Route Origin Authorization

$ rpki-client -vvf rpki.sailx.co/repo/Sail-Internet-Inc/0/3134372e3136302e36322e302f32332d3233203d3e20333936303937.roa
File:                     3134372e3136302e36322e302f32332d3233203d3e20333936303937.roa (raw, json)
Hash identifier:          MKo0pS3wP7lW8gcbEjF4opc5e8QgqvgCKgGM+WQYl70=
Subject key identifier:   77:61:1E:BC:5F:C2:C4:BD:57:8F:0E:89:86:4A:76:28:9B:28:7C:26
Certificate issuer:       /CN=fb691a940315f6b597289468edf71aa0125e76755a78563c86
Certificate serial:       6DBAFE8FC839FB9617E4DA3D3A5A414FF2C7946B
Authority key identifier: DF:C5:50:97:68:EA:58:7E:63:8D:20:68:00:32:E0:FF:12:2B:D2:5A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dbc4bf5a-1d06-4a3f-9706-a18fa2d8670c/fb691a940315f6b597289468edf71aa0125e76755a78563c86.cer
Subject info access:      rsync://rpki.sailx.co/repo/Sail-Internet-Inc/0/3134372e3136302e36322e302f32332d3233203d3e20333936303937.roa
Signing time:             Wed 15 May 2024 19:32:02 +0000
ROA not before:           Wed 15 May 2024 19:27:02 +0000
ROA not after:            Wed 14 May 2025 19:32:02 +0000
asID:                     396097
IP address blocks:        147.160.62.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.sailx.co/repo/Sail-Internet-Inc/0/DFC5509768EA587E638D20680032E0FF122BD25A.crl
                          rsync://rpki.sailx.co/repo/Sail-Internet-Inc/0/DFC5509768EA587E638D20680032E0FF122BD25A.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dbc4bf5a-1d06-4a3f-9706-a18fa2d8670c/fb691a940315f6b597289468edf71aa0125e76755a78563c86.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dbc4bf5a-1d06-4a3f-9706-a18fa2d8670c/dbc4bf5a-1d06-4a3f-9706-a18fa2d8670c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dbc4bf5a-1d06-4a3f-9706-a18fa2d8670c/dbc4bf5a-1d06-4a3f-9706-a18fa2d8670c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dbc4bf5a-1d06-4a3f-9706-a18fa2d8670c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:59:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:ba:fe:8f:c8:39:fb:96:17:e4:da:3d:3a:5a:41:4f:f2:c7:94:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb691a940315f6b597289468edf71aa0125e76755a78563c86
        Validity
            Not Before: May 15 19:27:02 2024 GMT
            Not After : May 14 19:32:02 2025 GMT
        Subject: CN=77611EBC5FC2C4BD578F0E89864A76289B287C26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:0c:d6:85:50:a4:86:12:a1:70:7b:98:7b:30:
                    ea:fa:8a:4e:52:a8:32:bd:f2:81:0d:01:82:8a:f9:
                    bc:10:c8:71:00:07:31:1e:bf:ad:64:3e:91:41:8b:
                    af:27:6c:d4:eb:1c:5c:02:f8:73:10:ed:84:06:10:
                    9d:bf:cc:39:47:0f:c2:db:50:8a:05:7c:48:4b:7d:
                    44:bd:df:7d:3b:ac:3e:d1:bc:7c:c0:1d:6d:6c:94:
                    d9:24:eb:07:cc:40:ca:0e:39:73:47:7d:6f:f8:01:
                    08:63:95:b3:00:13:ad:c2:8f:9a:ce:31:c5:10:5f:
                    ea:8f:e2:5c:6f:42:67:85:4f:97:b3:ed:1c:89:54:
                    90:e2:ca:35:30:33:48:51:e1:ae:17:7b:dc:d1:c8:
                    80:e9:66:b9:59:b3:fa:6a:10:6a:3c:3f:c6:e7:34:
                    94:a9:f7:9a:a6:a3:5c:ee:a0:b7:81:20:21:0d:e4:
                    0b:30:f9:9e:8e:a3:b3:7c:74:ff:e4:f8:4a:aa:37:
                    b5:5a:88:9e:61:87:1a:90:ac:24:79:53:16:c4:1b:
                    25:a6:9f:0b:67:62:2b:2e:da:78:d5:7f:c9:14:41:
                    44:c9:54:85:2a:15:18:3a:c5:b4:98:7c:8d:fd:fe:
                    de:46:5b:71:b2:f6:f0:4c:58:36:cb:a2:6c:d2:a5:
                    76:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:61:1E:BC:5F:C2:C4:BD:57:8F:0E:89:86:4A:76:28:9B:28:7C:26
            X509v3 Authority Key Identifier:
                keyid:DF:C5:50:97:68:EA:58:7E:63:8D:20:68:00:32:E0:FF:12:2B:D2:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sailx.co/repo/Sail-Internet-Inc/0/DFC5509768EA587E638D20680032E0FF122BD25A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dbc4bf5a-1d06-4a3f-9706-a18fa2d8670c/fb691a940315f6b597289468edf71aa0125e76755a78563c86.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sailx.co/repo/Sail-Internet-Inc/0/3134372e3136302e36322e302f32332d3233203d3e20333936303937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.160.62.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a5:e0:da:13:80:24:3b:e1:b9:50:7b:0c:9d:69:e8:f1:7e:15:
         41:7b:da:fd:d9:c6:c2:0f:b3:3d:b7:a6:22:e7:64:d9:9b:bf:
         b3:c7:0c:d5:6e:31:3d:68:44:cb:ea:ba:86:b3:6e:43:53:bd:
         e9:58:0e:f9:03:b3:19:6d:c1:85:64:98:4a:43:46:d6:47:ed:
         07:16:f6:22:f0:d7:5f:e9:11:91:e8:f9:cb:a0:51:e9:0b:83:
         79:fa:02:c7:0f:db:bc:2f:78:5b:a9:48:ca:e2:ab:91:d4:72:
         63:00:a1:e5:13:cc:fe:94:e3:89:34:4a:ea:ed:40:d2:43:f1:
         b2:39:d9:42:1d:a5:ca:ed:7f:b7:70:54:4b:59:35:29:88:f6:
         1b:20:48:9c:93:5a:48:72:94:4d:bc:95:13:82:2a:ed:58:99:
         7f:6d:51:db:fb:9f:32:0f:0a:0c:7e:c9:bf:35:40:6e:50:0b:
         ac:f8:aa:a7:cd:58:0e:ab:b6:10:26:2c:42:25:c5:22:3b:25:
         d6:80:0d:c7:d7:83:c3:ee:17:90:0d:2b:c5:e8:23:d3:89:15:
         3e:0b:e2:21:58:c9:37:87:58:0b:3f:a6:67:3c:c7:67:26:58:
         4d:f5:b8:7b:2b:e7:bb:03:7c:00:e7:5e:8b:a1:17:d4:e3:a9:
         28:f0:eb:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:39:56 2024 by rpki-client on console-ams.rpki-client.org