:b8:a6:37:92:c7:d0:51:05:6b:97:23:32:b9:
                    61:e7:e1:0c:36:17:e3:2d:23:27:3f:03:02:a9:e2:
                    49:7c:4f:a5:eb:66:bc:1f:f6:b2:44:b3:8c:73:c9:
                    4c:e8:fc:a8:2d:3f:36:04:d0:fb:2d:4b:f6:ac:7e:
                    dc:74:ce:36:17:26:70:f7:3d:aa:64:35:52:7f:61:
                    35:61:2b:1c:2e:42:fc:37:1b:c5:e1:58:38:33:67:
                    c4:89:d2:0a:78:10:6b:58:2d:7f:18:73:69:f6:be:
                    bd:d0:a5:b5:8e:56:ce:80:d9:ea:9c:a4:5f:73:ad:
                    15:6b:04:d2:79:b9:6d:9a:91:c7:2c:71:7a:fb:79:
                    7f:59:7b:d3:c3:ba:65:ee:0b:36:60:4a:a0:1d:6f:
                    13:7b:77:af:3a:8e:c7:e3:83:21:60:24:fe:2b:cb:
                    25:89:a4:ac:99:68:15:3e:8b:8f:3b:c0:11:bb:60:
                    7b:1b:74:62:4a:f1:48:ba:c8:d4:60:bd:fc:d1:cd:
                    75:86:d2:d6:c2:84:70:1f:14:4d:cc:98:54:8a:c8:
                    08:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:61:3D:D2:37:C5:BA:10:F6:CC:A3:ED:B4:BA:DF:E5:2B:4E:B7:9B
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS209829.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.141.34.0/24
                  13.141.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:2c:84:d6:1b:6c:1b:57:7b:a2:ce:48:f2:a7:74:39:c5:44:
         98:63:61:8c:51:0c:1c:10:9d:d2:fa:59:99:e5:9e:cb:c7:da:
         ad:44:3f:3c:63:57:d4:c1:a0:24:46:a6:69:c2:d3:f7:48:2b:
         d3:8f:15:2b:a8:1f:f4:2d:d2:4f:17:50:f7:ee:65:36:7e:80:
         3d:c5:88:52:3e:28:77:a7:5f:4f:01:41:64:88:b6:d2:7f:e8:
         ec:8c:38:51:2c:62:e6:40:72:bb:79:d9:0a:a9:2e:2b:36:29:
         50:7d:08:70:cf:89:6c:7f:a3:18:88:42:ae:0d:6a:71:db:cc:
         97:bf:60:32:45:c5:78:a6:8b:2f:77:31:58:60:10:60:d8:10:
         c4:25:3a:2f:dc:f7:5c:62:fe:09:81:3a:36:20:5f:14:61:e1:
         1a:4a:5a:16:29:eb:fe:43:11:93:fd:45:37:ad:28:78:7e:9f:
         cc:2f:0d:db:7e:f4:02:68:94:cb:5a:71:05:a0:bb:c8:0e:6e:
         4b:86:23:fe:54:a6:96:86:8d:cb:85:f7:8e:5b:cd:a1:38:f8:
         1b:66:4d:9a:c9:1c:0e:be:55:c7:48:34:a0:e0:38:09:d5:4d:
         e2:2d:f7:4c:23:7c:95:b4:6c:19:d9:b6:cd:13:d2:48:b3:0c:
         68:13:ea:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 10:31:57 2026 by rpki-client