Route Origin Authorization

$ rpki-client -vvvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS402288.roa
File:                     AS402288.roa (raw, json)
Hash identifier:          x18aAbQySUtSRZP/oC18w2940/uYno3yzmWJ20vfPWM=
Subject key identifier:   29:70:CA:8D:FC:65:D6:31:68:5E:BC:60:92:0D:6D:F3:EC:BD:B4:61
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       3581167248960BA7B77195FD3AF73B6B482D85D2
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS402288.roa
Signing time:             Mon 21 Sep 2026 05:15:14 +0000
ROA not before:           Mon 21 Sep 2026 05:10:14 +0000
ROA not after:            Mon 20 Sep 2027 05:15:14 +0000
asID:                     402288
IP address blocks:        13.141.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 21:04:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:81:16:72:48:96:0b:a7:b7:71:95:fd:3a:f7:3b:6b:48:2d:85:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: Sep 21 05:10:14 2026 GMT
            Not After : Sep 20 05:15:14 2027 GMT
        Subject: CN=2970CA8DFC65D631685EBC60920D6DF3ECBDB461
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:29:25:f9:d6:c4:21:5c:d8:0e:3b:1c:a3:ea:
                    2a:95:19:6c:72:f8:7e:16:86:1a:1c:a3:6b:36:12:
                    1c:84:03:a9:36:e2:95:6d:68:23:e9:32:ff:de:20:
                    4f:86:13:05:50:54:c2:2e:1b:e0:3b:fc:83:e1:62:
                    91:91:34:07:c7:90:18:57:2c:f8:32:c5:8c:22:f0:
                    06:a9:91:e9:59:e1:b2:9d:5c:af:09:c1:5d:43:22:
                    5a:d5:b2:4f:dd:b6:31:bc:33:01:2a:94:ab:d8:2e:
                    37:af:a3:84:45:b9:94:b4:12:d4:13:10:78:70:a0:
                    b2:ec:6e:dc:a3:12:f5:bb:11:79:45:24:27:c4:d4:
                    5a:66:79:14:ac:fd:ec:57:bb:a9:9e:09:25:11:e4:
                    a5:94:a2:53:c5:b5:eb:50:42:0b:9d:1d:47:00:7f:
                    0b:cf:a2:e9:e8:74:a1:2c:27:07:96:78:72:3a:32:
                    0d:3e:18:06:04:8e:de:42:59:4f:a3:2d:2d:ad:55:
                    db:c3:d6:14:0a:ed:8f:69:f9:34:27:cf:57:9b:b9:
                    0b:ef:22:da:1c:27:f9:aa:5f:cc:15:c7:c7:6a:a1:
                    17:34:46:7e:e9:d5:99:71:3c:ab:a6:55:7b:d4:95:
                    16:9a:66:e2:ef:48:0a:34:10:46:10:19:48:37:7e:
                    27:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:70:CA:8D:FC:65:D6:31:68:5E:BC:60:92:0D:6D:F3:EC:BD:B4:61
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS402288.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.141.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:c5:2c:23:08:4b:b8:dc:ca:27:69:c6:2f:96:60:c9:e0:71:
