Route Origin Authorization

$ rpki-client -vvf rpki.sailx.co/repo/Sail-Internet-Inc/0/3134372e3138352e36302e302f32322d3232203d3e20333936303937.roa
File:                     3134372e3138352e36302e302f32322d3232203d3e20333936303937.roa (raw, json)
Hash identifier:          v129hhdvs6X3mzLTcY/gN9PKXokeDTtUILu7KkDeqss=
Subject key identifier:   97:D7:8F:30:A5:E4:CF:C6:77:86:64:43:22:D9:08:15:93:E2:84:B2
Certificate issuer:       /CN=fb691a940315f6b597289468edf71aa0125e76755a78563c86
Certificate serial:       078F05215D7B80BFE15807352551990BE73942E8
Authority key identifier: DF:C5:50:97:68:EA:58:7E:63:8D:20:68:00:32:E0:FF:12:2B:D2:5A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dbc4bf5a-1d06-4a3f-9706-a18fa2d8670c/fb691a940315f6b597289468edf71aa0125e76755a78563c86.cer
Subject info access:      rsync://rpki.sailx.co/repo/Sail-Internet-Inc/0/3134372e3138352e36302e302f32322d3232203d3e20333936303937.roa
Signing time:             Wed 16 Apr 2025 19:49:08 +0000
ROA not before:           Wed 16 Apr 2025 19:44:08 +0000
ROA not after:            Wed 15 Apr 2026 19:49:08 +0000
asID:                     396097
IP address blocks:        147.185.60.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.sailx.co/repo/Sail-Internet-Inc/0/DFC5509768EA587E638D20680032E0FF122BD25A.crl
                          rsync://rpki.sailx.co/repo/Sail-Internet-Inc/0/DFC5509768EA587E638D20680032E0FF122BD25A.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dbc4bf5a-1d06-4a3f-9706-a18fa2d8670c/fb691a940315f6b597289468edf71aa0125e76755a78563c86.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dbc4bf5a-1d06-4a3f-9706-a18fa2d8670c/dbc4bf5a-1d06-4a3f-9706-a18fa2d8670c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dbc4bf5a-1d06-4a3f-9706-a18fa2d8670c/dbc4bf5a-1d06-4a3f-9706-a18fa2d8670c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dbc4bf5a-1d06-4a3f-9706-a18fa2d8670c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 20 Apr 2025 01:08:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:8f:05:21:5d:7b:80:bf:e1:58:07:35:25:51:99:0b:e7:39:42:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb691a940315f6b597289468edf71aa0125e76755a78563c86
        Validity
            Not Before: Apr 16 19:44:08 2025 GMT
            Not After : Apr 15 19:49:08 2026 GMT
        Subject: CN=97D78F30A5E4CFC67786644322D9081593E284B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:92:b2:2a:a0:53:87:78:b5:42:9a:15:c3:4e:
                    49:6b:ce:eb:23:d2:fc:75:eb:d9:7d:ef:b5:7b:d7:
                    ba:20:c6:58:7e:aa:98:9e:b3:df:61:2b:af:e3:d2:
                    d6:00:12:55:84:d2:00:74:74:1a:29:9c:cb:3c:6e:
                    fc:d8:b6:2c:dd:dd:09:9d:e9:c5:b4:f9:94:7e:46:
                    0e:d3:90:da:6f:e9:d4:5a:b6:e8:96:d2:bc:46:45:
                    78:98:09:49:0d:54:99:a9:1a:a6:c1:88:30:7d:24:
                    f2:99:4c:da:7b:25:3f:dd:39:3c:f1:b1:ed:b8:ef:
                    74:5c:bf:5c:e2:0c:a0:c6:8b:49:52:b8:c4:7a:e8:
                    3b:2a:ec:36:e6:4c:b6:91:70:7b:77:24:37:fa:4c:
                    be:c4:02:64:ca:21:19:22:66:3e:9a:0d:ef:46:55:
                    8e:95:77:2c:50:01:5c:61:f8:f7:08:a9:21:ce:8c:
                    1a:fa:72:c3:f8:52:df:b0:11:07:5a:0e:ff:ab:0e:
                    5e:98:b4:5a:f2:c1:f5:95:fc:00:7d:82:72:51:27:
                    c6:0f:49:23:11:c8:92:58:54:4d:32:e3:79:19:c2:
                    e5:a8:c6:cd:e0:b6:fd:52:f5:6f:55:c1:1d:d5:9c:
                    b7:cc:25:b3:2a:37:21:78:bc:cb:f5:af:78:9e:ad:
                    21:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:D7:8F:30:A5:E4:CF:C6:77:86:64:43:22:D9:08:15:93:E2:84:B2
            X509v3 Authority Key Identifier:
                keyid:DF:C5:50:97:68:EA:58:7E:63:8D:20:68:00:32:E0:FF:12:2B:D2:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sailx.co/repo/Sail-Internet-Inc/0/DFC5509768EA587E638D20680032E0FF122BD25A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dbc4bf5a-1d06-4a3f-9706-a18fa2d8670c/fb691a940315f6b597289468edf71aa0125e76755a78563c86.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sailx.co/repo/Sail-Internet-Inc/0/3134372e3138352e36302e302f32322d3232203d3e20333936303937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.185.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2d:c1:72:f4:cb:00:d9:b9:5c:c1:de:5f:70:55:fb:3a:b6:f2:
         1a:d6:2d:3d:ec:5f:87:13:9d:27:0e:f9:1e:60:46:50:bf:42:
         42:19:30:77:81:b9:71:39:6a:46:04:93:2a:c1:9b:23:14:a7:
         1c:af:eb:e0:8d:90:05:77:8d:b2:c2:e3:98:8b:b5:1d:6b:c2:
         24:f0:43:e3:e9:eb:52:c6:cd:d7:05:09:c2:47:f6:f5:bf:72:
         5c:24:b5:a1:86:2c:16:07:3c:88:e8:c9:75:11:15:03:42:ec:
         b3:55:1e:02:1c:49:c9:9e:e0:e6:6e:f2:50:80:3c:c3:65:96:
         5c:3e:bc:fb:8e:32:75:ed:06:00:c2:03:eb:cf:72:44:53:c5:
         ea:20:d7:ba:1d:56:47:eb:05:d6:49:82:4d:ce:28:0a:15:ec:
         8c:8a:e4:78:a7:d5:36:67:1b:e2:0c:42:43:b0:cf:ed:bb:f5:
         6b:43:5a:04:64:25:ed:49:e7:8e:4b:a8:f2:e2:fc:09:67:24:
         eb:9d:da:b0:64:30:20:03:3f:06:a3:75:eb:ac:3d:58:02:62:
         c8:ba:27:85:e7:ab:6b:bd:a5:ad:93:e7:71:6f:51:53:42:ec:
         8d:27:4a:4a:39:fa:7f:72:dd:b2:28:d1:6b:c2:1d:7b:c6:e5:
         92:ba:25:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 11:33:47 2025 by rpki-client