Route Origin Authorization

$ rpki-client -vvf rpki.sailx.co/repo/Sail-Internet-Inc/0/3134372e3138352e34362e302f32332d3233203d3e20333936303937.roa
File:                     3134372e3138352e34362e302f32332d3233203d3e20333936303937.roa (raw, json)
Hash identifier:          nUIAjcs2H4FJupNEWRx7yNNLVlpfTwli2in2j2HivLw=
Subject key identifier:   C1:37:05:B7:32:3C:36:26:81:C1:02:63:27:41:98:55:3D:28:2D:75
Certificate issuer:       /CN=fb691a940315f6b597289468edf71aa0125e76755a78563c86
Certificate serial:       40ED7B0309E12AF4CB17F89B84CAC1DFDD12797E
Authority key identifier: DF:C5:50:97:68:EA:58:7E:63:8D:20:68:00:32:E0:FF:12:2B:D2:5A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dbc4bf5a-1d06-4a3f-9706-a18fa2d8670c/fb691a940315f6b597289468edf71aa0125e76755a78563c86.cer
Subject info access:      rsync://rpki.sailx.co/repo/Sail-Internet-Inc/0/3134372e3138352e34362e302f32332d3233203d3e20333936303937.roa
Signing time:             Wed 16 Apr 2025 19:49:08 +0000
ROA not before:           Wed 16 Apr 2025 19:44:08 +0000
ROA not after:            Wed 15 Apr 2026 19:49:08 +0000
asID:                     396097
IP address blocks:        147.185.46.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.sailx.co/repo/Sail-Internet-Inc/0/DFC5509768EA587E638D20680032E0FF122BD25A.crl
                          rsync://rpki.sailx.co/repo/Sail-Internet-Inc/0/DFC5509768EA587E638D20680032E0FF122BD25A.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dbc4bf5a-1d06-4a3f-9706-a18fa2d8670c/fb691a940315f6b597289468edf71aa0125e76755a78563c86.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dbc4bf5a-1d06-4a3f-9706-a18fa2d8670c/dbc4bf5a-1d06-4a3f-9706-a18fa2d8670c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dbc4bf5a-1d06-4a3f-9706-a18fa2d8670c/dbc4bf5a-1d06-4a3f-9706-a18fa2d8670c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dbc4bf5a-1d06-4a3f-9706-a18fa2d8670c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 20 Apr 2025 01:08:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:ed:7b:03:09:e1:2a:f4:cb:17:f8:9b:84:ca:c1:df:dd:12:79:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb691a940315f6b597289468edf71aa0125e76755a78563c86
        Validity
            Not Before: Apr 16 19:44:08 2025 GMT
            Not After : Apr 15 19:49:08 2026 GMT
        Subject: CN=C13705B7323C362681C10263274198553D282D75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:70:6c:76:a2:59:c2:60:37:39:be:58:af:55:
                    d5:8f:56:98:e5:f6:76:7a:e9:2e:5a:9c:9c:9c:b3:
                    53:96:3f:eb:0f:54:54:0e:87:fa:12:74:aa:26:d2:
                    66:7d:74:b9:83:55:b1:ea:91:c2:88:cb:2e:bd:82:
                    de:14:8a:3b:68:39:4a:19:bf:e4:37:4d:8c:0e:26:
                    80:2c:c7:b9:9c:00:df:65:0a:9a:61:65:32:d4:5e:
                    b6:eb:a6:9e:a1:82:09:cd:a9:8e:ae:b2:53:37:f2:
                    c0:d6:75:51:b4:c8:a0:17:c8:c4:80:65:09:c5:4d:
                    49:e2:e1:34:d2:e4:04:b4:17:f9:8d:79:b9:60:df:
                    c1:01:55:d9:bd:19:a9:65:62:f9:9a:f8:5c:a7:5a:
                    8f:d8:8f:d9:c8:2a:69:a1:e7:62:9c:b2:1d:78:1d:
                    c9:d6:1a:df:9e:b5:2e:8f:46:75:30:24:60:72:cd:
                    72:cb:cb:81:bf:25:19:44:14:5b:f9:ff:17:f9:78:
                    1a:1a:92:9f:1a:3e:f3:e4:3d:b6:27:0d:59:d7:df:
                    f3:27:a9:d2:a9:0e:11:fa:be:60:26:dd:41:47:c3:
                    7d:81:23:45:00:c5:77:a0:11:21:f2:da:fd:4a:66:
                    a6:41:28:7e:2d:f7:e8:62:cb:df:fb:92:f5:ca:3f:
                    0e:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:37:05:B7:32:3C:36:26:81:C1:02:63:27:41:98:55:3D:28:2D:75
            X509v3 Authority Key Identifier:
                keyid:DF:C5:50:97:68:EA:58:7E:63:8D:20:68:00:32:E0:FF:12:2B:D2:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sailx.co/repo/Sail-Internet-Inc/0/DFC5509768EA587E638D20680032E0FF122BD25A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dbc4bf5a-1d06-4a3f-9706-a18fa2d8670c/fb691a940315f6b597289468edf71aa0125e76755a78563c86.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sailx.co/repo/Sail-Internet-Inc/0/3134372e3138352e34362e302f32332d3233203d3e20333936303937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.185.46.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3b:ee:91:78:57:8e:21:30:d6:b1:0d:b1:a8:5f:15:fa:08:e5:
         26:81:a2:6e:4a:f2:36:25:27:a3:aa:0e:74:77:9c:88:8a:c4:
         44:4c:02:39:68:98:69:52:38:45:57:fa:e2:a2:52:5d:67:8f:
         1f:ff:61:ec:c7:d1:b6:9a:f4:97:cb:c9:b1:f5:2d:70:34:d8:
         9b:d0:5a:b6:3f:59:c0:89:d7:8d:23:b0:7b:ea:9f:98:29:63:
         f6:5a:3c:31:cf:d0:b2:75:de:15:48:3b:ec:88:f2:3b:80:eb:
         89:88:f1:60:76:83:48:e6:75:3a:56:8f:bb:5b:10:8a:20:06:
         3a:9b:94:81:21:c0:23:06:a7:16:46:92:d6:f9:b4:e2:34:b1:
         22:0e:a1:09:68:cd:cc:b0:bf:d3:f9:74:98:00:4c:90:01:4e:
         ce:da:31:5c:fa:75:8e:c2:c6:59:25:2d:14:8b:b0:55:09:e7:
         fc:ae:6e:f9:95:2b:14:32:92:da:7f:dd:7b:4a:08:86:fa:33:
         eb:5b:9a:c2:55:d2:20:ed:ff:a8:37:4f:73:8d:de:d9:1d:4d:
         80:fe:13:af:5e:31:36:04:89:f0:7e:cf:75:e6:d1:e1:08:d9:
         79:7f:04:a8:59:45:7e:48:0f:59:76:23:26:d5:79:67:89:bc:
         86:03:ff:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 11:36:54 2025 by rpki-client