         51:21:da:42:36:96:99:f5:83:e1:12:b8:9d:0d:36:99:ad:64:
         e7:be:74:6e:be:d5:5d:53:c0:6a:a5:23:c7:14:b5:2e:ce:cc:
         42:36:61:34:4d:65:ac:51:d6:76:19:18:b8:98:4b:b5:ee:1e:
         7a:8a:c2:01:2a:f8:d8:a3:10:5b:76:73:77:6a:d9:82:94:01:
         d5:46:3c:b8:f3:e9:ef:f9:4f:8b:ae:6b:f3:b0:24:50:52:f8:
         be:a1:f4:03:45:5f:07:c0:eb:48:cc:1c:87:c8:9d:33:64:13:
         ec:3c:75:df:7d:78:20:6e:58:b9:e7:1d:7a:df:41:af:64:b4:
         6b:ec:50:6a:82:b2:b7:4a:37:10:89:63:74:6b:f5:69:58:e1:
         e8:ed:52:5f:a6:83:10:50:27:cc:98:91:84:ce:cc:35:fb:8f:
         b1:5e:58:3c:07:49:5e:93:f1:1d:61:1a:42:e1:b0:2a:ea:af:
         ec:ba:c6:55:a9:76:de:57:ed:8e:c0:97:2c:8c:d3:7d:27:5c:
         e3:b5:12:42:1f:75:14:df:7b:c7:06:62:a2:2f:07:9c:2f:a2:
         20:ec:cb:3a:d6:c8:1d:db:10:ef:62:83:18:e8:02:c9:30:57:
         0d:62:1a:cf
-----BEGIN CERTIFICATE-----
MIIFJTCCBA2gAwIBAgIUNYEWckiWC6e3cZX9Ovc7a0gthdIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUVGNzY2RjEwM0IyRUY5OURGOEM3MTk3OEE3RkU1MTlE
NzMwQjE1NTAeFw0yNjA5MjEwNTEwMTRaFw0yNzA5MjAwNTE1MTRaMDMxMTAvBgNV
BAMTKDI5NzBDQThERkM2NUQ2MzE2ODVFQkM2MDkyMEQ2REYzRUNCREI0NjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyKSX51sQhXNgOOxyj6iqVGWxy
+H4Whhoco2s2EhyEA6k24pVtaCPpMv/eIE+GEwVQVMIuG+A7/IPhYpGRNAfHkBhX
LPgyxYwi8AapkelZ4bKdXK8JwV1DIlrVsk/dtjG8MwEqlKvYLjevo4RFuZS0EtQT
EHhwoLLsbtyjEvW7EXlFJCfE1FpmeRSs/exXu6meCSUR5KWUolPFtetQQgudHUcA
fwvPounodKEsJweWeHI6Mg0+GAYEjt5CWU+jLS2tVdvD1hQK7Y9p+TQnz1ebuQvv
ItocJ/mqX8wVx8dqoRc0Rn7p1ZlxPKumVXvUlRaaZuLvSAo0EEYQGUg3fidjAgMB
AAGjggIvMIICKzAdBgNVHQ4EFgQUKXDKjfxl1jFoXrxgkg1t8+y9tGEwHwYDVR0j
BBgwFoAUrvdm8QOy75nfjHGXin/lGdcwsVUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
MzAzMjdiOWUtMjI3YS00ZWJkLTgyNWItM2I5ODA5NWRjOTI3LTAvMC9BRUY3NjZG
MTAzQjJFRjk5REY4QzcxOTc4QTdGRTUxOUQ3MzBCMTU1LmNybDCBngYIKwYBBQUH
AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1
OTBiOTlhZi80L0FFRjc2NkYxMDNCMkVGOTlERjhDNzE5NzhBN0ZFNTE5RDczMEIx
NTUuY2VyMHIGCCsGAQUFBwELBGYwZDBiBggrBgEFBQcwC4ZWcnN5bmM6Ly9yLm1h
Z2VsbGFuLmlweG8uY29tL3JlcG8vMzAzMjdiOWUtMjI3YS00ZWJkLTgyNWItM2I5
ODA5NWRjOTI3LTAvMC9BUzQwMjI4OC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAA2NGDANBgkqhkiG9w0B
AQsFAAOCAQEACMUsIwhLuNzKJ2nGL5ZgyeBxUSHaQjaWmfWD4RK4nQ02ma1k5750
br7VXVPAaqUjxxS1Ls7MQjZhNE1lrFHWdhkYuJhLte4eeorCASr42KMQW3Zzd2rZ
gpQB1UY8uPPp7/lPi65r87AkUFL4vqH0A0VfB8DrSMwch8idM2QT7Dx13314IG5Y
uecdet9Br2S0a+xQaoKyt0o3EIljdGv1aVjh6O1SX6aDEFAnzJiRhM7MNfuPsV5Y
PAdJXpPxHWEaQuGwKuqv7LrGVal23lftjsCXLIzTfSdc47USQh91FN97xwZioi8H
nC+iIOzLOtbIHdsQ72KDGOgCyTBXDWIazw==
-----END CERTIFICATE-----
Generated at Thu Sep 24 10:31:56 2026 by rpki-client