Route Origin Authorization

$ rpki-client -vvf rpki.sailx.co/repo/Sail-Internet-Inc/0/3134372e39322e38382e302f32322d3232203d3e20333936303937.roa
File:                     3134372e39322e38382e302f32322d3232203d3e20333936303937.roa (raw, json)
Hash identifier:          pDLz27AjXARyaQiwH2ecww3IV3KIS+ktNI0xiOzPC4U=
Subject key identifier:   6A:D5:3A:47:35:09:97:F7:8D:53:53:E4:A6:1E:44:57:2C:FA:56:EB
Certificate issuer:       /CN=fb691a940315f6b597289468edf71aa0125e76755a78563c86
Certificate serial:       523C40480997B1C481EB066CAD020EE2B197B79F
Authority key identifier: DF:C5:50:97:68:EA:58:7E:63:8D:20:68:00:32:E0:FF:12:2B:D2:5A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dbc4bf5a-1d06-4a3f-9706-a18fa2d8670c/fb691a940315f6b597289468edf71aa0125e76755a78563c86.cer
Subject info access:      rsync://rpki.sailx.co/repo/Sail-Internet-Inc/0/3134372e39322e38382e302f32322d3232203d3e20333936303937.roa
Signing time:             Wed 15 May 2024 19:32:02 +0000
ROA not before:           Wed 15 May 2024 19:27:02 +0000
ROA not after:            Wed 14 May 2025 19:32:02 +0000
asID:                     396097
IP address blocks:        147.92.88.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.sailx.co/repo/Sail-Internet-Inc/0/DFC5509768EA587E638D20680032E0FF122BD25A.crl
                          rsync://rpki.sailx.co/repo/Sail-Internet-Inc/0/DFC5509768EA587E638D20680032E0FF122BD25A.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dbc4bf5a-1d06-4a3f-9706-a18fa2d8670c/fb691a940315f6b597289468edf71aa0125e76755a78563c86.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dbc4bf5a-1d06-4a3f-9706-a18fa2d8670c/dbc4bf5a-1d06-4a3f-9706-a18fa2d8670c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dbc4bf5a-1d06-4a3f-9706-a18fa2d8670c/dbc4bf5a-1d06-4a3f-9706-a18fa2d8670c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dbc4bf5a-1d06-4a3f-9706-a18fa2d8670c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:59:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:3c:40:48:09:97:b1:c4:81:eb:06:6c:ad:02:0e:e2:b1:97:b7:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb691a940315f6b597289468edf71aa0125e76755a78563c86
        Validity
            Not Before: May 15 19:27:02 2024 GMT
            Not After : May 14 19:32:02 2025 GMT
        Subject: CN=6AD53A47350997F78D5353E4A61E44572CFA56EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:71:bc:3b:af:65:54:ee:fd:24:28:6f:bd:67:
                    74:d0:db:94:8b:08:6c:15:fa:5e:11:ae:89:99:62:
                    4f:21:0f:25:ad:65:ef:77:b4:63:0e:ce:6b:35:53:
                    cb:80:e0:a0:79:1e:cf:bb:1f:14:fc:0a:63:c8:e0:
                    06:bd:01:f7:b8:48:38:e0:23:db:e8:c9:58:22:c1:
                    65:66:23:36:82:15:fd:f9:be:6b:b0:ca:d5:5b:8a:
                    4b:9b:d9:87:de:93:c3:5b:7d:c4:9e:f8:ba:11:40:
                    55:65:50:6c:d3:0c:23:6c:53:ad:dc:8e:3d:a8:a5:
                    7c:a7:03:a1:3d:1a:ad:1e:26:40:c3:24:d4:b2:ed:
                    e7:39:ea:d0:89:16:c7:04:42:11:0b:b1:45:15:1f:
                    e3:79:fd:20:96:06:8d:ef:80:4a:03:63:45:31:0b:
                    05:14:bd:1e:70:de:54:8e:de:4c:4a:03:43:ae:bd:
                    45:d6:8b:fd:28:98:18:55:86:1f:f3:82:c7:09:d6:
                    fe:23:13:df:a8:69:a0:21:d7:cf:5f:ae:aa:08:33:
                    26:25:9f:83:be:f2:e6:57:14:a5:2b:bf:50:d3:b9:
                    95:9e:53:24:d3:53:47:e5:28:6b:01:c6:3d:ce:f3:
                    62:83:a0:ce:7e:29:66:4a:dd:59:12:a5:ad:e8:78:
                    f0:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:D5:3A:47:35:09:97:F7:8D:53:53:E4:A6:1E:44:57:2C:FA:56:EB
            X509v3 Authority Key Identifier:
                keyid:DF:C5:50:97:68:EA:58:7E:63:8D:20:68:00:32:E0:FF:12:2B:D2:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sailx.co/repo/Sail-Internet-Inc/0/DFC5509768EA587E638D20680032E0FF122BD25A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dbc4bf5a-1d06-4a3f-9706-a18fa2d8670c/fb691a940315f6b597289468edf71aa0125e76755a78563c86.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sailx.co/repo/Sail-Internet-Inc/0/3134372e39322e38382e302f32322d3232203d3e20333936303937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.92.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5c:a8:c3:82:29:0a:38:a4:0e:18:3a:d5:5d:78:2e:e1:f1:18:
         91:cd:20:4a:b1:ee:bf:24:e6:80:de:4c:a4:4d:94:5b:a0:fb:
         da:50:01:63:17:10:3f:6f:0a:00:2d:bb:f3:e6:a2:fa:d0:4c:
         85:72:07:12:93:cd:08:c0:d4:55:da:94:07:e6:0a:48:66:70:
         03:cb:83:d3:40:8b:fd:9e:25:5c:05:83:b6:18:f6:db:79:1e:
         c7:fc:9f:9f:22:35:e5:00:4b:de:16:86:79:c9:50:79:39:ca:
         e8:50:40:d5:63:1e:64:db:2c:60:9a:7d:8b:53:15:94:f9:44:
         5d:47:30:ea:b6:1b:96:00:d3:25:1b:ef:5a:22:d2:1b:5a:bb:
         81:02:e0:21:05:4a:01:e0:53:74:99:80:e9:7b:99:10:c3:f7:
         cb:7f:4d:54:a7:63:ef:cc:73:29:58:70:76:90:0e:09:d2:d1:
         72:f6:57:ea:ad:44:83:7f:b9:1c:8c:13:a2:2e:cf:15:cb:b5:
         62:91:7a:30:87:a6:f1:9a:8c:34:ee:00:5f:3a:17:d1:b3:f6:
         f9:41:b1:1e:aa:6b:1b:b9:84:ba:56:bf:4e:02:8c:ac:68:32:
         a4:dc:f8:1d:03:0e:09:5c:e6:bf:7c:a2:53:f6:5c:0e:f6:2a:
         89:95:f6:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:39:56 2024 by rpki-client on console-ams.rpki-client.org