Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS48300.roa
File:                     AS48300.roa (raw, json)
Hash identifier:          gq951mYauYhfyd9zto1hw76iMT0kbQp0zzth973II70=
Subject key identifier:   92:FD:72:19:54:04:90:6A:0F:80:ED:BB:EE:F1:AF:E8:49:71:27:0E
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       63558B5E3AED4DC84E8AE16593E70D927D6A92DD
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS48300.roa
Signing time:             Thu 12 Mar 2026 15:11:01 +0000
ROA not before:           Thu 12 Mar 2026 15:06:01 +0000
ROA not after:            Thu 11 Mar 2027 15:11:01 +0000
asID:                     48300
IP address blocks:        169.40.192.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:55:8b:5e:3a:ed:4d:c8:4e:8a:e1:65:93:e7:0d:92:7d:6a:92:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: Mar 12 15:06:01 2026 GMT
            Not After : Mar 11 15:11:01 2027 GMT
        Subject: CN=92FD72195404906A0F80EDBBEEF1AFE84971270E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:4d:d8:ed:0b:95:ae:c6:a7:bd:ae:bc:43:cf:
                    5e:08:d6:ee:27:66:e7:4c:1e:55:b7:02:6e:f2:df:
                    13:6e:99:5a:f2:d4:72:a5:fd:0c:de:db:55:b1:31:
                    aa:64:36:74:0f:fc:2a:f9:1b:26:46:3a:67:e3:61:
                    cd:2e:45:bb:47:cc:92:e9:ab:ba:ff:ea:cc:b0:17:
                    f5:ee:62:03:62:bf:30:73:88:cf:8b:38:bc:38:fb:
                    8e:6c:05:29:58:ed:fe:59:1c:25:3b:9e:72:49:61:
                    46:ea:36:ea:d1:d4:e0:d0:b3:e9:5e:2e:c4:f1:10:
                    7f:49:f4:5b:66:a8:cf:a6:47:d7:55:39:f1:9e:19:
                    70:5b:1e:c3:bb:9f:8a:b6:8c:51:d0:c9:36:91:e2:
                    61:75:ea:eb:35:91:86:5e:98:bf:33:8e:a4:45:7d:
                    57:bc:e9:72:e5:af:a9:a1:72:ab:44:e7:8b:3b:1b:
                    35:82:10:5d:a6:76:72:f6:51:9a:dd:1b:bf:5e:4b:
                    27:b7:61:36:7f:48:47:02:d5:7a:8d:0d:60:12:2c:
                    56:38:c8:04:44:48:0b:ae:66:95:7d:a1:f1:73:fe:
                    44:6c:18:83:f2:4e:e3:46:6a:15:d9:ab:fe:20:24:
                    45:9b:7f:f3:c4:a6:ca:0e:de:a5:b1:4e:92:02:48:
                    03:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:FD:72:19:54:04:90:6A:0F:80:ED:BB:EE:F1:AF:E8:49:71:27:0E
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS48300.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.40.192.0/21

    Signature Algorithm: sha256WithRSAEncryption
         a3:ab:52:54:e3:5c:22:ad:c6:b7:03:4c:25:51:b6:84:13:ac:
         7f:3a:97:03:a4:0d:eb:b3:c9:55:1a:2e:f4:a6:d7:1d:ae:b8:
         ec:73:42:13:0b:e3:64:28:59:25:3c:9c:00:5f:ae:9f:e6:f5:
         85:11:84:e5:3d:bb:da:19:67:66:3f:cd:72:4a:53:75:2b:cb:
         89:d7:5e:e6:09:e5:e6:42:5d:27:25:6b:84:69:3f:dd:30:9e:
         75:46:74:48:a9:ac:8e:7f:8a:b6:bb:a7:09:30:ed:ae:6d:71:
         8e:d8:94:a1:ee:2c:a0:10:16:38:62:31:92:72:40:66:7d:01:
         15:da:41:6e:19:ac:e2:57:97:57:39:8b:2e:9f:ad:43:7e:e9:
         82:89:9b:56:bf:c6:d3:d3:c0:63:a5:e6:b2:2e:d7:db:8c:99:
         01:fc:76:cd:f3:5c:06:38:b3:2a:d6:8c:fd:82:14:ee:78:88:
         68:b9:f5:09:d5:dd:60:4c:aa:8f:4b:39:8a:7b:38:7e:dd:dd:
         1b:f8:97:5a:ba:14:d8:fa:64:56:f6:d5:16:06:23:b4:6b:51:
         36:69:be:ad:d6:2f:4f:c6:d4:9d:ec:38:07:3d:74:a6:ee:21:
         f5:e6:06:df:5f:91:34:30:50:b3:7a:8f:47:ca:31:16:f0:5d:
         14:bd:a1:72
-----BEGIN CERTIFICATE-----
MIIFJDCCBAygAwIBAgIUY1WLXjrtTchOiuFlk+cNkn1qkt0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUVGNzY2RjEwM0IyRUY5OURGOEM3MTk3OEE3RkU1MTlE
NzMwQjE1NTAeFw0yNjAzMTIxNTA2MDFaFw0yNzAzMTExNTExMDFaMDMxMTAvBgNV
BAMTKDkyRkQ3MjE5NTQwNDkwNkEwRjgwRURCQkVFRjFBRkU4NDk3MTI3MEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWTdjtC5Wuxqe9rrxDz14I1u4n
ZudMHlW3Am7y3xNumVry1HKl/Qze21WxMapkNnQP/Cr5GyZGOmfjYc0uRbtHzJLp
q7r/6sywF/XuYgNivzBziM+LOLw4+45sBSlY7f5ZHCU7nnJJYUbqNurR1ODQs+le
LsTxEH9J9FtmqM+mR9dVOfGeGXBbHsO7n4q2jFHQyTaR4mF16us1kYZemL8zjqRF
fVe86XLlr6mhcqtE54s7GzWCEF2mdnL2UZrdG79eSye3YTZ/SEcC1XqNDWASLFY4
yARESAuuZpV9ofFz/kRsGIPyTuNGahXZq/4gJEWbf/PEpsoO3qWxTpICSAMpAgMB
AAGjggIuMIICKjAdBgNVHQ4EFgQUkv1yGVQEkGoPgO277vGv6ElxJw4wHwYDVR0j
BBgwFoAUrvdm8QOy75nfjHGXin/lGdcwsVUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
MzAzMjdiOWUtMjI3YS00ZWJkLTgyNWItM2I5ODA5NWRjOTI3LTAvMC9BRUY3NjZG
MTAzQjJFRjk5REY4QzcxOTc4QTdGRTUxOUQ3MzBCMTU1LmNybDCBngYIKwYBBQUH
AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1
OTBiOTlhZi80L0FFRjc2NkYxMDNCMkVGOTlERjhDNzE5NzhBN0ZFNTE5RDczMEIx
NTUuY2VyMHEGCCsGAQUFBwELBGUwYzBhBggrBgEFBQcwC4ZVcnN5bmM6Ly9yLm1h
Z2VsbGFuLmlweG8uY29tL3JlcG8vMzAzMjdiOWUtMjI3YS00ZWJkLTgyNWItM2I5
ODA5NWRjOTI3LTAvMC9BUzQ4MzAwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDqSjAMA0GCSqGSIb3DQEB
CwUAA4IBAQCjq1JU41wirca3A0wlUbaEE6x/OpcDpA3rs8lVGi70ptcdrrjsc0IT
C+NkKFklPJwAX66f5vWFEYTlPbvaGWdmP81ySlN1K8uJ117mCeXmQl0nJWuEaT/d
MJ51RnRIqayOf4q2u6cJMO2ubXGO2JSh7iygEBY4YjGSckBmfQEV2kFuGaziV5dX
OYsun61DfumCiZtWv8bT08BjpeayLtfbjJkB/HbN81wGOLMq1oz9ghTueIhoufUJ
1d1gTKqPSzmKezh+3d0b+JdauhTY+mRW9tUWBiO0a1E2ab6t1i9PxtSd7DgHPXSm
7iH15gbfX5E0MFCzeo9HyjEW8F0UvaFy
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:31:09 2026 by rpki-client