Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS9304.roa
File:                     AS9304.roa (raw, json)
Hash identifier:          k6Rf2Btl+Kedyywwf2OeT0bnNY/HcFW848jMgZVH924=
Subject key identifier:   75:35:FD:E0:8D:D9:86:09:9F:B1:E0:82:A9:79:86:FA:C7:E9:D2:3A
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       18FD358BDCDAF9E27ED67A27ED58229FDFC11D34
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS9304.roa
Signing time:             Sun 05 Jul 2026 18:05:22 +0000
ROA not before:           Sun 05 Jul 2026 18:00:22 +0000
ROA not after:            Sun 04 Jul 2027 18:05:22 +0000
asID:                     9304
IP address blocks:        13.141.48.0/22 maxlen: 24
                          169.40.102.0/23 maxlen: 23
                          169.40.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 11:03:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:fd:35:8b:dc:da:f9:e2:7e:d6:7a:27:ed:58:22:9f:df:c1:1d:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: Jul  5 18:00:22 2026 GMT
            Not After : Jul  4 18:05:22 2027 GMT
        Subject: CN=7535FDE08DD986099FB1E082A97986FAC7E9D23A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:11:57:fe:77:aa:0f:56:07:95:2c:c9:00:4c:
                    b1:c1:62:dc:3b:87:b2:78:bb:9a:2c:da:89:e8:40:
                    fe:9c:c8:fe:52:32:d9:8d:c8:89:86:13:ea:29:c4:
                    59:c8:8b:04:02:d6:08:ce:a3:3b:f5:90:dd:e7:fe:
                    cc:1a:64:dc:82:e0:04:e2:4f:45:f4:7f:d7:d9:2a:
                    d9:6b:4c:2d:18:ed:e4:29:a4:fe:64:71:19:ce:b9:
                    fb:10:b0:0a:f5:c2:c3:44:eb:7c:8b:5a:54:f7:6e:
                    60:84:79:6d:86:12:01:4d:d0:54:d8:ff:82:81:e9:
                    17:8a:a6:26:c3:ab:90:68:63:1c:30:6e:30:63:ca:
                    ad:39:6c:f1:c2:4c:a1:25:67:9e:1a:60:a4:0e:92:
                    f0:df:4d:72:72:e7:e5:e0:45:10:96:46:e8:cd:c8:
                    b8:02:d1:1d:08:cc:27:83:7f:ca:89:e2:bf:e6:b0:
                    e6:d6:b6:d2:2e:a1:71:98:93:98:a1:32:56:d5:b4:
                    a1:82:9a:1c:c2:5a:f9:5c:26:19:a2:12:a3:a9:2a:
                    96:7b:b1:9a:63:56:a5:63:be:53:87:25:cf:14:e5:
                    7e:69:02:58:b5:f3:80:33:57:01:a3:11:c4:54:24:
                    0b:e4:ae:5c:47:95:ac:af:50:63:98:cf:fc:ea:50:
                    c4:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:35:FD:E0:8D:D9:86:09:9F:B1:E0:82:A9:79:86:FA:C7:E9:D2:3A
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS9304.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.141.48.0/22
                  169.40.102.0/23
                  169.40.153.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b8:e4:57:1b:1e:b3:93:a0:c7:d8:4d:df:23:f1:8f:f6:d4:35:
