Route Origin Authorization

$ rpki-client -vvf rpki.sailx.co/repo/Sail-Internet-Inc/0/3134372e3138352e36302e302f32322d3232203d3e20333936303937.roa
File:                     3134372e3138352e36302e302f32322d3232203d3e20333936303937.roa (raw, json)
Hash identifier:          JxaRJUnNZJQKg84bQnEsPqX4+FBqX9PLN3OehLkW3gs=
Subject key identifier:   7F:8A:A0:4F:33:DA:13:56:35:A3:24:BA:6B:2B:90:7A:B4:40:E2:DE
Certificate issuer:       /CN=fb691a940315f6b597289468edf71aa0125e76755a78563c86
Certificate serial:       5CB6E1A645FCB52AFB26B068EDD93BA1048F90A4
Authority key identifier: DF:C5:50:97:68:EA:58:7E:63:8D:20:68:00:32:E0:FF:12:2B:D2:5A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dbc4bf5a-1d06-4a3f-9706-a18fa2d8670c/fb691a940315f6b597289468edf71aa0125e76755a78563c86.cer
Subject info access:      rsync://rpki.sailx.co/repo/Sail-Internet-Inc/0/3134372e3138352e36302e302f32322d3232203d3e20333936303937.roa
Signing time:             Wed 15 May 2024 19:32:03 +0000
ROA not before:           Wed 15 May 2024 19:27:03 +0000
ROA not after:            Wed 14 May 2025 19:32:03 +0000
asID:                     396097
IP address blocks:        147.185.60.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.sailx.co/repo/Sail-Internet-Inc/0/DFC5509768EA587E638D20680032E0FF122BD25A.crl
                          rsync://rpki.sailx.co/repo/Sail-Internet-Inc/0/DFC5509768EA587E638D20680032E0FF122BD25A.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dbc4bf5a-1d06-4a3f-9706-a18fa2d8670c/fb691a940315f6b597289468edf71aa0125e76755a78563c86.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dbc4bf5a-1d06-4a3f-9706-a18fa2d8670c/dbc4bf5a-1d06-4a3f-9706-a18fa2d8670c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dbc4bf5a-1d06-4a3f-9706-a18fa2d8670c/dbc4bf5a-1d06-4a3f-9706-a18fa2d8670c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dbc4bf5a-1d06-4a3f-9706-a18fa2d8670c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:59:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:b6:e1:a6:45:fc:b5:2a:fb:26:b0:68:ed:d9:3b:a1:04:8f:90:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb691a940315f6b597289468edf71aa0125e76755a78563c86
        Validity
            Not Before: May 15 19:27:03 2024 GMT
            Not After : May 14 19:32:03 2025 GMT
        Subject: CN=7F8AA04F33DA135635A324BA6B2B907AB440E2DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:3c:14:6c:e5:f9:a9:27:3d:90:44:bf:aa:ef:
                    ff:dc:57:70:54:b9:94:37:60:f9:1a:14:af:27:b8:
                    d2:4a:df:0a:0f:ee:8b:bc:f7:7a:10:74:e1:e6:68:
                    b7:01:f3:a6:56:14:5f:8d:2b:54:02:0d:be:fe:2a:
                    be:89:18:10:8a:8c:56:cb:4f:04:66:ca:61:76:31:
                    82:ad:c8:20:d0:b3:9d:ff:71:64:19:42:68:4e:ea:
                    2c:59:3a:d5:11:da:ce:82:d1:f1:4d:31:4b:60:f8:
                    cb:ac:25:22:57:cd:fe:fd:d6:67:cb:39:e6:d1:cd:
                    fa:67:c2:94:ff:30:81:dc:18:f3:c4:ac:fb:03:06:
                    b2:68:b0:77:06:14:1a:db:b2:ac:e3:6d:f2:12:e5:
                    90:af:48:a3:2d:53:1c:46:97:8c:08:07:dd:64:b4:
                    b2:c1:ea:2f:ed:9f:df:1e:d9:9f:d0:83:a8:2e:1d:
                    d4:eb:a9:a0:2b:5b:1d:a1:23:22:ee:65:66:1a:65:
                    59:c9:d2:2c:a1:3e:c2:12:c0:ab:fa:49:09:d0:f7:
                    ec:e9:d8:6a:d0:38:57:1d:2a:e3:fa:e9:9f:89:b9:
                    ac:e8:e5:d3:9f:62:cf:a8:1a:a3:5d:b9:2e:f2:04:
                    b0:4e:d6:46:f6:11:84:cc:04:a9:2d:b2:16:52:89:
                    8f:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:8A:A0:4F:33:DA:13:56:35:A3:24:BA:6B:2B:90:7A:B4:40:E2:DE
            X509v3 Authority Key Identifier:
                keyid:DF:C5:50:97:68:EA:58:7E:63:8D:20:68:00:32:E0:FF:12:2B:D2:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sailx.co/repo/Sail-Internet-Inc/0/DFC5509768EA587E638D20680032E0FF122BD25A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dbc4bf5a-1d06-4a3f-9706-a18fa2d8670c/fb691a940315f6b597289468edf71aa0125e76755a78563c86.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sailx.co/repo/Sail-Internet-Inc/0/3134372e3138352e36302e302f32322d3232203d3e20333936303937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.185.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         49:6a:99:15:af:57:b3:dd:4b:d2:f5:d2:b9:9d:c8:ef:33:57:
         18:62:99:88:9b:fa:7f:21:71:38:e6:ec:e7:32:ae:7d:c2:04:
         63:9b:a2:ab:29:35:67:63:12:c2:be:0f:6e:9b:e6:2b:b4:54:
         db:eb:bc:a7:1e:b4:0b:cf:26:a2:30:2d:85:e5:63:51:dc:7f:
         c3:9c:af:9e:59:c3:e9:cc:f8:3d:b1:d6:37:31:60:76:ec:06:
         3d:52:d7:6a:48:d6:96:ae:e7:d2:46:62:be:d5:cc:23:46:86:
         05:e4:c9:4a:80:86:b0:b7:cc:3e:1c:31:86:db:64:ee:73:a1:
         86:4d:19:a3:f1:ae:d0:eb:4b:5c:4d:20:58:c6:db:bf:10:f8:
         b1:99:b7:ed:51:58:b6:ce:63:54:17:f7:24:7a:f8:e3:06:23:
         aa:4a:ff:93:53:1d:29:1c:0f:f9:de:4f:ae:83:f1:fa:9d:92:
         72:db:50:1b:68:d2:99:bc:10:04:91:ed:b3:ff:04:75:4c:64:
         0e:4d:eb:43:29:d0:16:1a:98:1b:7f:60:b4:5c:72:f7:ea:c2:
         79:53:07:35:4f:97:80:1c:a1:5f:7c:6a:57:a8:3c:81:98:08:
         1c:07:28:18:a5:19:f2:3e:35:4c:1f:9f:60:48:b1:b6:6d:41:
         7d:57:1e:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:39:56 2024 by rpki-client on console-ams.rpki-client.org