Route Origin Authorization

$ rpki-client -vvvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS49453.roa
File:                     AS49453.roa (raw, json)
Hash identifier:          25tmQ1BKCR9gFyw6oEjLMotYqfL6EjT87gAnPqwh3KE=
Subject key identifier:   B8:9A:88:85:65:93:C6:BF:9B:B4:F1:D9:C7:CD:DF:A2:08:6F:80:AA
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       26938DE51C10799CB64DA8519E9B41C477E96587
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS49453.roa
Signing time:             Mon 21 Sep 2026 00:00:16 +0000
ROA not before:           Sun 20 Sep 2026 23:55:16 +0000
ROA not after:            Mon 20 Sep 2027 00:00:16 +0000
asID:                     49453
IP address blocks:        13.141.36.0/22 maxlen: 22
                          13.141.52.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 17:13:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:93:8d:e5:1c:10:79:9c:b6:4d:a8:51:9e:9b:41:c4:77:e9:65:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: Sep 20 23:55:16 2026 GMT
            Not After : Sep 20 00:00:16 2027 GMT
        Subject: CN=B89A88856593C6BF9BB4F1D9C7CDDFA2086F80AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:88:99:7a:6d:2e:c3:cf:34:4e:e9:2e:f6:a0:
                    86:e2:80:db:22:30:99:01:0f:0d:33:5d:ad:47:d8:
                    04:8f:8f:99:fa:1b:c4:cb:05:54:d4:9b:e3:e5:89:
                    40:80:f1:b5:a1:f4:97:2f:2c:93:21:f4:37:f8:de:
                    fe:12:3f:07:e9:f6:ef:bc:2a:49:2b:66:ed:bd:7a:
                    56:9c:27:1e:3c:cc:d5:de:28:51:6e:d3:0f:1f:37:
                    3f:c7:a5:5b:f4:6e:5a:50:d5:a5:0b:5c:9c:2c:2a:
                    7d:ce:59:dd:61:43:79:86:cd:57:06:e2:21:4a:85:
                    03:57:96:73:36:be:60:37:5d:38:18:72:e1:b5:67:
                    4d:00:94:9e:c6:68:66:19:85:0b:4e:0c:86:d0:79:
                    46:d7:0e:42:e5:5d:64:48:9e:a0:b7:c9:22:82:5f:
                    cd:5b:4f:7a:f4:a1:56:ea:50:c5:73:59:68:07:de:
                    01:31:42:bd:1a:d0:74:1b:5a:10:11:98:e7:59:81:
                    35:93:72:a1:36:b5:83:66:4e:3b:3f:f9:bf:72:ac:
                    32:d6:a3:84:58:18:89:70:17:ef:19:c3:56:cc:05:
                    a7:37:65:53:10:96:51:36:1f:83:ce:ac:61:4f:b0:
                    f8:af:2f:a9:83:dc:d9:24:24:9f:00:51:84:75:41:
                    ce:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:9A:88:85:65:93:C6:BF:9B:B4:F1:D9:C7:CD:DF:A2:08:6F:80:AA
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS49453.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.141.36.0/22
                  13.141.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         82:63:1b:d8:f4:94:ae:ce:78:7b:f2:6a:4a:47:f9:83:d1:95:
         98:41:c5:89:f3:fb:70:39:45:be:f9:55:b5:19:16:b3:c4:c1:
         77:a5:dd:94:02:2a:8d:90:0f:ce:d4:a8:0b:63:26:9b:50:ff:
         3e:89:a9:bc:1e:7f:4f:e8:ca:02:89:53:ad:77:29:ec:f3:4b:
         70:90:c1:3c:68:75:6c:cf:41:e4:c8:50:dd:76:13:e4:4e:bc:
         bf:a4:07:d5:3e:77:2d:58:0f:cf:5e:44:e3:ee:3c:f8:cf:27:
         7f:b8:b1:9e:95:68:b7:14:8b:82:83:4f:fb:df:a8:28:46:71:
         f7:aa:f9:40:e4:b7:7c:36:7c:66:29:55:9b:59:e2:fd:06:ae:
         96:7d:e6:22:e9:6b:c4:5e:19:f4:38:a6:79:6a:0b:35:45:7e:
         50:63:49:28:46:c5:fb:bd:22:01:d9:13:fa:60:38:85:23:e2:
         53:80:29:14:47:36:94:a2:2c:32:9d:e4:ef:1d:af:4e:bc:da:
         75:bf:61:81:c2:56:27:35:55:ea:fe:df:7f:99:b7:c5:1a:a7:
         62:fd:49:1f:e1:04:26:13:88:44:7f:97:f8:74:35:b6:79:73:
         90:64:33:64:2e:ae:64:ea:c3:2f:11:55:cb:25:a6:0e:a2:6a:
         83:27:cd:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 07:00:46 2026 by rpki-client