         71:02:2e:6b:36:a4:21:c2:f9:bf:7f:0c:53:9b:26:f6:8a:f4:
         7c:72:2f:db:b1:10:ea:d5:2b:87:cf:a0:c9:26:11:3d:bc:a1:
         c4:00:66:d8:67:a1:ec:be:22:8f:67:46:79:97:32:f6:4b:c3:
         fb:b8:d7:22:2e:e5:e9:84:ec:01:0f:9e:e8:53:89:04:b6:91:
         0c:42:8f:a8:e4:f3:a7:37:d0:99:52:74:eb:af:f4:d0:0f:74:
         f4:e6:42:d5:43:ef:c8:76:25:99:a3:09:61:aa:b5:ef:7a:5c:
         9f:6f:fd:aa:7b:2f:0f:f6:30:44:8a:dd:53:ed:b5:0f:0f:0f:
         f1:ad:ae:b3:35:16:0d:06:d2:0c:36:e6:dd:c0:9c:84:d5:a2:
         1a:ec:3b:2d:d6:36:2b:2c:93:77:50:f8:c0:ef:dd:01:5b:fc:
         20:c4:cf:a5:1c:e5:59:b7:5b:08:d9:09:85:40:f3:be:ba:41:
         d7:71:5e:f2:73:0f:dc:17:73:91:2c:08:48:58:d4:90:e2:70:
         56:a6:f5:de:90:f0:60:d0:72:0c:df:4e:b1:84:ff:ae:07:f3:
         c2:84:ff:15:cc:20:4c:d1:84:01:56:ca:2c:b6:23:2b:a8:ff:
         5e:37:e0:a1
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUGP01i9za+eJ+1non7Vgin9/BHTQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUVGNzY2RjEwM0IyRUY5OURGOEM3MTk3OEE3RkU1MTlE
NzMwQjE1NTAeFw0yNjA3MDUxODAwMjJaFw0yNzA3MDQxODA1MjJaMDMxMTAvBgNV
BAMTKDc1MzVGREUwOEREOTg2MDk5RkIxRTA4MkE5Nzk4NkZBQzdFOUQyM0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIEVf+d6oPVgeVLMkATLHBYtw7
h7J4u5os2onoQP6cyP5SMtmNyImGE+opxFnIiwQC1gjOozv1kN3n/swaZNyC4ATi
T0X0f9fZKtlrTC0Y7eQppP5kcRnOufsQsAr1wsNE63yLWlT3bmCEeW2GEgFN0FTY
/4KB6ReKpibDq5BoYxwwbjBjyq05bPHCTKElZ54aYKQOkvDfTXJy5+XgRRCWRujN
yLgC0R0IzCeDf8qJ4r/msObWttIuoXGYk5ihMlbVtKGCmhzCWvlcJhmiEqOpKpZ7
sZpjVqVjvlOHJc8U5X5pAli184AzVwGjEcRUJAvkrlxHlayvUGOYz/zqUMRZAgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQUdTX94I3ZhgmfseCCqXmG+sfp0jowHwYDVR0j
BBgwFoAUrvdm8QOy75nfjHGXin/lGdcwsVUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
MzAzMjdiOWUtMjI3YS00ZWJkLTgyNWItM2I5ODA5NWRjOTI3LTAvMC9BRUY3NjZG
MTAzQjJFRjk5REY4QzcxOTc4QTdGRTUxOUQ3MzBCMTU1LmNybDCBngYIKwYBBQUH
AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1
OTBiOTlhZi80L0FFRjc2NkYxMDNCMkVGOTlERjhDNzE5NzhBN0ZFNTE5RDczMEIx
NTUuY2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZUcnN5bmM6Ly9yLm1h
Z2VsbGFuLmlweG8uY29tL3JlcG8vMzAzMjdiOWUtMjI3YS00ZWJkLTgyNWItM2I5
ODA5NWRjOTI3LTAvMC9BUzkzMDQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH
DgIwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgABMBIDBAINjTADBAGpKGYDBACpKJkw
DQYJKoZIhvcNAQELBQADggEBALjkVxses5Ogx9hN3yPxj/bUNXECLms2pCHC+b9/
DFObJvaK9HxyL9uxEOrVK4fPoMkmET28ocQAZthnoey+Io9nRnmXMvZLw/u41yIu
5emE7AEPnuhTiQS2kQxCj6jk86c30JlSdOuv9NAPdPTmQtVD78h2JZmjCWGqte96
XJ9v/ap7Lw/2MESK3VPttQ8PD/GtrrM1Fg0G0gw25t3AnITVohrsOy3WNissk3dQ
+MDv3QFb/CDEz6Uc5Vm3WwjZCYVA8766QddxXvJzD9wXc5EsCEhY1JDicFam9d6Q
8GDQcgzfTrGE/64H88KE/xXMIEzRhAFWyiy2Iyuo/1434KE=
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:54:45 2026 by rpki-client